$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: /4w10jECqiaVRphhaCbEiGPgxw3ZK/S1+J2yFoOr18M= Subject key identifier: 97:8C:A3:07:12:47:DF:79:61:36:54:D9:5A:31:B7:41:C5:BF:8A:3D Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 12 Signing time: Sun 01 Mar 2026 10:35:06 +0000 Manifest this update: Sun 01 Mar 2026 10:35:06 +0000 Manifest next update: Sun 08 Mar 2026 10:35:06 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: bf67v1sgTi9p8H+vlACKFtGiWOOAUQ5/DReSztZg278=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: NK4d4bxFSxqhCZMER/9+DzybcTvJZmSYnB2R+fONbHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Mar 1 10:35:06 2026 GMT Not After : Mar 8 10:35:06 2026 GMT Subject: CN=69a4165a-18fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:a1:ba:99:1a:24:5c:da:83:05:1b:a4:bf: 41:42:6a:19:a0:35:c9:b9:9e:8b:f5:31:ff:e8:f8: 27:a0:d8:47:99:e5:45:a0:e8:8c:9f:49:87:79:0b: 30:ce:c8:93:61:62:6c:55:7e:67:ad:bd:24:b5:14: f9:bd:95:12:ec:4c:9d:53:e0:94:9e:23:d0:98:0a: 09:fd:fb:60:84:24:b1:d9:c5:a2:9d:90:1f:e5:6a: 8d:82:69:a2:1a:02:e8:99:e1:a8:ec:44:ba:04:8f: c6:b8:80:42:4d:c8:81:fc:6c:1e:dc:ae:ac:7e:8b: 09:47:c5:f5:06:ab:52:8b:03:8c:b7:78:d1:e1:23: 23:2d:ed:72:f4:78:2b:1c:a2:ef:07:ea:be:f1:a7: c5:cc:7c:65:c8:e1:4e:68:74:2c:45:df:3b:16:38: 94:9e:12:24:69:90:3f:33:fc:c5:49:26:0b:91:09: d7:da:1a:3b:29:08:27:9f:4b:f3:2c:b9:96:79:f4: 28:54:c2:c7:c2:53:18:3c:51:ad:b4:1f:dc:75:ed: da:84:1b:9a:7d:1e:a8:09:bf:fa:ff:b7:a5:c6:e1: 6b:f2:34:ac:7a:71:f8:1d:7f:fb:14:81:37:e7:37: 2a:e2:eb:f2:f7:45:73:c5:f1:5c:7c:9b:85:8d:35: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:A3:07:12:47:DF:79:61:36:54:D9:5A:31:B7:41:C5:BF:8A:3D X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ae:f4:44:13:f5:e8:21:ce:46:08:75:ea:f0:38:6a:16:15: 7c:97:bd:1b:77:10:c7:57:f6:8e:03:52:d8:dc:79:c1:1f:af: b2:eb:32:4d:81:04:02:1a:73:1c:0a:08:20:ea:b5:ce:04:5e: 84:57:42:af:ff:96:f9:7c:7f:34:59:cb:28:82:cb:9d:1e:d2: c5:8f:b1:08:6e:ba:63:43:8f:ff:a1:97:d4:d6:b3:4a:8f:71: 77:bc:53:e0:cc:0c:48:27:1d:df:5c:b7:9c:54:65:6a:ec:b9: 8b:da:69:b9:8d:f9:5a:13:a2:79:8f:58:7e:7e:76:99:02:02: 0e:f0:f3:2c:35:a3:08:80:71:cb:37:6a:f9:8f:3c:7a:9d:a0: 37:ac:3d:11:8b:d3:25:b4:d3:77:7d:23:99:ba:96:d3:00:06: 37:5f:1c:67:31:24:d3:08:4b:f2:60:6b:94:a6:b0:32:56:10: 81:09:0c:06:48:23:56:ae:af:5c:34:06:13:b2:c6:1b:b0:b5: 89:14:cf:10:aa:09:72:0c:dd:94:f3:c1:ab:9c:69:52:5b:c4: 8c:3c:8b:33:3e:b7:3f:d8:00:4d:32:16:bd:00:d0:f6:f6:16: 64:b8:ad:f0:c1:ca:37:ab:7b:76:3f:ac:98:80:02:4d:0b:37: 77:09:11:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1 RUVCREE0RjAeFw0yNjAzMDExMDM1MDZaFw0yNjAzMDgxMDM1MDZaMBgxFjAUBgNV BAMTDTY5YTQxNjVhLTE4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi0qG6mRokXNqDBRukv0FCahmgNcm5nov1Mf/o+Ceg2EeZ5UWg6IyfSYd5CzDO yJNhYmxVfmetvSS1FPm9lRLsTJ1T4JSeI9CYCgn9+2CEJLHZxaKdkB/lao2CaaIa AuiZ4ajsRLoEj8a4gEJNyIH8bB7crqx+iwlHxfUGq1KLA4y3eNHhIyMt7XL0eCsc ou8H6r7xp8XMfGXI4U5odCxF3zsWOJSeEiRpkD8z/MVJJguRCdfaGjspCCefS/Ms uZZ59ChUwsfCUxg8Ua20H9x17dqEG5p9HqgJv/r/t6XG4WvyNKx6cfgdf/sUgTfn Nyri6/L3RXPF8Vx8m4WNNYAxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl4yjBxJH 33lhNlTZWjG3QcW/ij0wHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0UxQTY2RjE4MDBERTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpY YXZ4N3pGX0ViYVY3cjJrOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfrvREE/XoIc5GCHXq8DhqFhV8l70bdxDHV/aOA1LY3HnBH6+y6zJNgQQCGnMc Cggg6rXOBF6EV0Kv/5b5fH80WcsogsudHtLFj7EIbrpjQ4//oZfU1rNKj3F3vFPg zAxIJx3fXLecVGVq7LmL2mm5jflaE6J5j1h+fnaZAgIO8PMsNaMIgHHLN2r5jzx6 naA3rD0Ri9MltNN3fSOZupbTAAY3XxxnMSTTCEvyYGuUprAyVhCBCQwGSCNWrq9c NAYTssYbsLWJFM8QqglyDN2U88GrnGlSW8SMPIszPrc/2ABNMha9AND29hZkuK3w wco3q3t2P6yYgAJNCzd3CRHv -----END CERTIFICATE-----Generated at Sun Mar 1 20:50:35 2026 by rpki-client