$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: LXVJDNpTRbZN0nDcz055GM6TyTt3BJvuQUELs/UBGBo= Subject key identifier: 16:5D:54:FC:84:0B:EC:EF:5D:37:9C:1E:C2:AA:3C:F3:62:0F:23:38 Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 3F Signing time: Sun 01 Mar 2026 09:54:17 +0000 Manifest this update: Sun 01 Mar 2026 09:54:17 +0000 Manifest next update: Sun 08 Mar 2026 09:54:17 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: kU9qTcAkNMH0CyLHPHtuSmu4/kJThRxeFEgQWAONCM0=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Mar 1 09:54:17 2026 GMT Not After : Mar 8 09:54:17 2026 GMT Subject: CN=69a40cc9-3332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:86:ea:cc:a1:c7:38:36:23:f2:f4:a2:3e: 39:33:39:9c:53:79:d4:8a:28:a8:83:4a:bc:5c:f2: 44:55:f3:2d:c5:de:db:53:0c:1b:61:18:fd:c5:49: db:18:1f:43:08:3f:91:40:f5:9b:5a:09:73:32:ef: 01:6b:11:2e:5a:a7:ce:64:1c:96:7f:2e:be:6f:1a: 8f:fd:6f:f0:ad:fc:02:c6:f1:c2:0e:85:0d:f6:5f: f3:bd:24:d7:53:02:32:b9:19:60:9d:71:0b:7f:1c: 98:9a:da:87:4b:4c:f9:91:06:81:df:9d:f4:8c:3b: 61:c5:90:b1:17:49:c3:7e:82:e8:b7:f3:d1:3d:ab: 86:5b:56:e1:75:c3:66:26:51:75:fa:ba:fd:00:95: 23:83:a0:2a:b8:0c:cb:96:ce:23:f6:60:bc:20:95: 65:21:60:fa:0e:3c:f2:97:cc:e0:a8:ea:eb:80:11: b3:0e:1d:df:f6:97:2a:84:5e:90:4d:af:06:ef:dd: ba:65:a9:1c:31:07:4e:b1:b2:51:09:33:b2:87:ce: 2c:1f:54:44:2e:61:2a:17:12:4f:66:04:36:54:30: ba:04:6f:b5:54:d2:9b:1d:41:f9:17:51:f4:5d:de: d1:2b:8c:11:69:62:11:d3:25:53:94:a2:32:2e:c0: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5D:54:FC:84:0B:EC:EF:5D:37:9C:1E:C2:AA:3C:F3:62:0F:23:38 X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:c0:1c:cc:c4:d8:b2:f2:a8:be:7a:47:47:7b:97:58:bd:13: 6b:0d:b2:03:b4:d0:21:58:97:f4:ad:0c:1f:da:e7:51:2c:41: 67:32:ac:d0:ea:f8:42:51:3f:24:d1:79:a9:dd:4e:f3:1b:bd: 29:f8:0a:1f:93:c0:eb:89:c7:86:f6:0f:d0:57:3d:f7:62:1f: cd:63:ad:1f:03:01:c2:85:26:57:1a:15:5f:ab:bb:99:e3:25: 2d:17:7c:aa:a1:24:62:57:86:a1:5e:c4:f6:5d:83:67:b2:8b: e9:6c:7e:b6:5c:35:d3:a8:78:4f:07:20:6a:14:db:e2:7c:8c: a9:b4:81:a3:4d:e6:5b:1b:68:3d:dd:c0:ec:67:7d:20:ea:67: af:51:44:49:da:a3:8b:26:18:5d:8c:3f:6f:cb:20:76:4f:43: af:2e:08:89:50:03:0c:a5:46:fc:84:5c:0f:8d:ec:1e:47:5c: 44:29:6e:1b:26:d2:6c:8e:7f:d5:f8:96:3f:4a:4e:3c:9e:b8: e4:37:3b:68:1b:e8:c6:8f:b0:90:7b:6c:52:af:2d:aa:04:24: 51:58:3f:30:95:a6:bb:db:51:8c:c6:7b:67:7b:21:17:8d:06: 57:9d:bd:ed:8a:3d:68:7a:0e:cc:6b:e7:ee:44:41:a5:90:34: e0:e3:f0:fb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNjAzMDEwOTU0MTdaFw0yNjAzMDgwOTU0MTdaMBgxFjAUBgNV BAMTDTY5YTQwY2M5LTMzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAA4bqzKHHODYj8vSiPjkzOZxTedSKKKiDSrxc8kRV8y3F3ttTDBthGP3FSdsY H0MIP5FA9ZtaCXMy7wFrES5ap85kHJZ/Lr5vGo/9b/Ct/ALG8cIOhQ32X/O9JNdT AjK5GWCdcQt/HJia2odLTPmRBoHfnfSMO2HFkLEXScN+gui389E9q4ZbVuF1w2Ym UXX6uv0AlSODoCq4DMuWziP2YLwglWUhYPoOPPKXzOCo6uuAEbMOHd/2lyqEXpBN rwbv3bplqRwxB06xslEJM7KHziwfVEQuYSoXEk9mBDZUMLoEb7VU0psdQfkXUfRd 3tErjBFpYhHTJVOUojIuwEcXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFl1U/IQL 7O9dN5wewqo882IPIzgwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC7wBzMxNiy8qi+ekdHe5dYvRNrDbIDtNAhWJf0rQwf2udRLEFnMqzQ6vhCUT8k 0Xmp3U7zG70p+Aofk8DriceG9g/QVz33Yh/NY60fAwHChSZXGhVfq7uZ4yUtF3yq oSRiV4ahXsT2XYNnsovpbH62XDXTqHhPByBqFNvifIyptIGjTeZbG2g93cDsZ30g 6mevUURJ2qOLJhhdjD9vyyB2T0OvLgiJUAMMpUb8hFwPjeweR1xEKW4bJtJsjn/V +JY/Sk48nrjkNztoG+jGj7CQe2xSry2qBCRRWD8wlaa721GMxntneyEXjQZXnb3t ij1oeg7Ma+fuREGlkDTg4/D7 -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:55 2026 by rpki-client