$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: Pkr24woca3IyhyxTnBKw+WsVkFKieRQGx/k8Os40arY= Subject key identifier: 21:B5:D2:55:1B:0D:2D:B2:13:19:A3:B7:51:0A:FB:47:7E:E3:4C:04 Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 30 Signing time: Sun 01 Mar 2026 10:07:52 +0000 Manifest this update: Sun 01 Mar 2026 10:07:52 +0000 Manifest next update: Sun 08 Mar 2026 10:07:52 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: 9KpP5pBnC0Iqm/TgwN4+PKVvuyOS8wPowAumPmXDDpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Mar 1 10:07:52 2026 GMT Not After : Mar 8 10:07:52 2026 GMT Subject: CN=69a40ff8-acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:67:11:ca:49:da:1d:cf:e9:ac:06:6f:f0: 00:44:e4:52:7b:f1:ac:09:fe:54:50:87:ff:07:0b: b1:e7:1f:67:de:48:83:6d:5d:04:74:88:c6:28:11: be:7e:0f:20:3d:31:af:ab:5b:5e:ab:83:c2:ec:c9: aa:ec:23:87:10:f0:66:bf:86:d2:62:7b:18:77:74: 61:42:4b:c0:50:d7:51:20:4e:e3:b1:31:f6:43:fe: c1:98:8c:de:b3:d4:01:40:92:2f:97:80:88:77:45: c4:42:65:fa:e3:59:e0:29:33:8b:9c:3c:12:bb:76: 40:f8:bf:72:1f:37:58:b9:64:bf:33:f0:42:ea:76: 97:5d:05:34:97:70:00:5b:77:05:06:0c:32:e4:25: 03:ff:94:d5:2b:15:24:45:3d:b9:b7:48:5c:c4:35: d6:05:ee:12:99:02:af:66:eb:99:14:d1:f9:ed:57: b2:ee:0f:54:a8:9c:c3:19:bd:c5:8f:93:49:50:e5: 38:f3:cf:93:a8:29:68:bf:1f:3e:05:59:61:61:24: 0e:39:a8:7e:06:68:d9:5a:76:51:dc:cf:b6:5a:8e: 07:4d:2b:4f:84:cb:72:f7:50:ed:0c:16:5a:bc:f4: af:4f:06:27:0c:b0:4b:fd:d1:40:a3:2c:20:c6:cb: 37:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B5:D2:55:1B:0D:2D:B2:13:19:A3:B7:51:0A:FB:47:7E:E3:4C:04 X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:33:5b:d4:06:2c:9d:0b:a8:88:65:4c:53:4a:2f:ae:8c: 0b:2e:ba:1c:9d:f5:fd:b3:34:c5:3a:5e:64:5b:ea:c8:44:ee: 8b:88:96:e6:d2:7f:26:7e:97:3c:e6:3e:ee:df:f7:72:36:34: 55:22:11:a5:1b:f3:de:31:88:63:71:c8:a3:b7:a9:98:d8:b4: ca:78:0e:c7:42:f6:e1:90:89:83:c8:a0:1f:62:8a:46:73:2b: 9a:3d:8c:fb:37:53:54:5c:ee:4c:b2:a8:e6:1e:e9:76:a3:bb: d2:9f:cf:b8:f6:23:81:7f:41:a7:f0:67:8d:7a:29:7e:df:20: 3e:e0:31:43:c2:be:74:b2:dc:86:37:8c:b4:af:ca:74:59:12: ee:a9:18:42:a0:fa:ea:96:5f:e2:80:a4:84:d4:a9:3e:aa:10: e4:ee:c4:33:72:5b:25:01:43:3e:c6:d2:83:5d:e1:b6:42:0e: e5:46:13:bb:e5:03:11:6c:7e:2f:94:92:c7:49:2d:e9:f6:6b: 23:3e:d3:b2:86:99:1b:02:e4:71:5c:94:f7:83:d0:92:83:9f: 8d:3b:fc:f6:d7:38:75:bb:0d:22:42:86:19:7f:93:e9:0c:55: 4a:be:99:ed:13:c2:b9:bb:b5:06:a1:fc:06:76:1f:9d:0d:9f: d7:56:14:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNjAzMDExMDA3NTJaFw0yNjAzMDgxMDA3NTJaMBgxFjAUBgNV BAMTDTY5YTQwZmY4LWFjZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp92cRyknaHc/prAZv8ABE5FJ78awJ/lRQh/8HC7HnH2feSINtXQR0iMYoEb5+ DyA9Ma+rW16rg8LsyarsI4cQ8Ga/htJiexh3dGFCS8BQ11EgTuOxMfZD/sGYjN6z 1AFAki+XgIh3RcRCZfrjWeApM4ucPBK7dkD4v3IfN1i5ZL8z8ELqdpddBTSXcABb dwUGDDLkJQP/lNUrFSRFPbm3SFzENdYF7hKZAq9m65kU0fntV7LuD1SonMMZvcWP k0lQ5Tjzz5OoKWi/Hz4FWWFhJA45qH4GaNladlHcz7ZajgdNK0+Ey3L3UO0MFlq8 9K9PBicMsEv90UCjLCDGyzc9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIbXSVRsN LbITGaO3UQr7R37jTAQwHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCImTNb1AYsnQuoiGVMU0ovrowLLrocnfX9szTFOl5kW+rIRO6LiJbm0n8mfpc8 5j7u3/dyNjRVIhGlG/PeMYhjccijt6mY2LTKeA7HQvbhkImDyKAfYopGcyuaPYz7 N1NUXO5MsqjmHul2o7vSn8+49iOBf0Gn8GeNeil+3yA+4DFDwr50styGN4y0r8p0 WRLuqRhCoPrqll/igKSE1Kk+qhDk7sQzclslAUM+xtKDXeG2Qg7lRhO75QMRbH4v lJLHSS3p9msjPtOyhpkbAuRxXJT3g9CSg5+NO/z21zh1uw0iQoYZf5PpDFVKvpnt E8K5u7UGofwGdh+dDZ/XVhRF -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:55 2026 by rpki-client