$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: bVswL7/1jXDONWKDJzRpVbhBl9yvPqm3EuDizxxidMA= Subject key identifier: 33:05:29:29:C6:50:81:20:A7:AE:68:58:F9:BE:52:11:FC:4B:EA:BB Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 63 Signing time: Mon 02 Mar 2026 01:17:02 +0000 Manifest this update: Mon 02 Mar 2026 01:17:01 +0000 Manifest next update: Mon 09 Mar 2026 01:17:01 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: +0qiiddeOHyYhmDO9q7jLJHfjNGjj0SluHi33fWp7Kk=) 2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Mar 2 01:17:01 2026 GMT Not After : Mar 9 01:17:01 2026 GMT Subject: CN=69a4e50e-1051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:3a:7a:74:2d:f4:96:87:33:90:cb:26:f6: a6:0e:e0:6a:91:e3:1b:9b:d4:c6:a2:ed:4e:33:51: a6:b3:77:ca:4b:1f:d0:a1:84:d2:df:7d:40:ec:36: 08:45:f4:f0:bc:7e:4f:ea:2a:7c:18:b1:ad:00:07: 53:dd:e2:33:2c:46:13:4e:8f:b0:2c:09:49:4f:1b: 3f:6d:32:7f:8b:de:71:78:0e:cc:b9:1c:c4:a4:5f: f7:3d:6a:0f:43:75:93:c1:fa:21:d7:93:77:f1:08: 59:75:2e:58:8c:ab:a3:b5:b2:18:8b:9b:a2:dc:73: 70:48:78:3a:2f:18:06:ff:e5:b2:d4:0d:95:60:01: a1:bc:ea:38:1e:46:ff:86:e0:e1:95:e7:0c:3c:33: 2c:d4:2f:cb:b6:a8:e2:9b:5f:69:c2:2f:87:38:1b: 37:44:95:5c:6e:09:30:46:d5:d9:0e:b0:a5:6c:d1: 43:36:51:99:0e:47:3e:31:71:d4:06:7f:c2:de:34: c7:bc:87:c5:5d:98:39:a2:a4:51:6a:5e:c9:3d:3a: b4:c3:61:5e:ff:10:4f:32:bb:1e:b7:00:d4:ab:49: a0:41:10:32:d4:5a:36:f2:6b:9e:a8:0f:fa:6b:41: 8a:a7:9b:86:58:14:80:68:45:07:53:f6:be:b7:0c: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:05:29:29:C6:50:81:20:A7:AE:68:58:F9:BE:52:11:FC:4B:EA:BB X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:32:c2:8a:02:7b:33:fe:40:0e:4c:dd:14:87:21:bb:71: c4:dc:41:20:9e:45:fc:68:ae:e6:d7:d4:f4:41:c1:57:51:ca: d2:b6:d5:40:7d:2f:bd:da:70:86:98:c9:a0:fd:59:2a:c9:a7: 0a:4a:8f:58:1b:e9:99:39:9f:40:02:bb:eb:ba:ae:80:de:d3: 34:82:8f:cd:bd:6c:69:aa:95:6b:b9:88:58:08:09:be:44:f1: 67:72:46:fa:1e:69:df:2c:1a:ce:d2:66:dd:83:e0:ac:87:46: 7c:6d:c2:60:1a:24:9b:70:51:ee:e0:d7:f9:df:14:12:65:4a: 7d:ed:62:9c:9f:15:4a:00:f3:b9:5f:fc:7f:04:40:b6:94:4e: a2:86:1a:d3:c1:4c:aa:ed:cb:cb:28:63:cc:94:ff:b3:dc:69: 86:53:84:53:23:10:d4:b5:4c:49:47:7a:81:30:64:4d:d7:b4: 8b:c3:e3:7e:c8:81:8f:c3:15:6d:f6:9d:04:cc:fe:66:4e:93: b3:8e:2c:82:37:56:7a:63:c5:84:32:64:62:2b:84:56:e0:54: 62:de:e4:e3:b6:07:9b:87:2a:0e:f5:40:2f:ba:13:91:c6:92: 90:93:89:c8:a7:2e:c2:a6:fb:3a:96:68:77:ad:8b:e3:9e:b5: 72:d2:96:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNjAzMDIwMTE3MDFaFw0yNjAzMDkwMTE3MDFaMBgxFjAUBgNV BAMTDTY5YTRlNTBlLTEwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb4zp6dC30loczkMsm9qYO4GqR4xub1Mai7U4zUaazd8pLH9ChhNLffUDsNghF 9PC8fk/qKnwYsa0AB1Pd4jMsRhNOj7AsCUlPGz9tMn+L3nF4Dsy5HMSkX/c9ag9D dZPB+iHXk3fxCFl1LliMq6O1shiLm6Lcc3BIeDovGAb/5bLUDZVgAaG86jgeRv+G 4OGV5ww8MyzUL8u2qOKbX2nCL4c4GzdElVxuCTBG1dkOsKVs0UM2UZkORz4xcdQG f8LeNMe8h8VdmDmipFFqXsk9OrTDYV7/EE8yux63ANSrSaBBEDLUWjbya56oD/pr QYqnm4ZYFIBoRQdT9r63DOyDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMwUpKcZQ gSCnrmhY+b5SEfxL6rswHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByTTLCigJ7M/5ADkzdFIchu3HE3EEgnkX8aK7m19T0QcFXUcrSttVAfS+92nCG mMmg/VkqyacKSo9YG+mZOZ9AArvruq6A3tM0go/NvWxpqpVruYhYCAm+RPFnckb6 HmnfLBrO0mbdg+Csh0Z8bcJgGiSbcFHu4Nf53xQSZUp97WKcnxVKAPO5X/x/BEC2 lE6ihhrTwUyq7cvLKGPMlP+z3GmGU4RTIxDUtUxJR3qBMGRN17SLw+N+yIGPwxVt 9p0EzP5mTpOzjiyCN1Z6Y8WEMmRiK4RW4FRi3uTjtgebhyoO9UAvuhORxpKQk4nI py7Cpvs6lmh3rYvjnrVy0pbu -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:17 2026 by rpki-client