$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: ktG/wgrk5jbSTxzwUq18EmzusG7PLiUKiZrJjJn3VVA= Subject key identifier: 71:0D:23:04:71:0F:B2:D4:E7:5D:A0:98:85:EA:8B:B8:7E:19:69:62 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 0133 Signing time: Sat 21 Mar 2026 04:33:27 +0000 Manifest this update: Sat 21 Mar 2026 04:33:27 +0000 Manifest next update: Sat 28 Mar 2026 04:33:27 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: aXGFYJqJykZzDvo7ZrJ8vX9+yD5XGzW9oHWyrp6dSVA=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Mar 21 04:33:27 2026 GMT Not After : Mar 28 04:33:27 2026 GMT Subject: CN=69be1f97-a6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:f1:30:a7:81:13:82:34:a1:a8:18:3b:95: 1b:aa:53:66:18:f9:ac:75:78:bc:cb:39:e0:71:bb: cf:b2:75:f2:fb:9c:4e:f1:ed:5a:69:95:8d:18:d9: 41:29:56:39:21:d8:01:15:fc:67:de:3c:50:a4:4f: b0:84:6e:e5:59:1c:9c:f7:76:89:ef:eb:80:6b:3f: 0a:d7:66:c8:3b:db:23:e0:51:50:35:eb:c6:fe:5a: 2c:89:c6:e6:78:50:34:1d:92:c8:d0:c2:6b:d7:a2: 67:55:28:d1:0e:c4:1c:7c:10:cb:88:a4:0d:19:b7: b0:96:f3:b4:33:09:70:f7:f4:46:3f:b1:37:90:24: 98:cc:09:6b:6e:5e:aa:7b:9e:c7:a5:05:ca:5d:58: 71:38:96:2d:fe:3e:67:d3:83:37:34:56:84:7b:bf: 9c:d3:7b:6b:84:0b:ba:93:9a:5d:c1:de:79:31:1c: 7b:ac:e0:78:61:ef:64:91:7b:40:69:6a:20:25:e3: 93:e5:d2:26:14:8b:ca:cc:15:e2:bb:15:ac:1c:c9: 35:c5:5c:76:20:3f:b2:75:a7:93:52:8f:6b:f8:32: 7f:95:c0:15:17:95:7b:1a:11:60:49:86:df:0b:5d: d3:1b:0b:a6:a3:e7:d5:35:70:81:17:d6:38:c7:e0: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:23:04:71:0F:B2:D4:E7:5D:A0:98:85:EA:8B:B8:7E:19:69:62 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:80:25:fc:1d:5d:e7:fb:4a:7e:9e:ae:20:6f:b8:3c:c3:df: 74:44:47:94:22:1d:c8:be:09:5a:5a:47:9e:0c:70:cc:62:82: 69:c2:8a:bf:a9:0d:6a:b8:26:1a:59:33:f2:be:9d:69:4f:4d: dc:12:33:d4:49:f9:be:89:ab:90:a8:9d:10:ba:64:7b:b0:14: 40:35:d6:c6:94:56:ed:e6:b6:52:7a:1f:0d:b0:96:37:d0:0a: 8f:dc:1e:2e:b6:3f:43:fd:26:3e:8e:33:05:80:ea:43:e8:65: ec:69:25:ae:e2:85:7c:20:0a:d1:6c:c5:da:6c:90:83:5d:4b: 9f:e5:5b:38:e1:59:54:34:62:d5:be:76:6d:b9:c7:90:84:88: fe:37:03:93:a2:c2:18:9f:9d:5f:21:52:ae:48:1d:37:b0:a8: 03:7c:cf:1a:a6:ac:cb:b5:a7:ef:9d:26:a9:6a:b6:df:89:5b: c8:ce:81:d6:c1:dc:bc:1e:e2:a7:16:1f:70:a0:bc:d9:53:ef: ef:1b:c4:b8:53:51:c5:e5:c9:1f:ba:0c:cc:fe:12:91:8e:11: 69:1d:cb:b1:fb:0c:49:00:d2:0d:3f:31:47:1c:bb:ef:1d:d6: 2d:0d:3d:5e:ce:74:e1:41:83:f3:37:3b:30:ff:fd:6e:bd:7f: 69:85:0f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjYwMzIxMDQzMzI3WhcNMjYwMzI4MDQzMzI3WjAYMRYwFAYD VQQDEw02OWJlMWY5Ny1hNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTLxMKeBE4I0oagYO5UbqlNmGPmsdXi8yzngcbvPsnXy+5xO8e1aaZWNGNlB KVY5IdgBFfxn3jxQpE+whG7lWRyc93aJ7+uAaz8K12bIO9sj4FFQNevG/losicbm eFA0HZLI0MJr16JnVSjRDsQcfBDLiKQNGbewlvO0Mwlw9/RGP7E3kCSYzAlrbl6q e57HpQXKXVhxOJYt/j5n04M3NFaEe7+c03trhAu6k5pdwd55MRx7rOB4Ye9kkXtA aWogJeOT5dImFIvKzBXiuxWsHMk1xVx2ID+ydaeTUo9r+DJ/lcAVF5V7GhFgSYbf C13TGwumo+fVNXCBF9Y4x+A8GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHENIwRx D7LU512gmIXqi7h+GWliMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYoAl/B1d5/tKfp6uIG+4PMPfdERHlCIdyL4JWlpHngxwzGKCacKKv6kNargm Glkz8r6daU9N3BIz1En5vomrkKidELpke7AUQDXWxpRW7ea2UnofDbCWN9AKj9we LrY/Q/0mPo4zBYDqQ+hl7GklruKFfCAK0WzF2myQg11Ln+VbOOFZVDRi1b52bbnH kISI/jcDk6LCGJ+dXyFSrkgdN7CoA3zPGqasy7Wn750mqWq234lbyM6B1sHcvB7i pxYfcKC82VPv7xvEuFNRxeXJH7oMzP4SkY4RaR3LsfsMSQDSDT8xRxy77x3WLQ09 Xs504UGD8zc7MP/9br1/aYUPfA== -----END CERTIFICATE-----Generated at Sat Mar 21 23:44:16 2026 by rpki-client