$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: hDhmD8ZiXKlGVAsdtNUwFJnGCmFROD8vruIunG3M49M= Subject key identifier: A1:FD:DB:58:DB:E7:4D:F9:92:AA:B6:CF:ED:64:6F:2E:EF:F0:49:3D Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0207 Signing time: Sun 01 Mar 2026 03:51:26 +0000 Manifest this update: Sun 01 Mar 2026 03:51:25 +0000 Manifest next update: Sun 08 Mar 2026 03:51:25 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: 6hfPLXSIg2VHDAAQ/vCz7i0Kyx2A/CTL6i27onJ6Awk=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Mar 1 03:51:25 2026 GMT Not After : Mar 8 03:51:25 2026 GMT Subject: CN=69a3b7bd-340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:da:7f:eb:3a:d5:a8:b2:34:ff:38:c2:21: 1b:fe:e3:ee:0b:bd:fc:e0:a2:a2:f9:4a:fe:de:ba: 4d:45:23:62:8c:31:60:b1:b8:d5:58:fa:83:b5:85: a3:e4:80:1a:9a:02:dd:61:c0:24:57:db:8f:2d:b3: c1:58:a2:1a:65:83:08:a6:7a:42:ff:15:89:bf:f3: e7:8b:f4:0c:66:63:e7:d6:60:7d:5b:76:5d:f4:5e: 16:fd:83:2d:e2:c7:30:88:38:32:bb:b9:40:4d:c5: fc:52:26:78:6f:93:9f:33:fd:8c:13:08:58:2e:30: 5a:44:ec:66:31:01:6e:91:78:ea:66:94:9c:fb:03: f6:96:88:05:9d:70:cc:29:3f:a6:f3:20:c2:e7:31: ae:da:24:c6:ab:6f:b4:f7:49:29:19:c2:9f:a6:48: 3e:7d:34:10:c5:ac:63:20:e1:d0:94:10:18:2f:06: 25:eb:02:c6:a6:42:76:b0:2b:89:f3:48:4d:91:74: 71:41:42:a0:5d:ed:d0:ee:10:90:ef:52:84:31:af: cd:61:c5:ef:21:00:17:92:d4:c1:0d:82:27:9f:32: f7:13:8e:ee:6a:87:89:90:bc:7e:19:60:06:8d:6b: df:6f:31:a1:55:e1:fc:21:d9:c1:37:eb:9f:8c:e1: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:DB:58:DB:E7:4D:F9:92:AA:B6:CF:ED:64:6F:2E:EF:F0:49:3D X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:df:4c:cd:b8:df:10:83:52:bd:da:98:2d:72:53:d4:ee:f3: 9e:27:26:2d:a4:ed:0a:b0:b4:88:d5:03:e0:f9:1d:41:ff:1e: ff:d3:16:2a:f0:54:28:9d:1b:67:4e:35:03:e5:98:01:bb:12: da:43:84:1c:51:76:4b:84:f4:23:91:32:d6:b4:e1:3a:13:ea: 78:80:85:f9:25:0f:0d:98:c9:65:4d:57:46:da:08:4f:13:00: db:1f:f7:73:f2:20:4b:f1:f2:4d:68:e3:57:95:c4:a9:30:b5: 3d:27:93:87:7a:38:20:06:10:6d:06:6c:ec:66:78:4b:4b:c3: 7e:c8:38:fd:81:1d:2c:a3:55:80:6e:5b:39:7d:d3:df:ad:e3: 79:a6:c5:30:7a:18:eb:c4:7b:f6:c8:b9:c3:41:23:1a:9e:bf: ea:2e:ab:1a:6a:89:91:d1:c0:5e:b9:38:f7:73:3e:14:2f:a9: 28:a2:db:8f:4c:fa:95:04:5b:01:e0:ac:57:3e:26:27:fa:cc: 62:80:86:b1:b7:81:1e:00:98:d5:fc:3b:d2:12:fa:ba:b3:66: 96:5e:c3:cf:82:59:b2:4e:67:e4:20:28:30:ac:39:51:81:34: c7:ed:c6:8b:b0:08:06:5c:65:27:8a:2f:de:24:6b:b6:81:b1: ef:fa:e8:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwMzAxMDM1MTI1WhcNMjYwMzA4MDM1MTI1WjAYMRYwFAYD VQQDDA02OWEzYjdiZC0zNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZraf+s61aiyNP84wiEb/uPuC7384KKi+Ur+3rpNRSNijDFgsbjVWPqDtYWj 5IAamgLdYcAkV9uPLbPBWKIaZYMIpnpC/xWJv/Pni/QMZmPn1mB9W3Zd9F4W/YMt 4scwiDgyu7lATcX8UiZ4b5OfM/2MEwhYLjBaROxmMQFukXjqZpSc+wP2logFnXDM KT+m8yDC5zGu2iTGq2+090kpGcKfpkg+fTQQxaxjIOHQlBAYLwYl6wLGpkJ2sCuJ 80hNkXRxQUKgXe3Q7hCQ71KEMa/NYcXvIQAXktTBDYInnzL3E47uaoeJkLx+GWAG jWvfbzGhVeH8IdnBN+ufjOFBHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH921jb 5035kqq2z+1kby7v8Ek9MB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArN9MzbjfEINSvdqYLXJT1O7znicmLaTtCrC0iNUD4PkdQf8e/9MWKvBUKJ0b Z041A+WYAbsS2kOEHFF2S4T0I5Ey1rThOhPqeICF+SUPDZjJZU1XRtoITxMA2x/3 c/IgS/HyTWjjV5XEqTC1PSeTh3o4IAYQbQZs7GZ4S0vDfsg4/YEdLKNVgG5bOX3T 363jeabFMHoY68R79si5w0EjGp6/6i6rGmqJkdHAXrk493M+FC+pKKLbj0z6lQRb AeCsVz4mJ/rMYoCGsbeBHgCY1fw70hL6urNmll7Dz4JZsk5n5CAoMKw5UYE0x+3G i7AIBlxlJ4ov3iRrtoGx7/ro/A== -----END CERTIFICATE-----Generated at Sun Mar 1 20:28:33 2026 by rpki-client