$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: kHTn2nV+3HbjWgCSvvjkLYYOF/YEWh+eXsWTYOWEgVk= Subject key identifier: D4:FA:05:CE:17:86:CC:39:74:E0:1F:09:41:8C:89:B9:3F:D5:74:77 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A49 Signing time: Sun 01 Mar 2026 23:38:16 +0000 Manifest this update: Sun 01 Mar 2026 23:38:14 +0000 Manifest next update: Sun 08 Mar 2026 23:38:14 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: CTHqLKEKJgV+uuYFfpL4joiAoVhPIfLfSOP69atmpeE=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Mar 1 23:38:14 2026 GMT Not After : Mar 8 23:38:14 2026 GMT Subject: CN=69a4cde7-942a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:7b:3c:9d:af:f3:2e:50:cf:a0:ad:00:5b: 64:99:01:b7:7a:bf:dd:83:2d:1c:0f:67:94:02:3b: ab:2c:29:c5:51:e4:7b:40:71:da:1d:7f:a3:18:68: f7:f4:60:4d:e6:8a:a8:1a:cd:f5:0a:f8:f0:39:97: 86:cd:34:2e:64:be:d8:fe:59:08:e4:5d:ea:57:9d: 2a:4e:1d:bf:90:6f:ca:62:8e:6e:2b:03:06:d8:4e: 66:a0:e5:15:a5:e8:d2:95:4f:a9:7b:10:c3:bc:30: d9:9e:c1:a2:c0:fe:54:0c:03:fe:05:44:81:f3:29: a4:a5:2b:98:6a:2a:0f:c9:a0:0c:b0:54:a0:f5:86: ab:30:28:97:d1:bb:00:51:ae:c0:78:82:65:92:24: 0b:aa:6d:2f:37:83:a9:00:92:a6:2a:8b:c2:01:3a: 37:01:7b:1f:62:e2:29:bd:ac:66:8e:d5:f6:1f:ef: 9c:57:8a:ae:12:2a:15:ce:39:22:39:4b:90:9b:50: 42:c2:5f:b1:74:73:4b:f6:b0:af:5c:6f:26:33:be: 55:0d:d4:72:d6:0c:e5:44:a7:e2:da:bf:0c:45:6e: b9:f6:68:f1:37:b2:a3:90:30:f2:7b:ef:31:65:97: 3f:08:ba:bc:ab:f1:ad:04:a9:fc:35:21:34:ad:32: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FA:05:CE:17:86:CC:39:74:E0:1F:09:41:8C:89:B9:3F:D5:74:77 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:70:ef:fa:4d:22:d0:9f:53:26:0b:7b:81:3c:57:05:44:0f: 85:4d:92:80:c5:81:9c:28:30:f1:f3:64:72:bd:4f:6a:26:ee: 22:fe:fc:2e:b3:ad:d9:ce:2a:e2:38:1e:7d:9d:2d:c7:a9:15: 8a:64:87:6c:79:52:4a:40:c7:b7:95:5c:83:28:76:6e:1d:2c: 49:0c:36:f1:ce:73:b0:97:e6:82:0a:9e:49:1e:37:6b:24:8f: f1:6f:73:ba:0f:86:6c:06:eb:41:39:33:b4:98:05:01:0d:b7: 9d:c4:fa:d1:1e:80:cd:2e:fa:66:07:c3:ab:82:16:dd:5c:17: 67:e2:a0:dc:dc:cc:17:e6:be:28:35:99:68:54:13:17:4d:e3: f0:0f:6b:2b:94:64:5a:c8:e2:8a:ba:68:90:32:f3:04:3e:96: 84:e7:fd:53:02:c1:7d:b1:13:33:65:a9:ac:36:ee:59:b4:57: a0:63:90:ec:67:29:e6:4d:72:e6:28:2a:e9:e2:31:e6:40:fe: b9:77:92:80:b6:8e:67:f0:98:3d:b1:2b:31:3d:5b:c1:98:00: 8c:22:51:20:6f:1a:63:4f:03:69:be:16:7c:0b:2e:60:c7:7b: 62:58:53:a6:63:6e:58:33:49:d5:a9:4c:50:38:60:0a:2f:cd: a7:85:3e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjYwMzAxMjMzODE0WhcNMjYwMzA4MjMzODE0WjAYMRYwFAYD VQQDEw02OWE0Y2RlNy05NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51p7PJ2v8y5Qz6CtAFtkmQG3er/dgy0cD2eUAjurLCnFUeR7QHHaHX+jGGj3 9GBN5oqoGs31CvjwOZeGzTQuZL7Y/lkI5F3qV50qTh2/kG/KYo5uKwMG2E5moOUV pejSlU+pexDDvDDZnsGiwP5UDAP+BUSB8ymkpSuYaioPyaAMsFSg9YarMCiX0bsA Ua7AeIJlkiQLqm0vN4OpAJKmKovCATo3AXsfYuIpvaxmjtX2H++cV4quEioVzjki OUuQm1BCwl+xdHNL9rCvXG8mM75VDdRy1gzlRKfi2r8MRW659mjxN7KjkDDye+8x ZZc/CLq8q/GtBKn8NSE0rTK5xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNT6Bc4X hsw5dOAfCUGMibk/1XR3MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg3Dv+k0i0J9TJgt7gTxXBUQPhU2SgMWBnCgw8fNkcr1PaibuIv78LrOt2c4q 4jgefZ0tx6kVimSHbHlSSkDHt5Vcgyh2bh0sSQw28c5zsJfmggqeSR43aySP8W9z ug+GbAbrQTkztJgFAQ23ncT60R6AzS76ZgfDq4IW3VwXZ+Kg3NzMF+a+KDWZaFQT F03j8A9rK5RkWsjiirpokDLzBD6WhOf9UwLBfbETM2WprDbuWbRXoGOQ7Gcp5k1y 5igq6eIx5kD+uXeSgLaOZ/CYPbErMT1bwZgAjCJRIG8aY08Dab4WfAsuYMd7YlhT pmNuWDNJ1alMUDhgCi/Np4U+BQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:55 2026 by rpki-client