$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: YgoNYLRRHPqhatTZwrtH9K4kvoMSj10PR9itR9FPNpU= Subject key identifier: DE:A7:24:B0:6E:98:84:1E:68:28:A1:4B:2A:D5:02:40:6A:B1:32:FC Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 11A3 Signing time: Mon 02 Mar 2026 01:32:18 +0000 Manifest this update: Mon 02 Mar 2026 01:32:16 +0000 Manifest next update: Mon 09 Mar 2026 01:32:16 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: D/TRiZESuKxAtxA1J/TfSTHZGoMqsK9NzKkZ6jzDPqA=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9PDn3YHBPFAejDE7hltbsdcT1kRuYYPQs0blFXX8FkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4524 (0x11ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Mar 2 01:32:16 2026 GMT Not After : Mar 9 01:32:16 2026 GMT Subject: CN=69a4e8a2-a9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:03:15:1d:a3:1b:ad:07:34:c8:ad:a2:f8: ad:80:ad:84:7e:5e:06:e2:1d:e7:b2:b9:03:bb:3e: 58:22:4d:da:49:f8:62:df:ee:5e:84:ef:81:1b:9c: ae:d2:8f:e5:47:97:66:2d:59:7c:c8:f0:62:b8:ba: 76:b2:51:da:9a:ac:bc:86:2d:ce:7d:a7:c6:6e:62: b6:37:b6:ce:6a:7c:7c:45:ea:bc:12:1c:da:03:63: 97:ee:70:b5:7c:27:e2:03:b6:94:7a:d4:8a:64:44: d7:00:da:d4:89:c4:0b:d3:52:39:8a:77:74:03:20: 57:fd:7e:de:02:9c:24:ed:aa:61:f1:6b:75:56:cd: 19:87:49:26:9c:7a:af:41:29:60:d7:01:ac:f1:ad: dc:51:21:d1:e5:be:02:63:e2:41:f2:a6:52:06:63: fd:52:bf:e0:33:3a:c7:55:11:25:1d:a8:07:28:56: 6b:ac:6a:8e:4f:3a:7e:ec:5b:94:14:47:75:a8:1b: b0:63:4f:db:ce:74:69:91:2f:38:55:1e:50:ce:cb: 8c:34:40:31:14:de:5c:e9:9a:31:0d:ed:fe:92:84: f5:9d:96:d5:25:b0:42:07:e3:e4:0b:64:0a:42:f7: f0:09:af:94:4c:8f:9b:fd:4a:12:c7:19:3a:32:2d: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:24:B0:6E:98:84:1E:68:28:A1:4B:2A:D5:02:40:6A:B1:32:FC X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e5:af:9c:07:89:5d:7c:8d:76:65:7a:37:25:05:ae:20:29: dc:c7:09:d6:2f:48:ab:9d:5f:81:41:82:6e:39:97:d2:3a:c4: 61:2b:86:22:35:a3:1b:f7:c5:4b:73:ba:13:96:8c:7d:30:a4: 2f:08:0d:86:35:51:66:b4:85:e6:7a:2f:fd:6c:43:ac:75:8c: d9:4c:0b:9c:dc:22:7d:fe:f2:2a:8a:1e:e6:3c:5f:b6:cf:ff: ff:63:a3:a6:1c:bd:cd:6f:bb:56:9e:39:b0:aa:fe:1d:09:2a: f5:23:e3:3d:b1:1f:b5:27:aa:89:54:36:65:0a:69:ba:33:03: 2d:81:c2:f6:7c:37:08:29:79:18:ca:fe:78:08:ec:1e:65:ff: 12:ca:5e:76:cc:2b:d1:3b:47:c2:b7:70:f3:fa:88:1a:e0:4e: 16:bf:d3:94:b8:59:50:a3:d1:35:97:62:68:dd:11:6f:94:e5: 95:14:03:a1:9e:21:32:da:fa:93:6b:60:47:6a:77:24:49:a4: f7:79:10:5c:38:4b:2d:28:1a:7b:87:08:75:33:67:ae:71:eb: 4a:19:3b:a1:76:7c:46:1b:cf:0c:c6:95:81:1c:b6:4d:3f:b1: 99:a0:04:20:c9:9d:2a:c9:ae:5e:5c:4b:b2:38:b5:de:29:74: d0:d5:dc:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwMzAyMDEzMjE2WhcNMjYwMzA5MDEzMjE2WjAYMRYwFAYD VQQDEw02OWE0ZThhMi1hOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ngDFR2jG60HNMitovitgK2Efl4G4h3nsrkDuz5YIk3aSfhi3+5ehO+BG5yu 0o/lR5dmLVl8yPBiuLp2slHamqy8hi3OfafGbmK2N7bOanx8Req8EhzaA2OX7nC1 fCfiA7aUetSKZETXANrUicQL01I5ind0AyBX/X7eApwk7aph8Wt1Vs0Zh0kmnHqv QSlg1wGs8a3cUSHR5b4CY+JB8qZSBmP9Ur/gMzrHVRElHagHKFZrrGqOTzp+7FuU FEd1qBuwY0/bznRpkS84VR5QzsuMNEAxFN5c6ZoxDe3+koT1nZbVJbBCB+PkC2QK QvfwCa+UTI+b/UoSxxk6Mi145QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6nJLBu mIQeaCihSyrVAkBqsTL8MB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwOWvnAeJXXyNdmV6NyUFriAp3McJ1i9Iq51fgUGCbjmX0jrEYSuGIjWjG/fF S3O6E5aMfTCkLwgNhjVRZrSF5nov/WxDrHWM2UwLnNwiff7yKooe5jxfts///2Oj phy9zW+7Vp45sKr+HQkq9SPjPbEftSeqiVQ2ZQppujMDLYHC9nw3CCl5GMr+eAjs HmX/Espedswr0TtHwrdw8/qIGuBOFr/TlLhZUKPRNZdiaN0Rb5TllRQDoZ4hMtr6 k2tgR2p3JEmk93kQXDhLLSgae4cIdTNnrnHrShk7oXZ8RhvPDMaVgRy2TT+xmaAE IMmdKsmuXlxLsji13il00NXc6w== -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:53 2026 by rpki-client