$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: FJ78XBoh/m2u73870Uh8p6lvJO+uzd4EIYJ1zqY+BGo= Subject key identifier: 5E:64:C0:79:6E:B6:86:79:8E:BA:30:88:C5:2E:00:AD:51:B7:87:A1 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CF3 Signing time: Tue 24 Mar 2026 18:01:27 +0000 Manifest this update: Tue 24 Mar 2026 18:01:26 +0000 Manifest next update: Tue 31 Mar 2026 18:01:26 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: AIt7CXULGTupkZyrqqDm3yVBts/3ZJ8JTmqsDrS24uE=) 2: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: TQPUr83+4QFfxrmveT7ts0ztgC3olEi7fsnrMHT3vIA=) 3: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: Yv7Gf0wJuqEBnhswO0icceRpXWus5zQ5GgGPAvMuDWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Mar 24 18:01:26 2026 GMT Not After : Mar 31 18:01:26 2026 GMT Subject: CN=69c2d177-6738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:90:5f:18:02:4b:19:8a:8a:8d:33:a8:73: f3:9a:1c:27:e8:38:e0:b8:7d:f0:ab:98:d5:38:c0: e3:82:6d:0f:19:b3:7a:49:70:d7:2d:c3:2f:b0:39: a0:00:a2:8c:a2:a9:f0:23:81:08:26:c8:f0:c4:e0: 24:35:b2:d1:f9:11:4f:fd:fb:d7:70:cd:a1:94:29: 8b:35:b8:f6:51:ee:69:64:09:5a:5b:6c:c8:e5:69: 72:29:fb:ca:0c:fa:0d:f8:64:0c:a1:13:42:ae:cf: a5:75:fe:51:ef:c4:88:0f:db:ed:e3:f6:0d:11:85: bc:78:77:fc:28:58:13:6f:8e:71:b0:79:61:3a:0b: 10:72:19:46:a7:3e:4a:9f:d6:8b:5c:b2:2a:27:b3: 8e:69:ac:d6:a4:42:31:61:ac:dc:78:fb:53:d8:a1: 18:9a:41:0a:f2:a1:d4:e1:d2:70:d7:be:4f:5e:a7: e9:30:f4:34:97:49:51:3a:e2:07:82:06:fd:79:64: 75:9e:62:6a:21:3d:44:31:36:a6:b0:3e:82:fe:83: 51:5d:88:e6:a0:3a:d5:96:24:a0:ef:5c:5d:37:99: 20:74:3c:d7:d0:34:d4:35:e5:ef:e0:74:d8:ce:10: 7c:e8:2d:4d:26:99:df:88:6f:1e:d9:03:e5:60:cb: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:64:C0:79:6E:B6:86:79:8E:BA:30:88:C5:2E:00:AD:51:B7:87:A1 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9d:c7:4a:36:2a:5f:2c:0e:f6:b4:bc:da:ba:55:aa:c9:9e: 3e:07:04:d7:78:09:94:d3:e6:25:20:3a:b0:c6:49:9c:78:a4: a7:79:0b:35:81:b9:10:b2:64:bf:18:72:c3:d8:73:39:cd:3b: c9:6e:4a:55:0e:fc:ce:1f:fd:bb:83:77:cc:6c:f8:2e:0e:4d: db:1d:5e:aa:5c:01:4d:54:0c:77:bd:91:2e:ba:df:6b:57:ff: e3:42:0b:63:c8:d7:69:64:97:ff:2c:ed:ba:0e:a6:22:02:bf: 3f:e6:49:f3:a8:7e:53:dc:1f:c1:42:d6:bb:93:be:fc:9b:63: 1f:f4:e8:1b:3c:f4:9f:a9:da:f9:0d:a0:04:0c:f7:4d:a2:33: 2a:c9:a8:83:95:7b:13:7a:aa:94:07:c4:c9:0c:3f:c7:a8:c9: 6a:da:d9:d0:11:57:59:bc:ab:00:e9:17:a7:79:bb:b3:8f:8c: 16:30:a5:41:ed:81:d1:fb:10:30:0e:97:8a:8d:8a:a4:14:c7: e8:73:59:52:17:7e:fe:c9:26:bb:e9:4e:5f:8f:68:a6:cc:f8: d9:f5:9d:4f:f7:8f:22:53:46:56:66:22:cc:f4:c9:c7:f5:ea: 51:48:41:a8:b9:ae:4a:40:ed:7c:ab:8e:91:b3:8b:eb:c1:0a: fe:0f:88:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjYwMzI0MTgwMTI2WhcNMjYwMzMxMTgwMTI2WjAYMRYwFAYD VQQDEw02OWMyZDE3Ny02NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RCQXxgCSxmKio0zqHPzmhwn6DjguH3wq5jVOMDjgm0PGbN6SXDXLcMvsDmg AKKMoqnwI4EIJsjwxOAkNbLR+RFP/fvXcM2hlCmLNbj2Ue5pZAlaW2zI5WlyKfvK DPoN+GQMoRNCrs+ldf5R78SID9vt4/YNEYW8eHf8KFgTb45xsHlhOgsQchlGpz5K n9aLXLIqJ7OOaazWpEIxYazcePtT2KEYmkEK8qHU4dJw175PXqfpMPQ0l0lROuIH ggb9eWR1nmJqIT1EMTamsD6C/oNRXYjmoDrVliSg71xdN5kgdDzX0DTUNeXv4HTY zhB86C1NJpnfiG8e2QPlYMt5DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5kwHlu toZ5jrowiMUuAK1Rt4ehMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgZ3HSjYqXywO9rS82rpVqsmePgcE13gJlNPmJSA6sMZJnHikp3kLNYG5ELJk vxhyw9hzOc07yW5KVQ78zh/9u4N3zGz4Lg5N2x1eqlwBTVQMd72RLrrfa1f/40IL Y8jXaWSX/yztug6mIgK/P+ZJ86h+U9wfwULWu5O+/JtjH/ToGzz0n6na+Q2gBAz3 TaIzKsmog5V7E3qqlAfEyQw/x6jJatrZ0BFXWbyrAOkXp3m7s4+MFjClQe2B0fsQ MA6Xio2KpBTH6HNZUhd+/skmu+lOX49opsz42fWdT/ePIlNGVmYizPTJx/XqUUhB qLmuSkDtfKuOkbOL68EK/g+I7Q== -----END CERTIFICATE-----Generated at Wed Mar 25 21:59:54 2026 by rpki-client