$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: 6+AbIs4GKLbBTmtOynusmZ+caVic3drJuN4LRRMsrt0= Subject key identifier: 18:61:8D:94:D5:B7:D1:95:57:03:46:CC:85:06:64:91:20:D4:C5:F9 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: 012A Signing time: Sun 01 Mar 2026 06:36:43 +0000 Manifest this update: Sun 01 Mar 2026 06:36:43 +0000 Manifest next update: Sun 08 Mar 2026 06:36:43 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: VYkZ1srSV64K3pHVq/KvRDsXHRmeDorwduLXE/WxQQc=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: ZL8Uf90EoIe/9cFPftTPRzJYLCEIVxaFapmNs/ZbD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Mar 1 06:36:43 2026 GMT Not After : Mar 8 06:36:43 2026 GMT Subject: CN=69a3de7b-3dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:70:ba:ce:3d:3a:f4:47:6a:80:7a:72:52: 80:ed:7a:06:43:4b:47:9a:94:05:fc:2e:c5:21:83: 94:2b:24:30:b1:55:57:36:0f:80:63:1f:04:91:82: c1:67:50:30:e7:ce:d8:c6:56:c1:a3:84:01:6b:ad: 8a:38:8f:65:1c:ae:4a:5a:09:2a:e9:1b:7f:de:6e: 85:5c:74:e3:5e:cf:c8:50:28:33:50:6d:ad:35:5d: 7c:45:0c:31:21:32:63:c7:84:3f:53:b7:c7:ba:57: 71:3e:07:ae:b2:e7:6b:a0:35:5f:8e:99:4b:26:fe: 49:e8:c8:be:27:9c:92:27:23:eb:e8:bf:a4:32:c3: cf:b9:04:b4:75:47:a3:03:c3:10:dd:c1:69:95:aa: 8f:b1:66:7e:eb:41:6e:1b:dd:38:c5:8f:81:e7:b8: 21:a1:35:4b:a2:3d:67:07:38:ed:d9:b1:3f:ee:7e: 55:96:c6:3a:3a:b6:3b:bd:d0:90:8f:c2:70:aa:b8: d6:38:ff:1b:fa:78:d0:32:52:a4:c8:91:10:95:bd: d5:61:15:81:41:8b:db:0c:38:e2:60:30:42:db:ba: bf:16:83:ea:6c:49:90:1c:78:09:e8:5f:c8:aa:70: f3:0b:71:a8:9c:68:59:83:20:cd:df:05:39:09:bf: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:61:8D:94:D5:B7:D1:95:57:03:46:CC:85:06:64:91:20:D4:C5:F9 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:9c:69:90:5a:b3:69:9e:43:eb:b2:65:58:bf:ae:95:25: 7f:d5:6b:a5:cc:4f:84:4e:a9:53:81:5e:f0:69:6e:98:24:41: b1:74:bb:c9:4c:ca:e1:d0:09:7e:c4:85:21:da:81:c2:95:a2: 4a:28:96:bf:15:18:b2:4d:36:bb:1e:24:bf:b2:20:ec:fc:1b: bc:83:b9:8a:bf:5d:67:d4:4f:a6:14:c8:f4:35:65:bf:1b:c2: 20:7f:56:c6:ba:84:cf:ca:ca:3c:70:d0:1a:77:f7:7e:00:f0: 14:1b:29:b7:99:d4:c8:dc:61:ca:b1:cd:1a:41:33:12:93:10: 22:e8:77:1b:3e:b8:5d:31:a3:91:a6:85:88:51:06:50:9b:41: 18:5d:f5:2f:6f:fb:56:09:4c:48:ff:17:47:41:bf:f0:b2:82: d9:d7:c1:37:3d:85:34:d6:4f:4b:70:70:d3:c7:70:25:b7:34: 32:cf:2c:cf:c4:60:0b:61:78:77:15:e9:66:e6:50:49:e4:b8: 0a:2a:e8:93:01:a5:65:b0:e5:6c:45:8c:46:23:bd:55:49:f7: c1:6c:23:67:af:f8:6e:2f:2c:03:9b:ec:1f:8c:9c:5d:73:4f: cb:3a:f4:41:3d:20:b0:76:1b:9a:d5:a4:69:0f:1d:33:0d:ff: 0f:82:29:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjYwMzAxMDYzNjQzWhcNMjYwMzA4MDYzNjQzWjAYMRYwFAYD VQQDEw02OWEzZGU3Yi0zZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApStwus49OvRHaoB6clKA7XoGQ0tHmpQF/C7FIYOUKyQwsVVXNg+AYx8EkYLB Z1Aw587YxlbBo4QBa62KOI9lHK5KWgkq6Rt/3m6FXHTjXs/IUCgzUG2tNV18RQwx ITJjx4Q/U7fHuldxPgeusudroDVfjplLJv5J6Mi+J5ySJyPr6L+kMsPPuQS0dUej A8MQ3cFplaqPsWZ+60FuG904xY+B57ghoTVLoj1nBzjt2bE/7n5VlsY6OrY7vdCQ j8JwqrjWOP8b+njQMlKkyJEQlb3VYRWBQYvbDDjiYDBC27q/FoPqbEmQHHgJ6F/I qnDzC3GonGhZgyDN3wU5Cb8xGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhhjZTV t9GVVwNGzIUGZJEg1MX5MB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc1ycaZBas2meQ+uyZVi/rpUlf9VrpcxPhE6pU4Fe8GlumCRBsXS7yUzK4dAJ fsSFIdqBwpWiSiiWvxUYsk02ux4kv7Ig7PwbvIO5ir9dZ9RPphTI9DVlvxvCIH9W xrqEz8rKPHDQGnf3fgDwFBspt5nUyNxhyrHNGkEzEpMQIuh3Gz64XTGjkaaFiFEG UJtBGF31L2/7VglMSP8XR0G/8LKC2dfBNz2FNNZPS3Bw08dwJbc0Ms8sz8RgC2F4 dxXpZuZQSeS4CirokwGlZbDlbEWMRiO9VUn3wWwjZ6/4bi8sA5vsH4ycXXNPyzr0 QT0gsHYbmtWkaQ8dMw3/D4IplQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:01 2026 by rpki-client