$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: HzkHzYtw3rZNG12JDP10XZq87f2gMiq1TVB8PxpP8cg= Subject key identifier: C0:94:74:93:1E:1B:DE:E9:4F:75:A2:F4:36:F7:5C:60:83:DC:44:C3 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 02CD Signing time: Mon 02 Mar 2026 00:20:53 +0000 Manifest this update: Mon 02 Mar 2026 00:20:51 +0000 Manifest next update: Mon 09 Mar 2026 00:20:51 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: iYNROt3CdoQeL4KWIqkLSF9XwRQPEUze9HJLs8LcR8k=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Mar 2 00:20:51 2026 GMT Not After : Mar 9 00:20:51 2026 GMT Subject: CN=69a4d7e5-9ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:3d:24:92:00:a9:a7:09:0e:db:d6:e8:d7: 72:19:e9:d1:80:e9:b3:2b:00:fb:e4:8a:6b:61:fb: f7:19:8f:87:a0:bd:e5:61:5d:f2:bf:d0:65:cc:a3: 0e:20:ed:97:55:50:77:97:21:49:18:bb:fa:c4:d7: 2e:c7:ee:ab:50:8b:d2:d9:5c:8c:fd:68:60:c5:8f: 12:20:0f:9d:f8:a9:13:b9:fc:2b:45:8e:9b:6e:97: 4a:00:f3:5e:54:4e:23:d7:14:b5:d4:b4:04:81:ce: 43:40:61:dd:36:01:59:18:e2:ed:21:db:22:32:e9: aa:3d:a4:1a:b5:9e:f9:21:bc:bb:c2:32:7b:92:96: 10:c8:81:62:87:f2:8d:23:f2:0a:b3:c9:bb:f2:8d: 66:aa:45:7a:0c:e1:2e:99:7c:43:53:79:70:a5:56: c5:ba:6c:3d:26:cb:2c:96:9c:c4:00:7e:0a:41:0b: bd:55:3b:f4:2b:f6:c1:a7:f8:83:ed:10:1b:59:20: c6:37:f7:34:8a:2e:9d:89:89:10:b4:5a:be:0c:be: 3b:9d:4a:5c:b7:d7:8e:4f:97:58:4e:f2:4a:9d:8c: 27:2a:91:12:6e:60:47:2a:b1:29:58:c2:02:98:4a: 22:00:53:8f:0b:5b:c0:38:b8:69:8f:6c:a3:89:4d: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:74:93:1E:1B:DE:E9:4F:75:A2:F4:36:F7:5C:60:83:DC:44:C3 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:db:cd:93:56:d9:ea:43:54:2b:2b:8e:dd:60:1a:6a:a3:27: fe:63:b6:7d:0d:76:a8:2c:2c:60:78:8c:ef:a5:c9:24:ed:b4: ae:11:11:76:a7:9d:ab:0a:7b:50:d2:99:27:b4:15:41:64:a4: f9:92:c1:7f:5f:84:46:4c:18:98:21:db:79:eb:1d:4e:64:fb: 05:ae:7e:3a:0c:2c:c1:58:01:82:eb:5b:16:28:e4:86:b3:84: 97:16:8b:5a:2d:0f:5f:19:51:d5:e7:17:ae:ed:65:d8:ec:3e: 12:27:65:4c:c4:1f:b3:1b:8a:6c:fe:04:61:29:b7:27:01:08: d0:39:7c:59:b6:98:6a:a4:fe:a9:ba:5c:3a:56:e9:4f:08:39: 8e:4c:4a:e7:23:d4:c1:af:c4:97:ea:ed:25:7c:05:4f:5c:c9: 14:75:51:1c:26:5e:31:fc:e8:8c:8f:a4:39:a2:db:0e:5d:00: 2a:c5:02:d6:87:6d:8a:b0:15:54:59:73:7a:db:ad:5b:e6:ed: ec:a1:12:bf:ba:10:db:4b:e0:72:56:15:3f:28:e8:cd:c8:1d: a4:78:43:00:a5:16:4a:d3:21:ec:9e:bd:d5:13:9a:cc:70:60: 68:43:af:b0:22:2e:ea:63:88:cc:14:b1:09:07:8d:cd:64:1a: 57:9e:12:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjYwMzAyMDAyMDUxWhcNMjYwMzA5MDAyMDUxWjAYMRYwFAYD VQQDEw02OWE0ZDdlNS05Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUc9JJIAqacJDtvW6NdyGenRgOmzKwD75IprYfv3GY+HoL3lYV3yv9BlzKMO IO2XVVB3lyFJGLv6xNcux+6rUIvS2VyM/WhgxY8SIA+d+KkTufwrRY6bbpdKAPNe VE4j1xS11LQEgc5DQGHdNgFZGOLtIdsiMumqPaQatZ75Iby7wjJ7kpYQyIFih/KN I/IKs8m78o1mqkV6DOEumXxDU3lwpVbFumw9JssslpzEAH4KQQu9VTv0K/bBp/iD 7RAbWSDGN/c0ii6diYkQtFq+DL47nUpct9eOT5dYTvJKnYwnKpESbmBHKrEpWMIC mEoiAFOPC1vAOLhpj2yjiU3uGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCUdJMe G97pT3Wi9Db3XGCD3ETDMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQNvNk1bZ6kNUKyuO3WAaaqMn/mO2fQ12qCwsYHiM76XJJO20rhERdqedqwp7 UNKZJ7QVQWSk+ZLBf1+ERkwYmCHbeesdTmT7Ba5+OgwswVgBgutbFijkhrOElxaL Wi0PXxlR1ecXru1l2Ow+EidlTMQfsxuKbP4EYSm3JwEI0Dl8WbaYaqT+qbpcOlbp Twg5jkxK5yPUwa/El+rtJXwFT1zJFHVRHCZeMfzojI+kOaLbDl0AKsUC1odtirAV VFlzetutW+bt7KESv7oQ20vgclYVPyjozcgdpHhDAKUWStMh7J691ROazHBgaEOv sCIu6mOIzBSxCQeNzWQaV54S6A== -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:43 2026 by rpki-client