$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: I11cP8HTUL3dgBKuX5oy8pnjRrAjcUDl3pCh2YafYvw= Subject key identifier: 68:91:BE:0A:AA:47:FA:FC:2E:12:33:21:66:C4:C3:85:EA:A6:8A:45 Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: 58 Signing time: Sun 01 Mar 2026 09:32:54 +0000 Manifest this update: Sun 01 Mar 2026 09:32:53 +0000 Manifest next update: Sun 08 Mar 2026 09:32:53 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: MM/aTyFCSw0WkRl3rXQHlhNW4cDT0sgkGFhdPd7bPBQ=) 2: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Mar 1 09:32:53 2026 GMT Not After : Mar 8 09:32:53 2026 GMT Subject: CN=69a407c5-32bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:38:ba:da:50:d9:25:9a:94:bd:f3:75:60: ca:c8:27:5f:a6:4d:7c:bf:73:9e:11:c2:89:7e:54: ae:9e:85:98:ca:bc:9e:9e:ed:79:ae:67:43:4a:13: cb:ad:e2:ba:b3:b2:aa:24:31:4b:25:ad:1e:dc:d3: 86:d6:4d:59:73:5f:00:29:d0:5d:c7:e2:5a:44:bd: ee:2e:92:d5:dd:6c:da:b2:61:c7:a2:be:fd:58:27: b1:43:ff:48:9c:7d:fe:56:03:c5:10:b4:92:bf:04: a6:5b:fa:b6:a1:99:51:9f:eb:2a:a3:64:dd:20:16: c0:e2:0d:9f:b9:f9:02:73:d8:83:4c:ae:1a:22:45: c7:b2:f9:c0:4f:17:31:c9:64:1d:d9:03:0e:a0:a7: ab:a9:7d:2d:14:74:e3:a7:10:31:64:34:00:5b:fb: 1e:f7:87:f1:e9:13:10:2b:96:6e:0d:c3:ff:58:b7: 5e:07:01:76:f8:3b:5b:d3:5e:88:10:79:3d:b1:a3: 0e:3b:60:0b:fd:dc:19:0c:6d:6a:23:38:75:d4:fe: 44:3a:4d:8e:b9:62:aa:27:27:65:77:4f:97:84:42: aa:fa:f8:11:cc:d7:b6:91:39:0e:ad:39:cb:9d:9e: 5b:01:f5:40:45:34:67:aa:4d:ed:52:c1:70:03:51: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:BE:0A:AA:47:FA:FC:2E:12:33:21:66:C4:C3:85:EA:A6:8A:45 X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:5c:39:36:7f:2a:0b:dc:91:99:55:63:1f:ec:5e:3a:38:24: e1:fc:ae:4e:1a:e9:4b:c7:74:ac:e2:02:6c:00:57:b8:7c:eb: 7e:91:20:1a:7e:c8:67:27:67:4e:33:be:a7:e9:b6:d9:2b:52: ad:c9:10:28:d4:c9:0b:0e:65:11:18:78:fa:70:10:81:82:79: 65:88:ed:ce:35:ba:f6:d6:4c:01:21:0b:c6:ad:e6:9e:04:c4: 16:3e:e7:31:14:60:df:30:ec:0a:d2:50:32:55:c9:ce:ee:c0: 6b:d4:6f:2c:85:70:47:64:94:51:4b:99:63:3d:67:6a:ba:10: 37:d7:4f:97:4f:92:e4:20:cb:67:f8:a2:7a:8d:9e:80:9f:d3: 46:25:e3:54:7c:e2:0a:a1:a5:1d:ba:e6:8a:c3:d3:9c:8a:26: ca:90:90:fe:b1:21:33:38:83:1f:f2:62:e5:74:94:70:6c:6a: 5a:f2:56:fb:55:76:06:e3:82:b2:08:c8:e1:5b:0f:d4:85:fb: 51:e1:64:d7:7c:36:b4:4c:0d:bf:7e:c3:a5:98:f4:5d:0d:69: c9:65:ad:93:f8:84:d4:a4:25:b6:64:18:a7:5c:e2:a2:fa:47: 70:3e:9f:bc:00:54:0d:d2:c2:58:ac:ce:a6:8a:9a:9f:56:1e: 88:75:57:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0IwNzExMC8GA1UEBRMoQ0NFOUM1NjI0QkFDRjlEMDk4NUUzRjJENkUzMUU2QjJE ODZEODJBRTAeFw0yNjAzMDEwOTMyNTNaFw0yNjAzMDgwOTMyNTNaMBgxFjAUBgNV BAMTDTY5YTQwN2M1LTMyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7yzi62lDZJZqUvfN1YMrIJ1+mTXy/c54Rwol+VK6ehZjKvJ6e7XmuZ0NKE8ut 4rqzsqokMUslrR7c04bWTVlzXwAp0F3H4lpEve4uktXdbNqyYceivv1YJ7FD/0ic ff5WA8UQtJK/BKZb+rahmVGf6yqjZN0gFsDiDZ+5+QJz2INMrhoiRcey+cBPFzHJ ZB3ZAw6gp6upfS0UdOOnEDFkNABb+x73h/HpExArlm4Nw/9Yt14HAXb4O1vTXogQ eT2xow47YAv93BkMbWojOHXU/kQ6TY65YqonJ2V3T5eEQqr6+BHM17aROQ6tOcud nlsB9UBFNGeqTe1SwXADUTaJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaJG+CqpH +vwuEjMhZsTDheqmikUwHwYDVR0jBBgwFoAUzOnFYkus+dCYXj8tbjHmsthtgq4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjA3L0Q4ODU0NDkyOEZE NTExRjBBNjFDOUIyQkM0RjlBRTAyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvek9uRllrdXMtZENZWGo4dGJqSG1zdGh0Z3E0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 QjA3L0Q4ODU0NDkyOEZENTExRjBBNjFDOUIyQkM0RjlBRTAyL3pPbkZZa3VzLWRD WVhqOHRiakhtc3RodGdxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCtXDk2fyoL3JGZVWMf7F46OCTh/K5OGulLx3Ss4gJsAFe4fOt+kSAafshnJ2dO M76n6bbZK1KtyRAo1MkLDmURGHj6cBCBgnlliO3ONbr21kwBIQvGreaeBMQWPucx FGDfMOwK0lAyVcnO7sBr1G8shXBHZJRRS5ljPWdquhA310+XT5LkIMtn+KJ6jZ6A n9NGJeNUfOIKoaUduuaKw9OciibKkJD+sSEzOIMf8mLldJRwbGpa8lb7VXYG44Ky CMjhWw/UhftR4WTXfDa0TA2/fsOlmPRdDWnJZa2T+ITUpCW2ZBinXOKi+kdwPp+8 AFQN0sJYrM6mipqfVh6IdVcx -----END CERTIFICATE-----Generated at Mon Mar 2 02:31:54 2026 by rpki-client