$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: oFzdDtgRqmDI7OBvhgaf1ZohAk32l6Ggwhu6maBYw9g= Subject key identifier: 7A:B6:63:0D:05:73:C1:6F:BA:71:1A:32:F2:7C:91:3A:15:28:B2:8C Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 01D7 Signing time: Mon 02 Mar 2026 03:10:47 +0000 Manifest this update: Mon 02 Mar 2026 03:10:45 +0000 Manifest next update: Mon 09 Mar 2026 03:10:45 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: cr+q8n5UBgCQDznsGib5J3VpTXv+hRilvEWDQfRC/wM=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: HqCrtMcIJwqtuGWO+2QOboYuAT+JyzTQSyS9UYZUVgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Mar 2 03:10:45 2026 GMT Not After : Mar 9 03:10:45 2026 GMT Subject: CN=69a4ffb6-f603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:66:c9:c6:de:a5:18:0d:21:8c:e4:ae:eb: c3:2a:6c:84:f8:5b:bc:73:c1:31:b2:d2:d4:4d:41: ee:56:f5:49:0d:3b:2a:38:b0:af:a0:15:aa:ce:b9: 16:74:15:75:51:4c:3d:58:92:ee:3a:0c:de:05:c7: 61:43:d4:b0:55:20:23:57:5c:aa:3a:15:99:86:0a: 67:37:3b:2d:14:c0:98:32:b5:eb:c2:79:fe:96:20: b7:b9:d3:99:ae:01:f9:6b:38:26:8a:de:37:3b:bb: 7b:fa:5b:61:0a:05:7a:df:a6:6a:ef:a4:6e:e3:64: 38:55:ff:ea:e8:70:b5:b7:1f:6f:4c:b7:6a:6e:4b: 96:e9:e6:09:06:c3:8c:87:34:cf:38:a9:fd:63:14: d5:26:9c:49:36:a1:62:c3:21:90:39:e0:ed:1d:21: 07:37:04:08:69:51:0d:6d:da:61:28:f4:0d:7b:f8: 54:a4:9c:5b:16:83:96:6f:0e:28:a5:cc:55:96:d1: 00:01:92:c0:b6:f1:68:17:fd:0e:a3:31:2b:eb:7c: 73:4f:fc:f1:d6:1d:24:b1:be:22:f6:cb:a3:70:90: 0b:cb:80:d2:71:0b:cf:9d:80:26:32:6e:53:e7:84: 4e:c1:b2:54:72:4e:74:91:2d:36:54:8a:17:50:82: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B6:63:0D:05:73:C1:6F:BA:71:1A:32:F2:7C:91:3A:15:28:B2:8C X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ff:e7:d4:2d:68:12:69:4c:67:82:38:1a:b7:b6:60:7b:83: 22:5c:69:54:08:74:17:5b:ff:93:41:34:7f:e9:13:75:f2:ad: 20:56:fb:94:8d:14:4e:97:c2:b2:b3:48:77:40:95:2d:fc:5e: 18:54:4a:aa:99:ae:70:85:bf:d9:19:25:5c:ad:5d:91:96:08: 30:46:84:3c:cf:3f:bd:30:b9:4c:42:34:3c:a7:19:9d:9e:ab: f8:27:d6:46:90:c3:ee:c8:9d:a0:82:e7:ee:c9:5c:20:9b:f2: e1:a5:26:42:ee:f1:67:e6:fe:88:00:7c:03:99:79:5d:98:de: fd:4d:c9:6a:ed:46:e4:86:45:37:62:12:67:ab:2c:3c:f8:31: 19:c6:10:3d:40:38:66:41:3d:02:c9:ad:49:ad:3d:f6:9e:83: 11:fb:c2:e0:97:8d:a1:7c:02:4d:de:87:03:02:12:6c:ce:63: 8c:a5:6d:42:ae:12:2f:15:f6:75:78:a2:60:99:e4:06:d1:20: 3e:04:b1:35:8a:ec:ba:f9:c8:ee:10:c7:c6:4d:c7:11:46:cc: f1:99:7b:82:da:c4:24:fa:25:ba:65:f6:fc:03:5a:e5:1e:6f: 3a:a3:cb:ce:da:4d:5c:cc:52:8f:36:c8:36:b8:a1:a5:f9:0c: 85:28:d7:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwMzAyMDMxMDQ1WhcNMjYwMzA5MDMxMDQ1WjAYMRYwFAYD VQQDEw02OWE0ZmZiNi1mNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+ZmycbepRgNIYzkruvDKmyE+Fu8c8ExstLUTUHuVvVJDTsqOLCvoBWqzrkW dBV1UUw9WJLuOgzeBcdhQ9SwVSAjV1yqOhWZhgpnNzstFMCYMrXrwnn+liC3udOZ rgH5azgmit43O7t7+lthCgV636Zq76Ru42Q4Vf/q6HC1tx9vTLdqbkuW6eYJBsOM hzTPOKn9YxTVJpxJNqFiwyGQOeDtHSEHNwQIaVENbdphKPQNe/hUpJxbFoOWbw4o pcxVltEAAZLAtvFoF/0OozEr63xzT/zx1h0ksb4i9sujcJALy4DScQvPnYAmMm5T 54ROwbJUck50kS02VIoXUII9WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHq2Yw0F c8FvunEaMvJ8kToVKLKMMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwP/n1C1oEmlMZ4I4Gre2YHuDIlxpVAh0F1v/k0E0f+kTdfKtIFb7lI0UTpfC srNId0CVLfxeGFRKqpmucIW/2RklXK1dkZYIMEaEPM8/vTC5TEI0PKcZnZ6r+CfW RpDD7sidoILn7slcIJvy4aUmQu7xZ+b+iAB8A5l5XZje/U3Jau1G5IZFN2ISZ6ss PPgxGcYQPUA4ZkE9AsmtSa099p6DEfvC4JeNoXwCTd6HAwISbM5jjKVtQq4SLxX2 dXiiYJnkBtEgPgSxNYrsuvnI7hDHxk3HEUbM8Zl7gtrEJPolumX2/ANa5R5vOqPL ztpNXMxSjzbINrihpfkMhSjXrg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:41:36 2026 by rpki-client