$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json) Hash identifier: eDr2THaZI31v2EbFSD4WCZcQ+9EXUlklb7egjPk4Gyg= Subject key identifier: 09:63:E1:C2:FD:ED:91:5C:FD:D3:EF:FE:ED:76:45:AB:79:97:1A:4C Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft Manifest number: 043D Signing time: Fri 27 Mar 2026 00:33:44 +0000 Manifest this update: Fri 27 Mar 2026 00:33:44 +0000 Manifest next update: Fri 03 Apr 2026 00:33:44 +0000 Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: ypPk9no+AAdjwAsPr1FLETGIog29Am2aAgJV1irGm48=) 2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299 Validity Not Before: Mar 27 00:33:44 2026 GMT Not After : Apr 3 00:33:44 2026 GMT Subject: CN=69c5d068-7c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:6b:9d:ac:1c:7c:3e:be:1e:74:dd:40:78: 55:0d:08:59:d9:91:16:a0:91:a8:c7:0a:54:3d:85: 7b:42:b0:23:ea:9c:97:b1:81:26:4b:33:b5:a6:78: 2d:47:eb:e0:69:2a:3d:0e:12:41:3f:49:9c:55:4e: 40:bc:c1:d2:b8:c1:66:ef:e4:01:30:19:2e:94:18: 73:86:5e:c6:6a:cf:c7:22:4b:9a:78:9f:fd:19:fb: 0a:f0:2f:51:cc:fa:a9:96:0b:96:46:c3:6e:1d:ad: de:84:cb:09:f4:12:42:f0:1f:47:f6:ad:e2:47:85: 66:5b:54:9d:46:73:76:96:86:e5:36:12:a7:dd:f0: 48:a6:aa:6c:8b:fb:f6:c5:8a:9e:a1:0d:a4:14:f0: 10:58:6c:01:66:9a:ed:cf:1f:fb:ba:1a:a2:88:f3: 90:c2:56:06:01:7d:0e:4e:ab:db:8f:e7:57:58:eb: 3b:f5:83:56:2e:7d:64:f2:a4:1a:2f:33:c4:ff:92: f3:28:47:fc:13:c6:d6:23:26:fc:05:4d:35:1e:4a: 35:57:99:b6:cb:b1:12:ad:ac:d4:65:55:2a:07:17: dd:0e:c4:41:c3:2f:b3:25:59:be:1a:5e:27:17:59: 9f:03:1c:d0:f6:eb:65:89:ca:9f:86:60:3c:d9:6c: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:E1:C2:FD:ED:91:5C:FD:D3:EF:FE:ED:76:45:AB:79:97:1A:4C X509v3 Authority Key Identifier: keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:99:68:77:92:e3:40:12:fa:a2:e9:9d:d6:7d:3c:76:c1:31: a9:66:66:ae:cd:a9:b2:1f:cc:4e:ac:9e:05:88:bc:c8:6c:66: 56:73:a5:79:7e:3c:2e:3f:37:a6:1a:1f:0c:2f:4d:8d:5a:48: 25:4b:f4:29:43:83:25:23:4b:77:b2:a3:ec:1a:c6:29:4d:af: 81:cb:83:07:36:eb:ec:ec:16:cb:9b:3e:aa:6c:6f:7a:e6:ba: 9e:ae:ba:4d:da:26:10:cf:ea:a2:bd:73:3f:1e:a1:15:8a:8f: 26:c8:ad:9d:79:37:e8:ad:b1:4d:fd:8b:e9:9b:88:f3:21:9b: 56:c7:84:6e:4e:88:ec:20:6c:46:8e:79:8a:fe:e4:7a:ed:3a: f6:da:f5:04:e8:67:eb:65:d4:ef:66:33:eb:99:89:7c:e5:10: c3:98:1d:ba:92:e6:1d:0b:4d:24:d3:5d:23:b6:75:d9:3f:5c: 13:88:6b:00:36:aa:55:7b:ea:50:ad:07:6c:bf:22:cf:24:77: 34:b3:68:e2:2f:bc:69:ea:fe:53:43:0d:89:7a:bc:69:aa:6c: 82:8d:80:f1:0f:cb:30:90:52:25:9d:3d:41:08:8d:14:17:e4: bb:8d:e6:cb:eb:81:68:99:38:20:55:1c:31:b8:d9:dd:b3:2e: ae:49:df:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw RDEzQzAyOTkwHhcNMjYwMzI3MDAzMzQ0WhcNMjYwNDAzMDAzMzQ0WjAYMRYwFAYD VQQDEw02OWM1ZDA2OC03YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9RrnawcfD6+HnTdQHhVDQhZ2ZEWoJGoxwpUPYV7QrAj6pyXsYEmSzO1pngt R+vgaSo9DhJBP0mcVU5AvMHSuMFm7+QBMBkulBhzhl7Gas/HIkuaeJ/9GfsK8C9R zPqplguWRsNuHa3ehMsJ9BJC8B9H9q3iR4VmW1SdRnN2loblNhKn3fBIpqpsi/v2 xYqeoQ2kFPAQWGwBZprtzx/7uhqiiPOQwlYGAX0OTqvbj+dXWOs79YNWLn1k8qQa LzPE/5LzKEf8E8bWIyb8BU01Hko1V5m2y7ESrazUZVUqBxfdDsRBwy+zJVm+Gl4n F1mfAxzQ9utlicqfhmA82WwycQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlj4cL9 7ZFc/dPv/u12Rat5lxpMMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4 RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2 bHdmUzRpQkRZN3dORThBcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxplod5LjQBL6oumd1n08dsExqWZmrs2psh/MTqyeBYi8yGxmVnOleX48Lj83 phofDC9NjVpIJUv0KUODJSNLd7Kj7BrGKU2vgcuDBzbr7OwWy5s+qmxveua6nq66 TdomEM/qor1zPx6hFYqPJsitnXk36K2xTf2L6ZuI8yGbVseEbk6I7CBsRo55iv7k eu069tr1BOhn62XU72Yz65mJfOUQw5gdupLmHQtNJNNdI7Z12T9cE4hrADaqVXvq UK0HbL8izyR3NLNo4i+8aer+U0MNiXq8aapsgo2A8Q/LMJBSJZ09QQiNFBfku43m y+uBaJk4IFUcMbjZ3bMurknfRA== -----END CERTIFICATE-----Generated at Sat Mar 28 08:02:19 2026 by rpki-client