$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json) Hash identifier: YFY3mXbEMryYMEHAzMo3dwN+u0SgPsznr0CJZQKUY5M= Subject key identifier: B4:E6:91:ED:CB:4A:1B:A2:36:92:B8:0A:B1:9F:90:7C:29:83:B8:F0 Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft Manifest number: 085E Signing time: Sat 28 Mar 2026 20:37:05 +0000 Manifest this update: Sat 28 Mar 2026 20:37:05 +0000 Manifest next update: Sat 04 Apr 2026 20:37:05 +0000 Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: lVdx3DG526g8rVCqT9CWC31ypE1fc/Bhfx8mbhBucEA=) 2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI=) 3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: 5RUGr84S9u/MYGYJzdR1/AUpkucviMpdR/eHj0IncTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Mar 28 20:37:05 2026 GMT Not After : Apr 4 20:37:05 2026 GMT Subject: CN=69c83bf1-5e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:58:12:c1:2a:57:60:16:c6:e1:93:83:3a: 4b:86:e8:59:cd:fa:b9:a3:4c:63:37:8c:3c:da:b4: 82:79:65:04:82:78:30:d3:fa:3e:11:b9:9a:cb:02: d5:a6:9b:4a:a8:9f:af:29:68:6d:8b:d8:fc:af:b9: b4:48:86:03:b1:c2:32:65:01:2a:87:0f:e5:ae:f3: 6f:bf:b3:2f:0e:a5:b6:09:17:f6:40:d3:de:fe:a6: d3:af:d0:dd:13:51:bb:0b:e9:cf:3a:a6:98:9c:fb: b5:4d:4e:9b:66:f7:8a:f2:a1:02:b8:15:0b:9b:35: 2c:a0:b4:d4:7f:e1:43:31:ad:85:f5:f5:a0:7a:4f: 4d:95:e6:41:cc:4f:94:bb:56:7a:ff:f7:9a:84:51: f2:75:2f:a3:8d:e7:4b:15:b3:a8:fc:0b:ed:8f:d9: 9c:a7:20:19:58:b1:d9:f3:90:2a:45:92:9b:50:45: 5c:02:75:07:f2:eb:12:9b:aa:cf:f3:26:4b:a4:17: ca:e7:7c:51:5a:5e:f0:bb:80:5c:34:79:ce:d3:28: 40:16:e8:fa:5e:c5:51:98:a6:d7:85:66:13:91:bf: a0:1c:90:4a:32:42:0c:c5:b6:f2:74:0b:c7:70:ca: 44:64:e1:62:a3:1c:7a:47:ae:32:29:c2:61:78:fe: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:91:ED:CB:4A:1B:A2:36:92:B8:0A:B1:9F:90:7C:29:83:B8:F0 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b9:4a:a0:d1:0c:b9:39:95:cb:dd:a1:94:c8:5f:6c:41:a1: 93:92:a7:9f:63:a1:7d:2b:48:64:2f:32:2f:63:de:62:3a:c7: 43:44:72:7f:fe:a9:d0:84:fe:00:6d:ab:11:34:b0:bf:84:64: fe:28:42:45:39:99:cb:17:64:67:99:99:e4:cc:be:cc:9d:47: 5f:b9:44:cc:23:56:5e:81:fd:cf:fd:7e:36:be:63:ef:c5:aa: a3:88:65:de:18:a6:90:e6:50:6e:3f:ee:35:34:b3:04:36:90: 6a:8d:5c:d5:89:2e:27:c1:4f:d0:57:9b:ca:b1:3a:63:98:7a: da:52:50:41:41:ee:7e:93:c7:10:86:d2:aa:a3:4c:63:1c:17: 1e:f2:70:1d:1d:cd:15:5d:ac:5c:d6:ee:24:a1:1f:93:9d:6b: 07:61:ab:5e:b5:ee:90:f4:8e:81:da:8c:e1:54:47:4a:27:aa: d6:17:82:5b:89:8e:e8:67:7c:a5:8d:92:77:76:1c:aa:36:3f: b0:e2:bd:88:fb:b4:b8:09:90:18:9c:80:bb:16:3b:0e:bb:c6: 11:8c:69:ea:73:c4:f3:ec:d3:10:4d:7f:28:92:03:e4:49:07: 88:4a:79:e7:95:72:e1:55:0f:5a:df:2f:12:85:de:d9:87:6b: 96:87:82:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjYwMzI4MjAzNzA1WhcNMjYwNDA0MjAzNzA1WjAYMRYwFAYD VQQDEw02OWM4M2JmMS01ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7BYEsEqV2AWxuGTgzpLhuhZzfq5o0xjN4w82rSCeWUEgngw0/o+EbmaywLV pptKqJ+vKWhti9j8r7m0SIYDscIyZQEqhw/lrvNvv7MvDqW2CRf2QNPe/qbTr9Dd E1G7C+nPOqaYnPu1TU6bZveK8qECuBULmzUsoLTUf+FDMa2F9fWgek9NleZBzE+U u1Z6//eahFHydS+jjedLFbOo/Avtj9mcpyAZWLHZ85AqRZKbUEVcAnUH8usSm6rP 8yZLpBfK53xRWl7wu4BcNHnO0yhAFuj6XsVRmKbXhWYTkb+gHJBKMkIMxbbydAvH cMpEZOFioxx6R64yKcJheP5VkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTmke3L ShuiNpK4CrGfkHwpg7jwMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI ai1oRG9sUExCSUN0ekZmdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFblKoNEMuTmVy92hlMhfbEGhk5Knn2OhfStIZC8yL2PeYjrHQ0Ryf/6p0IT+ AG2rETSwv4Rk/ihCRTmZyxdkZ5mZ5My+zJ1HX7lEzCNWXoH9z/1+Nr5j78Wqo4hl 3himkOZQbj/uNTSzBDaQao1c1YkuJ8FP0FebyrE6Y5h62lJQQUHufpPHEIbSqqNM YxwXHvJwHR3NFV2sXNbuJKEfk51rB2GrXrXukPSOgdqM4VRHSieq1heCW4mO6Gd8 pY2Sd3YcqjY/sOK9iPu0uAmQGJyAuxY7DrvGEYxp6nPE8+zTEE1/KJID5EkHiEp5 55Vy4VUPWt8vEoXe2YdrloeCBA== -----END CERTIFICATE-----Generated at Sun Mar 29 21:31:21 2026 by rpki-client