$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: UBzCcVXL9EWK1d8/7uDJqIdZZeOZser2AoRuJJdE9Mo= Subject key identifier: 5B:4C:48:4E:BA:EA:5D:50:9C:07:8F:8F:9D:67:0D:2B:4A:92:83:A5 Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 44 Signing time: Sun 01 Mar 2026 09:49:47 +0000 Manifest this update: Sun 01 Mar 2026 09:49:47 +0000 Manifest next update: Sun 08 Mar 2026 09:49:47 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: fK6KXoTKF1egq2nl4lkJmmo4tDZuoEeOFgKc5vArNwg=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Mar 1 09:49:47 2026 GMT Not After : Mar 8 09:49:47 2026 GMT Subject: CN=69a40bbb-9e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:16:69:51:34:19:30:22:e1:a1:e1:67:9a: 32:95:c8:f9:aa:13:ba:b7:fb:a4:ed:e9:75:42:7f: 11:d7:82:d9:df:dc:f2:01:39:71:81:39:e2:58:6e: 5e:a2:9c:06:0b:50:5a:ac:c3:74:77:36:fd:f7:c8: 96:aa:ef:fd:0e:e0:a0:0b:21:6e:d4:fa:fa:95:2b: 29:7d:e7:52:17:8d:90:fd:73:32:78:cb:88:a5:76: 2e:da:6b:e0:11:e9:fe:19:3d:4b:51:fc:a1:b7:51: f7:0a:20:ba:71:9d:00:27:cd:c9:c8:a6:fa:ad:c0: 51:77:fa:4d:56:30:76:69:41:6f:f3:4d:97:43:95: c0:95:19:cc:e6:a9:18:b0:49:4e:50:fb:50:0e:cc: 1b:1b:bb:cc:d2:94:41:34:7a:96:ef:bb:57:52:70: e9:07:fc:61:6e:0c:b8:1b:d7:df:ca:0e:83:af:39: 22:aa:3b:59:e9:02:a2:be:9c:f3:f1:93:a1:88:f2: 51:d3:ad:c8:69:98:22:43:44:ad:81:b2:16:2a:31: 23:b9:98:72:31:ca:34:f1:eb:66:87:b7:84:c8:00: 6e:f0:ac:24:f9:b6:d9:4c:54:e4:24:a4:e6:aa:6d: 39:34:e7:e0:c5:16:a2:32:f6:b0:d6:92:c8:95:b2: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:48:4E:BA:EA:5D:50:9C:07:8F:8F:9D:67:0D:2B:4A:92:83:A5 X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:78:01:25:11:c9:0f:9b:d0:75:96:d4:59:c7:2d:0c:26:f1: aa:34:cc:56:58:67:db:f6:cf:f1:21:fb:3f:3d:bf:3f:a9:7a: 55:ba:58:82:1d:5a:d1:32:06:92:10:78:f5:26:54:61:3d:1e: 96:84:f6:ae:8a:ab:c7:b2:ec:d9:e8:51:4c:11:fc:82:40:f8: 28:e0:d5:06:28:b5:d8:70:17:36:83:07:63:8e:df:6f:b1:24: 07:eb:03:64:32:59:b0:12:8d:4d:71:7c:f3:c4:9d:ca:77:99: 90:55:32:b8:21:53:91:e4:7d:57:f6:fa:58:6c:ee:39:dc:78: 23:7c:f7:71:94:5b:9e:e7:98:48:fe:02:05:14:e5:90:cc:f1: e5:db:31:a9:4a:05:c3:1d:6a:dd:c7:49:34:be:46:7d:64:35: eb:f7:f8:93:9d:6a:e0:ee:44:31:15:9d:a4:c7:b4:a8:c0:91: bb:92:d4:72:c6:7a:f6:2b:72:9b:9c:3d:b0:7b:24:d8:04:11: 25:c5:8e:0a:b7:d7:f2:3e:ea:64:9e:e6:b1:59:5d:20:06:17: 0b:57:69:b3:c8:f7:19:2f:93:64:06:73:b1:66:fa:cb:c3:c7: b9:93:23:9b:e2:3f:be:8d:2e:b2:85:87:1c:01:2c:11:12:91: 52:13:2b:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNjAzMDEwOTQ5NDdaFw0yNjAzMDgwOTQ5NDdaMBgxFjAUBgNV BAMTDTY5YTQwYmJiLTllNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkfBZpUTQZMCLhoeFnmjKVyPmqE7q3+6Tt6XVCfxHXgtnf3PIBOXGBOeJYbl6i nAYLUFqsw3R3Nv33yJaq7/0O4KALIW7U+vqVKyl951IXjZD9czJ4y4ildi7aa+AR 6f4ZPUtR/KG3UfcKILpxnQAnzcnIpvqtwFF3+k1WMHZpQW/zTZdDlcCVGczmqRiw SU5Q+1AOzBsbu8zSlEE0epbvu1dScOkH/GFuDLgb19/KDoOvOSKqO1npAqK+nPPx k6GI8lHTrchpmCJDRK2BshYqMSO5mHIxyjTx62aHt4TIAG7wrCT5ttlMVOQkpOaq bTk05+DFFqIy9rDWksiVsiuzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW0xITrrq XVCcB4+PnWcNK0qSg6UwHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzRBM0REMUIyQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVN NzJXTFg3MFdYSExxbm9zTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3eAElEckPm9B1ltRZxy0MJvGqNMxWWGfb9s/xIfs/Pb8/qXpVuliCHVrRMgaS EHj1JlRhPR6WhPauiqvHsuzZ6FFMEfyCQPgo4NUGKLXYcBc2gwdjjt9vsSQH6wNk MlmwEo1NcXzzxJ3Kd5mQVTK4IVOR5H1X9vpYbO453HgjfPdxlFue55hI/gIFFOWQ zPHl2zGpSgXDHWrdx0k0vkZ9ZDXr9/iTnWrg7kQxFZ2kx7SowJG7ktRyxnr2K3Kb nD2weyTYBBElxY4Kt9fyPupknuaxWV0gBhcLV2mzyPcZL5NkBnOxZvrLw8e5kyOb 4j++jS6yhYccASwREpFSEyvm -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:23 2026 by rpki-client