$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: MtWmzDtl7V+DPdaDXNpzIZC4uZeX/Ej8xrsgAeV7awY= Subject key identifier: 3A:80:EC:BD:2F:84:0B:D1:DF:45:16:9F:DF:FA:49:CC:B8:35:61:24 Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0D9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0D91 Signing time: Mon 02 Mar 2026 02:31:13 +0000 Manifest this update: Mon 02 Mar 2026 02:31:12 +0000 Manifest next update: Mon 09 Mar 2026 02:31:12 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: jPQd0OOIa4nfVyXxEU+L3fSn3GY+Ip4cXspPWxTUdsE=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: AcA3ZpnBxGvswDC4UMsd8Zl4/kPYIdMl1MMMf/WTVg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Mar 2 02:31:12 2026 GMT Not After : Mar 9 02:31:12 2026 GMT Subject: CN=69a4f671-3484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:51:cd:3a:1c:d7:6d:a1:f7:3b:a0:fb:bf: f1:5c:10:9c:b5:a2:da:fd:53:7c:83:b0:c8:86:03: d6:dc:a8:22:50:b6:0c:82:e2:7a:8a:c7:b9:a8:94: 04:06:3a:02:94:f9:99:d6:85:58:d4:fe:b3:db:d5: 2e:1e:e2:42:79:72:3b:0c:b9:ad:14:53:20:e6:08: 2f:3a:71:70:8d:2e:a6:ea:28:5c:b4:e4:90:27:cf: 67:cd:c3:1f:3c:d3:7e:cb:60:f0:43:d2:52:f4:04: cc:16:be:46:97:41:16:dc:44:12:a4:e9:9e:5b:5a: 24:96:d4:f4:93:78:79:fd:1e:95:a8:c3:a5:79:65: 55:89:d2:98:85:34:aa:2e:48:85:25:bc:58:14:d9: 60:72:f1:77:97:72:fc:a6:a5:27:c5:62:c4:21:29: 9d:b4:4f:3f:a1:c5:d1:bc:7f:4d:61:ef:eb:11:d0: 4c:8f:d5:fe:b7:a3:0f:a5:96:4e:35:96:5d:57:55: 10:15:76:5f:0f:18:4f:4d:12:61:8b:3f:99:8b:34: 75:27:71:ff:3b:b7:bb:86:55:15:1f:3c:dd:ea:53: 5e:da:f7:12:9e:2b:55:82:69:b5:b7:2c:80:47:6b: ab:4d:34:18:f7:4b:49:46:71:cd:58:5c:0f:46:0e: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:80:EC:BD:2F:84:0B:D1:DF:45:16:9F:DF:FA:49:CC:B8:35:61:24 X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c6:cb:04:5f:49:39:ec:ab:e4:54:74:76:40:1f:63:b5:be: 22:c4:1d:a4:f4:29:e5:9e:f0:d3:48:8f:a3:5f:36:22:7d:17: a9:29:59:50:2f:eb:f3:fb:2f:cb:43:ae:76:d6:b6:fd:7f:43: ae:ce:4c:ba:13:d2:e2:63:4d:5b:0b:13:70:7e:08:72:db:18: 47:eb:0c:b1:70:ae:2b:63:91:2b:ab:cd:39:85:77:a7:43:9d: 17:3b:9d:b4:76:24:2f:94:8c:32:13:39:62:e2:f2:18:4e:bd: cb:4b:46:89:20:be:a4:84:6f:7f:74:0f:3e:e2:ac:c0:9b:37: 05:15:4c:66:ad:f5:35:75:5e:c6:82:45:a1:2a:58:7c:89:9b: 9a:93:55:b1:ee:58:d2:7b:75:62:13:64:50:97:6f:b9:d8:fd: 2b:30:7e:f1:b0:d7:81:6c:cb:ae:5a:e8:64:e3:38:0f:05:dc: b2:38:96:9f:96:62:a5:6a:9d:13:2d:2b:3c:32:e5:f6:ea:b6: 30:5f:14:7d:90:33:13:cf:84:de:37:18:6c:94:b1:2c:e4:5b: 31:8b:bf:cb:c8:ea:a2:93:35:26:68:4a:04:2b:69:5b:e0:d2: 01:d5:c5:5d:9e:c0:7d:69:a4:22:f3:1b:2d:a2:a3:92:71:44: f9:8f:d9:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYwMzAyMDIzMTEyWhcNMjYwMzA5MDIzMTEyWjAYMRYwFAYD VQQDEw02OWE0ZjY3MS0zNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpJRzToc122h9zug+7/xXBCctaLa/VN8g7DIhgPW3KgiULYMguJ6ise5qJQE BjoClPmZ1oVY1P6z29UuHuJCeXI7DLmtFFMg5ggvOnFwjS6m6ihctOSQJ89nzcMf PNN+y2DwQ9JS9ATMFr5Gl0EW3EQSpOmeW1okltT0k3h5/R6VqMOleWVVidKYhTSq LkiFJbxYFNlgcvF3l3L8pqUnxWLEISmdtE8/ocXRvH9NYe/rEdBMj9X+t6MPpZZO NZZdV1UQFXZfDxhPTRJhiz+ZizR1J3H/O7e7hlUVHzzd6lNe2vcSnitVgmm1tyyA R2urTTQY90tJRnHNWFwPRg6qUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqA7L0v hAvR30UWn9/6Scy4NWEkMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYMbLBF9JOeyr5FR0dkAfY7W+IsQdpPQp5Z7w00iPo182In0XqSlZUC/r8/sv y0Oudta2/X9Drs5MuhPS4mNNWwsTcH4IctsYR+sMsXCuK2ORK6vNOYV3p0OdFzud tHYkL5SMMhM5YuLyGE69y0tGiSC+pIRvf3QPPuKswJs3BRVMZq31NXVexoJFoSpY fImbmpNVse5Y0nt1YhNkUJdvudj9KzB+8bDXgWzLrlroZOM4DwXcsjiWn5ZipWqd Ey0rPDLl9uq2MF8UfZAzE8+E3jcYbJSxLORbMYu/y8jqopM1JmhKBCtpW+DSAdXF XZ7AfWmkIvMbLaKjknFE+Y/Z9w== -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:59 2026 by rpki-client