$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: eHAg/XstX2SPB4RwVUMhJtid9monqjiLgOUKlvu63xc= Subject key identifier: A9:60:E2:6C:5F:35:04:92:5F:64:6D:EC:81:A3:61:E4:95:A3:65:CC Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 01F9 Signing time: Mon 02 Mar 2026 01:06:18 +0000 Manifest this update: Mon 02 Mar 2026 01:06:15 +0000 Manifest next update: Mon 09 Mar 2026 01:06:15 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: LLzIvfYlV4mBEJP69wDlTuG8AsrPvdi+2nro2tNbmPc=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: l/0T2BsqMpYHNb99BtwYJXwOCZfICpcu+3uO0zv0gmw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: J8fq57XN7vQJ2L4+yTAT2Y4PP+ynsI4ubh+NWiJOhRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Mar 2 01:06:15 2026 GMT Not After : Mar 9 01:06:15 2026 GMT Subject: CN=69a4e28a-76f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:51:17:58:13:f5:32:04:66:2d:78:a2:04: 0a:9d:6f:18:d5:1d:f1:5f:48:99:4d:c7:f1:3d:31: d5:af:5d:bc:e6:b6:92:fe:fc:4c:e5:4e:9f:9f:c5: 8e:fb:79:17:34:33:8b:ad:b8:61:f6:5e:1b:49:2f: a7:a8:d0:da:1e:c7:a9:49:51:ee:7f:a0:22:68:8d: b3:e8:2a:72:63:69:1d:6d:da:eb:97:41:66:b5:a0: 39:04:d1:56:cf:44:79:8c:23:c2:33:70:f6:ac:30: 4d:fd:8a:f8:df:1f:bf:cc:b2:8b:7b:24:85:7d:5f: ce:46:a9:ad:ed:22:a1:8a:47:c3:5b:e8:8d:03:a7: 34:7c:cc:17:70:2a:f1:9b:27:c4:47:e7:c7:f3:f4: 87:a6:47:53:4e:39:6f:c3:1e:f8:ea:40:ae:1e:d1: a2:9e:24:9c:b2:60:b0:b8:12:a6:c0:d1:2b:c7:f3: 6c:d3:83:dd:cc:13:01:6b:2b:5b:f1:00:e5:1b:96: 48:2b:4e:40:b0:3f:6b:c8:5a:ad:1e:54:c5:d4:06: 92:0f:29:0f:cd:8d:9b:bd:bf:35:07:66:31:63:e2: 00:4c:78:bb:c6:11:a7:4f:34:4b:be:db:e5:b9:ba: 41:cb:1e:c4:61:35:ab:b9:da:66:ce:b5:8d:9f:fa: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:E2:6C:5F:35:04:92:5F:64:6D:EC:81:A3:61:E4:95:A3:65:CC X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a7:2a:a0:4b:ce:fa:02:16:2d:89:e3:93:0f:22:39:e1:4c: 21:69:9b:d8:71:94:64:6e:c4:b0:d4:61:5b:c4:4e:59:2c:2f: ba:b7:8d:d3:aa:3e:0a:0f:26:32:2d:51:d3:57:5e:89:71:f8: 74:6f:43:5b:ac:1f:03:c4:d7:80:e8:30:b7:a9:79:b0:0d:21: fb:ba:59:d2:36:3b:44:29:13:98:9c:f4:98:3d:e7:ef:ce:47: 10:35:3e:0a:f4:cd:f1:58:87:e0:8c:1c:b0:fc:18:10:2a:56: 5e:60:61:08:be:c5:36:9e:84:a7:71:b9:18:fe:35:6d:b5:15: aa:10:10:ad:6c:c1:2e:53:8e:ca:92:d2:3f:a7:c3:56:02:8f: 64:93:43:47:fc:79:49:5c:d6:35:22:a8:da:73:ea:97:4c:fc: 0d:ad:b5:68:94:31:84:a9:af:a5:20:53:dc:5d:c5:99:6e:cf: 4b:3a:67:6b:d3:7c:5a:a1:aa:ed:16:7a:44:df:44:26:01:bf: f4:23:69:b7:b8:3c:0b:d2:9b:c1:6b:01:26:67:1d:89:17:a5: d5:1d:b4:a3:f8:c4:05:53:3d:45:2b:c9:16:0d:83:52:a0:e3: c4:32:58:8a:4a:eb:a0:41:bd:ef:8f:b0:4f:8c:cf:72:42:4b: 45:05:39:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjYwMzAyMDEwNjE1WhcNMjYwMzA5MDEwNjE1WjAYMRYwFAYD VQQDEw02OWE0ZTI4YS03NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYRRF1gT9TIEZi14ogQKnW8Y1R3xX0iZTcfxPTHVr1285raS/vxM5U6fn8WO +3kXNDOLrbhh9l4bSS+nqNDaHsepSVHuf6AiaI2z6CpyY2kdbdrrl0FmtaA5BNFW z0R5jCPCM3D2rDBN/Yr43x+/zLKLeySFfV/ORqmt7SKhikfDW+iNA6c0fMwXcCrx myfER+fH8/SHpkdTTjlvwx746kCuHtGiniScsmCwuBKmwNErx/Ns04PdzBMBaytb 8QDlG5ZIK05AsD9ryFqtHlTF1AaSDykPzY2bvb81B2YxY+IATHi7xhGnTzRLvtvl ubpByx7EYTWrudpmzrWNn/rN3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlg4mxf NQSSX2Rt7IGjYeSVo2XMMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6cqoEvO+gIWLYnjkw8iOeFMIWmb2HGUZG7EsNRhW8ROWSwvureN06o+Cg8m Mi1R01deiXH4dG9DW6wfA8TXgOgwt6l5sA0h+7pZ0jY7RCkTmJz0mD3n785HEDU+ CvTN8ViH4IwcsPwYECpWXmBhCL7FNp6Ep3G5GP41bbUVqhAQrWzBLlOOypLSP6fD VgKPZJNDR/x5SVzWNSKo2nPql0z8Da21aJQxhKmvpSBT3F3FmW7PSzpna9N8WqGq 7RZ6RN9EJgG/9CNpt7g8C9KbwWsBJmcdiRel1R20o/jEBVM9RSvJFg2DUqDjxDJY ikrroEG974+wT4zPckJLRQU5cw== -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:17 2026 by rpki-client