$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: JJW4ZZ6I5QD2pXFFqN2k5TCtq1N8ScRvUs+XEpUplrw= Subject key identifier: 9B:54:4A:2B:63:8E:C4:4A:A2:3E:CC:8D:7E:B2:7F:37:FC:74:30:06 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 0766 Signing time: Sat 28 Mar 2026 21:36:04 +0000 Manifest this update: Sat 28 Mar 2026 21:36:04 +0000 Manifest next update: Sat 04 Apr 2026 21:36:04 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: ZqY8u1z7nbCKBGuAcqQbC7JVoPuLDJPlIMngfuFqlQ4=) 2: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) 4: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 21:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Mar 28 21:36:04 2026 GMT Not After : Apr 4 21:36:04 2026 GMT Subject: CN=69c849c4-e7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:06:84:c6:52:63:0c:8c:77:80:35:f1:14: 1d:d4:e2:f1:f2:eb:93:6b:a6:2f:ad:89:f6:45:74: c7:82:c7:62:9d:1b:1b:16:aa:ad:2d:9f:2d:7e:e7: 5f:f0:87:99:8d:21:b3:53:d8:82:be:49:bb:6b:fc: 6d:5c:c2:7a:bb:c5:ed:46:63:53:26:e7:4f:ef:f6: 77:cc:4e:a7:18:67:9d:50:0a:ab:0e:7f:9f:8a:67: 85:c9:87:36:f6:4a:1c:e0:f0:8e:b1:a2:17:eb:6d: 2a:d4:a9:54:b9:79:07:bc:bf:5d:91:87:69:ec:2a: cd:a3:fd:e8:95:18:cc:72:b9:0c:96:4d:dd:b3:0d: af:9c:7a:a9:a8:8c:4b:49:13:0d:7f:7f:de:6b:a2: 91:18:9b:fd:cb:45:44:a5:d0:ba:0f:b7:5a:9b:3d: c4:c2:e3:b2:f1:ff:4e:91:38:8c:bb:8b:63:8b:9f: 35:2a:eb:b1:10:3a:47:ae:c6:c8:43:f4:1d:c4:8f: ff:55:d0:de:22:47:57:e2:19:a0:eb:91:d2:02:74: 42:88:6e:71:43:12:1e:8d:ac:5e:6c:e6:94:a0:4e: ab:dd:8f:f5:d8:c2:df:fe:e3:14:16:1d:ff:f1:79: 00:d5:5f:96:14:dd:03:c7:e2:49:98:69:e0:83:74: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:54:4A:2B:63:8E:C4:4A:A2:3E:CC:8D:7E:B2:7F:37:FC:74:30:06 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:10:6f:39:39:3f:53:ef:c5:dc:a6:40:96:b5:b0:01:c2:76: d3:7e:ba:7f:d9:bb:dd:e7:43:63:14:71:9e:c8:ba:0c:29:8c: f7:32:b3:94:ba:ac:4a:60:de:a2:16:4d:fe:ed:47:7f:1d:90: 45:f2:0b:09:17:15:a8:2a:0e:27:3d:06:f1:b5:28:4f:52:ce: 04:da:56:ef:ae:d6:3b:c2:01:40:8f:cf:38:65:00:a4:34:57: 5b:dd:7f:ac:ac:37:ea:60:c8:df:76:1f:7f:01:51:3d:92:48: 89:4d:aa:70:9c:97:63:f4:77:f7:e2:11:a6:e0:ea:04:6c:25: d3:c9:7f:da:55:e2:78:2a:20:d4:a8:62:d8:da:fb:61:32:8c: cb:73:99:4b:75:76:7c:a1:c0:ed:7d:24:4a:73:84:ec:f0:59: ff:15:34:ca:85:b9:fa:3d:f3:75:1f:35:01:f5:43:f6:48:d2: 00:13:f2:73:cc:6c:f7:51:62:83:1f:2c:16:8a:b0:3b:25:38: fa:28:89:b4:29:06:b7:7b:0c:c4:61:09:bf:14:da:f2:fc:ad: 96:62:7e:eb:a5:7e:b0:4f:66:24:51:a2:04:03:7b:1b:02:c1: 24:b5:4b:25:a2:b7:86:f5:01:05:2e:9a:f7:4b:23:3c:6b:05: 84:1d:fb:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwMzI4MjEzNjA0WhcNMjYwNDA0MjEzNjA0WjAYMRYwFAYD VQQDEw02OWM4NDljNC1lN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtsGhMZSYwyMd4A18RQd1OLx8uuTa6YvrYn2RXTHgsdinRsbFqqtLZ8tfudf 8IeZjSGzU9iCvkm7a/xtXMJ6u8XtRmNTJudP7/Z3zE6nGGedUAqrDn+fimeFyYc2 9koc4PCOsaIX620q1KlUuXkHvL9dkYdp7CrNo/3olRjMcrkMlk3dsw2vnHqpqIxL SRMNf3/ea6KRGJv9y0VEpdC6D7damz3EwuOy8f9OkTiMu4tji581KuuxEDpHrsbI Q/QdxI//VdDeIkdX4hmg65HSAnRCiG5xQxIejaxebOaUoE6r3Y/12MLf/uMUFh3/ 8XkA1V+WFN0Dx+JJmGngg3RD6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtUSitj jsRKoj7MjX6yfzf8dDAGMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBBvOTk/U+/F3KZAlrWwAcJ20366f9m73edDYxRxnsi6DCmM9zKzlLqsSmDe ohZN/u1Hfx2QRfILCRcVqCoOJz0G8bUoT1LOBNpW767WO8IBQI/POGUApDRXW91/ rKw36mDI33YffwFRPZJIiU2qcJyXY/R39+IRpuDqBGwl08l/2lXieCog1Khi2Nr7 YTKMy3OZS3V2fKHA7X0kSnOE7PBZ/xU0yoW5+j3zdR81AfVD9kjSABPyc8xs91Fi gx8sFoqwOyU4+iiJtCkGt3sMxGEJvxTa8vytlmJ+66V+sE9mJFGiBAN7GwLBJLVL JaK3hvUBBS6a90sjPGsFhB37Ig== -----END CERTIFICATE-----Generated at Sun Mar 29 21:09:27 2026 by rpki-client