$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: y2+SwQWADL1D1XzIIEGHz9Tu0GUIZO8Bhy3EYupLJm4= Subject key identifier: DA:71:70:3C:E3:0A:23:D8:1F:23:49:2B:41:5C:99:E3:66:11:33:03 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0403 Signing time: Sun 29 Mar 2026 00:22:28 +0000 Manifest this update: Sun 29 Mar 2026 00:22:28 +0000 Manifest next update: Sun 05 Apr 2026 00:22:28 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: mRwYqUNNlgdJSNorZAd5Zl+Fysuis3d0ZgoTdYkFC20=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: o6OFH1sCW4R513sBjIGYHh+VlzbKsDp8XgFdEfgai4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 00:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Mar 29 00:22:28 2026 GMT Not After : Apr 5 00:22:28 2026 GMT Subject: CN=69c870c4-58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:64:39:23:e1:11:1a:94:f3:61:3c:85:87:b7: 3e:24:a2:3e:b5:07:83:fe:5c:fd:ae:a8:5a:cc:cb: ba:b4:b4:b2:41:a6:87:a2:64:04:cb:64:ae:fa:19: 7f:39:4c:4e:fb:eb:5b:21:fa:c9:2e:a2:76:1a:98: 1c:ca:f2:59:cc:f2:f2:0d:3d:46:4a:fa:4f:ab:44: 9a:e5:2a:da:22:b8:a0:50:6e:0f:6b:a8:b9:bd:41: 3e:4b:37:2d:94:d6:fa:1f:58:6f:29:6c:59:34:78: 67:7f:e4:df:85:da:94:3e:66:6b:c4:07:8b:90:92: 07:02:12:fb:94:db:14:84:cf:60:36:c7:5b:20:1d: dd:ce:37:ce:20:6f:76:a8:1f:33:91:3d:2f:86:90: 3d:ae:2f:7b:2f:69:f9:98:b3:78:0b:fa:df:07:ef: cf:61:3f:52:6c:30:cf:a5:93:ae:99:64:14:dc:21: ec:75:ae:47:3e:01:e4:8b:0f:4f:e2:34:d1:bf:07: 7d:ed:5a:6c:69:14:64:46:46:a1:bc:ee:d6:57:92: 00:b6:d6:9e:7f:48:f9:e5:a8:3b:ff:ba:f7:0d:b9: 90:c8:7e:03:a8:1c:92:05:7a:8a:e7:52:63:36:a5: 78:54:58:37:f9:e9:26:98:19:85:28:29:2b:67:7c: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:71:70:3C:E3:0A:23:D8:1F:23:49:2B:41:5C:99:E3:66:11:33:03 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:83:bf:f6:0c:0a:3f:b1:28:8e:7a:60:47:4f:12:0b:fa: 1f:7a:19:ba:de:e3:15:ea:7d:67:1e:24:7e:e7:5c:e9:c1:ab: 1a:f4:92:26:78:52:54:03:a7:59:49:e1:a4:0d:43:44:81:e4: b7:f0:c2:dd:d0:40:64:b9:9b:e2:a8:f1:4c:d8:01:91:d4:07: 44:65:54:d6:13:e4:96:56:1b:b5:ba:5a:90:7a:15:cf:29:db: 7d:4d:20:02:98:e4:0e:db:a1:b4:53:9b:26:96:7c:96:39:e5: 9e:81:1f:10:92:d3:8b:27:51:d8:47:23:8e:db:f7:aa:29:85: 66:14:5e:d4:2e:03:74:f7:65:ad:a4:8e:f2:06:93:05:98:ba: 3c:08:73:bb:e9:37:40:63:03:bd:66:92:90:8a:58:44:77:09: b1:b2:c9:5a:97:e1:f7:83:2c:24:7b:f1:51:a9:5b:b1:82:bd: b7:93:2c:c3:7e:96:4c:ef:f6:15:b0:ab:9d:50:a4:f0:5c:fe: 9d:33:d1:59:b6:aa:5e:30:32:3a:f5:20:17:e7:c8:23:40:b9: 35:7f:0b:0d:77:82:36:d6:c7:79:6f:07:c8:3d:2c:81:4d:af: e9:23:15:18:82:c2:c1:67:e7:3f:67:1e:52:6b:b4:dd:09:6b: a0:fe:4a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjYwMzI5MDAyMjI4WhcNMjYwNDA1MDAyMjI4WjAYMRYwFAYD VQQDEw02OWM4NzBjNC01OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mQ5I+ERGpTzYTyFh7c+JKI+tQeD/lz9rqhazMu6tLSyQaaHomQEy2Su+hl/ OUxO++tbIfrJLqJ2GpgcyvJZzPLyDT1GSvpPq0Sa5SraIrigUG4Pa6i5vUE+Szct lNb6H1hvKWxZNHhnf+TfhdqUPmZrxAeLkJIHAhL7lNsUhM9gNsdbIB3dzjfOIG92 qB8zkT0vhpA9ri97L2n5mLN4C/rfB+/PYT9SbDDPpZOumWQU3CHsda5HPgHkiw9P 4jTRvwd97VpsaRRkRkahvO7WV5IAttaef0j55ag7/7r3DbmQyH4DqBySBXqK51Jj NqV4VFg3+ekmmBmFKCkrZ3zi/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpxcDzj CiPYHyNJK0FcmeNmETMDMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUHSDv/YMCj+xKI56YEdPEgv6H3oZut7jFep9Zx4kfudc6cGrGvSSJnhSVAOn WUnhpA1DRIHkt/DC3dBAZLmb4qjxTNgBkdQHRGVU1hPkllYbtbpakHoVzynbfU0g ApjkDtuhtFObJpZ8ljnlnoEfEJLTiydR2Ecjjtv3qimFZhRe1C4DdPdlraSO8gaT BZi6PAhzu+k3QGMDvWaSkIpYRHcJsbLJWpfh94MsJHvxUalbsYK9t5Msw36WTO/2 FbCrnVCk8Fz+nTPRWbaqXjAyOvUgF+fII0C5NX8LDXeCNtbHeW8HyD0sgU2v6SMV GILCwWfnP2ceUmu03QlroP5KVQ== -----END CERTIFICATE-----Generated at Sun Mar 29 21:26:39 2026 by rpki-client