$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: EqLF9zMSakFfpX3dKB5hVyOryiDU0bC3QKG913ufoh4= Subject key identifier: A6:78:11:52:B9:FD:4A:D9:0B:68:5A:47:78:40:91:FA:72:F4:6D:FF Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B9E Signing time: Mon 02 Mar 2026 00:05:55 +0000 Manifest this update: Mon 02 Mar 2026 00:05:53 +0000 Manifest next update: Mon 09 Mar 2026 00:05:53 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: iKhQcyq1mYeQyvhWnvJpoT1zuoPc5v6GfqfPjgBbdCY=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: KED1QmVTHiqC0tXqfgrpZXRP+qrWOki9BhFfYuc7XlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Mar 2 00:05:53 2026 GMT Not After : Mar 9 00:05:53 2026 GMT Subject: CN=69a4d462-0ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:8d:7e:52:cd:ec:6e:03:e2:97:70:86:bf: be:87:ea:43:59:b5:72:24:49:84:78:fe:c2:c8:b8: 4d:dc:91:ee:8a:8c:1e:ce:fb:6b:25:a1:68:e2:6a: fd:b5:24:e1:72:33:50:b8:e5:0e:d2:6f:d8:5b:16: 52:53:96:21:ba:e9:b1:cb:e3:2a:2b:03:5c:02:df: e3:cf:fa:11:30:4f:1a:b8:b0:71:eb:1a:7a:d5:a0: b9:24:b7:0f:7f:e6:86:e8:5d:d8:f7:f9:3a:e5:08: 07:1b:d3:59:68:7d:71:8b:18:49:2e:9e:17:57:9c: fa:7a:29:55:f6:38:2d:3e:a0:f1:84:72:2a:23:a8: e8:fd:67:7b:27:ef:08:4f:7e:35:87:70:00:64:e2: f4:b1:85:bc:36:60:bb:b2:6e:af:12:1d:20:bc:d4: 97:1f:2c:13:96:3e:38:7a:15:06:43:5c:85:a2:9b: 05:2f:6a:80:a7:50:ca:5f:4a:53:d5:32:40:48:77: 04:66:91:b5:95:16:f8:4b:36:dd:5f:eb:ad:e0:4b: a7:87:e0:3a:83:cd:ee:36:68:f8:39:c4:dc:a5:ae: f9:8e:e6:66:42:74:e7:37:cc:1b:f0:0f:b3:b6:d8: b9:0f:74:fb:28:70:a2:cb:85:ba:bb:00:08:8c:b6: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:11:52:B9:FD:4A:D9:0B:68:5A:47:78:40:91:FA:72:F4:6D:FF X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:36:a8:b7:02:27:d9:68:22:08:03:c9:6e:e3:e0:7a:d8:27: ed:6a:a8:7d:63:d9:c3:bf:ca:65:02:1d:df:c9:3d:21:03:d9: 78:d2:a6:00:d9:d6:d9:3c:db:44:79:f9:81:0b:50:d2:02:5a: d3:76:6a:dc:fa:4d:02:0b:d6:d8:c0:47:d6:68:6b:4f:16:4f: 75:7c:bb:cb:71:83:34:7d:3e:2c:ee:9a:fd:84:9e:93:99:04: 99:bc:61:f8:17:40:58:bb:48:38:b8:5c:ed:1e:5c:be:d7:1b: 91:b2:18:ba:48:29:7b:db:39:53:62:2e:37:bf:b7:ff:f7:55: 85:3e:cf:25:91:2d:20:81:23:82:df:0d:8d:13:5a:ce:01:45: df:c0:0f:83:d6:73:3a:41:12:7a:ec:5d:4f:23:25:ea:22:82: 59:bc:49:b2:2c:b9:81:90:d2:05:a5:fe:69:90:c8:13:d7:59: a0:86:07:85:be:6b:13:82:37:36:5a:c7:cc:e2:f0:f9:41:e0: 06:d4:0e:9d:d0:53:c8:75:2e:78:b2:48:87:5a:62:52:14:85: ad:31:f0:c7:ed:3b:62:99:e3:3e:57:83:01:f6:ec:25:49:2f: 1e:b8:76:5a:22:02:ea:31:6f:51:5e:8e:b7:3f:28:22:b5:d8: 35:ce:6a:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjYwMzAyMDAwNTUzWhcNMjYwMzA5MDAwNTUzWjAYMRYwFAYD VQQDEw02OWE0ZDQ2Mi0wY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj6NflLN7G4D4pdwhr++h+pDWbVyJEmEeP7CyLhN3JHuiowezvtrJaFo4mr9 tSThcjNQuOUO0m/YWxZSU5Yhuumxy+MqKwNcAt/jz/oRME8auLBx6xp61aC5JLcP f+aG6F3Y9/k65QgHG9NZaH1xixhJLp4XV5z6eilV9jgtPqDxhHIqI6jo/Wd7J+8I T341h3AAZOL0sYW8NmC7sm6vEh0gvNSXHywTlj44ehUGQ1yFopsFL2qAp1DKX0pT 1TJASHcEZpG1lRb4SzbdX+ut4Eunh+A6g83uNmj4OcTcpa75juZmQnTnN8wb8A+z tti5D3T7KHCiy4W6uwAIjLaHHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZ4EVK5 /UrZC2haR3hAkfpy9G3/MB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAljaotwIn2WgiCAPJbuPgetgn7WqofWPZw7/KZQId38k9IQPZeNKmANnW2Tzb RHn5gQtQ0gJa03Zq3PpNAgvW2MBH1mhrTxZPdXy7y3GDNH0+LO6a/YSek5kEmbxh +BdAWLtIOLhc7R5cvtcbkbIYukgpe9s5U2IuN7+3//dVhT7PJZEtIIEjgt8NjRNa zgFF38APg9ZzOkESeuxdTyMl6iKCWbxJsiy5gZDSBaX+aZDIE9dZoIYHhb5rE4I3 NlrHzOLw+UHgBtQOndBTyHUueLJIh1piUhSFrTHwx+07YpnjPleDAfbsJUkvHrh2 WiIC6jFvUV6Otz8oIrXYNc5qTw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:01:47 2026 by rpki-client