$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: 0FytVaL4pa68eXQH/apI5kyGuhQLlIfnBg+oVSRey/g= Subject key identifier: 64:C0:2F:6D:67:2B:7B:32:6D:F2:77:9B:6B:EB:C8:1B:1F:B4:9E:D6 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 6F Signing time: Tue 31 Mar 2026 07:25:43 +0000 Manifest this update: Tue 31 Mar 2026 07:25:43 +0000 Manifest next update: Tue 07 Apr 2026 07:25:43 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: AdRfenmC+USO/wCtT/EK3lqfRN/WjaKtJXYC0zgTXUo=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Mar 31 07:25:43 2026 GMT Not After : Apr 7 07:25:43 2026 GMT Subject: CN=69cb76f7-d183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:ce:a0:ac:a1:21:bc:87:3f:11:89:34:1b: 3d:38:f7:48:0c:97:25:4e:35:55:d5:ea:25:5c:8b: 60:03:ad:0a:2f:2f:15:22:3a:2f:e4:c8:74:3b:bc: 7e:2b:fa:10:00:c3:69:9e:82:0a:ab:54:be:23:f8: 94:26:8b:c8:9e:96:e7:70:78:3a:5b:44:31:a2:80: 55:cf:83:90:d6:f5:d0:5c:ec:a6:f9:5d:f3:25:d9: 23:62:c9:e5:5b:6b:f7:b1:3a:6f:ee:2b:ec:21:99: 84:11:0f:61:c7:57:83:c2:39:a4:a3:ac:30:4c:90: 8e:0b:63:3e:fa:b8:72:90:85:c6:cc:7e:14:cb:5c: 31:ea:e6:f0:47:2a:95:a3:b3:9a:56:1a:84:55:38: 4a:90:79:d8:50:41:f2:1c:12:ab:9c:de:e1:23:d8: d1:10:67:52:76:da:e6:9f:b2:ea:8c:e7:3e:97:9a: 1e:59:3b:5e:20:b9:b7:a6:b8:97:2d:26:02:ed:60: ce:1a:af:a4:3c:dc:b3:9b:d1:df:fc:34:32:9c:57: 35:5e:b8:f7:e6:0d:e4:9e:a6:3e:83:6d:f2:6a:84: 62:f8:50:11:e4:2a:fa:2a:3a:b9:7f:01:3c:d7:47: 83:b3:bf:76:75:7c:6f:c4:15:95:b2:f6:87:ee:ff: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C0:2F:6D:67:2B:7B:32:6D:F2:77:9B:6B:EB:C8:1B:1F:B4:9E:D6 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dc:c4:0a:00:e0:6b:cb:c5:93:f0:78:e9:fe:42:f1:5c:83: 52:43:a4:e7:f5:1d:46:e6:90:0d:0c:59:98:1d:47:fb:2c:14: 09:5c:04:7e:6b:de:21:4f:46:66:af:08:ce:d2:e9:2c:c4:4e: 20:7c:d1:0e:7c:b6:1c:e8:07:dd:3c:ba:e9:72:ff:6f:a6:6e: 48:3a:36:de:62:0f:4e:e3:9c:ac:dd:89:61:80:3d:e8:00:89: 56:a0:55:e4:b4:b4:87:64:10:4b:a8:fc:f6:29:a8:bb:63:7c: c1:3f:c7:e8:7e:6f:db:1a:ea:63:05:21:e3:74:05:33:4e:94: cb:a5:c1:d5:a1:18:22:c5:88:09:5b:63:1d:4d:f9:4d:92:63: 78:64:42:25:f0:95:80:a2:eb:ac:16:7f:51:8c:db:4e:d9:24: dd:08:c5:8a:e2:dc:93:59:59:01:bf:78:dd:43:b6:f1:4d:90: f3:27:16:6c:12:fe:84:b2:dc:7e:44:e6:d4:c7:6c:56:ec:49: 22:b7:3d:d9:cf:76:e8:f8:ea:50:68:d2:59:58:49:ab:80:ea: 72:9b:94:db:bc:b7:4c:dd:17:b5:36:2a:ce:a2:91:29:5b:e5: 1e:06:7b:00:d7:be:ce:ab:48:89:ea:d0:81:95:15:9b:65:65: 62:54:88:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNjAzMzEwNzI1NDNaFw0yNjA0MDcwNzI1NDNaMBgxFjAUBgNV BAMTDTY5Y2I3NmY3LWQxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV5s6grKEhvIc/EYk0Gz0490gMlyVONVXV6iVci2ADrQovLxUiOi/kyHQ7vH4r +hAAw2meggqrVL4j+JQmi8ieludweDpbRDGigFXPg5DW9dBc7Kb5XfMl2SNiyeVb a/exOm/uK+whmYQRD2HHV4PCOaSjrDBMkI4LYz76uHKQhcbMfhTLXDHq5vBHKpWj s5pWGoRVOEqQedhQQfIcEquc3uEj2NEQZ1J22uafsuqM5z6Xmh5ZO14gubemuJct JgLtYM4ar6Q83LOb0d/8NDKcVzVeuPfmDeSepj6DbfJqhGL4UBHkKvoqOrl/ATzX R4Ozv3Z1fG/EFZWy9ofu/+g9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZMAvbWcr ezJt8neba+vIGx+0ntYwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBL3MQKAOBry8WT8Hjp/kLxXINSQ6Tn9R1G5pANDFmYHUf7LBQJXAR+a94hT0Zm rwjO0uksxE4gfNEOfLYc6AfdPLrpcv9vpm5IOjbeYg9O45ys3YlhgD3oAIlWoFXk tLSHZBBLqPz2Kai7Y3zBP8fofm/bGupjBSHjdAUzTpTLpcHVoRgixYgJW2MdTflN kmN4ZEIl8JWAouusFn9RjNtO2STdCMWK4tyTWVkBv3jdQ7bxTZDzJxZsEv6Estx+ RObUx2xW7Ekitz3Zz3bo+OpQaNJZWEmrgOpym5TbvLdM3Re1NirOopEpW+UeBnsA 177Oq0iJ6tCBlRWbZWViVIh8 -----END CERTIFICATE-----Generated at Tue Mar 31 15:29:24 2026 by rpki-client