$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: APlGiuo7g/6kTVyCdr73r1MdL5EebFO4/75tB8VLznE= Subject key identifier: DC:3B:34:E9:0D:B0:F1:CA:35:36:27:02:8D:AA:B4:29:A3:CB:18:FA Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0378 Signing time: Sun 01 Mar 2026 01:42:31 +0000 Manifest this update: Sun 01 Mar 2026 01:42:31 +0000 Manifest next update: Sun 08 Mar 2026 01:42:31 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: vuRBjmeYEEitDvzpbUR7kMfW+Yc3pcl4Bo5QhiCmgTI=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: 3npwV8/+wiUK9JBAZyO0+8UedY3k/f+O7Td/WLjNjlA=) 3: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Mar 1 01:42:31 2026 GMT Not After : Mar 8 01:42:31 2026 GMT Subject: CN=69a39987-4d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:a0:dd:f1:15:09:ea:de:fe:ec:20:6e:8a: c1:84:fb:57:e7:49:c4:3d:64:16:82:0a:17:35:5a: 0c:9b:48:b1:b6:c6:4c:76:61:f2:3f:ba:72:fd:f5: 8d:e5:98:de:b3:21:51:23:a9:17:fa:e8:c0:02:de: 45:1f:48:ea:89:99:fd:0e:17:03:28:ca:0a:0c:56: 0d:82:e2:45:ec:0a:11:97:9c:83:3a:04:06:61:2d: 31:db:fd:cc:6e:4a:05:3f:7c:99:75:3d:e2:10:c7: b4:51:41:3f:6a:0f:b8:1d:31:30:d0:c6:4c:07:1a: f9:c9:4c:9f:16:3a:d9:a7:2f:d2:62:73:b6:f0:ce: 1c:90:2b:a5:49:e9:a7:aa:1a:86:4c:c7:41:50:89: 42:10:b6:25:6b:9f:d5:e5:60:a7:63:3f:91:66:cb: 3a:93:7c:af:f1:8c:60:83:d5:6b:81:09:2d:a9:43: 36:d8:da:b0:37:ce:f9:fc:3c:8c:7c:2e:f2:d9:3b: 00:6e:81:72:be:ee:23:93:70:bc:5c:4c:7e:64:29: 22:c9:10:d0:d5:01:6e:b9:51:19:fb:c3:52:63:4b: 9b:e3:63:b7:47:c7:0a:3d:e0:1d:14:84:e8:79:8b: f7:2c:c8:b4:41:ab:7b:95:5a:20:3a:fe:4b:14:3a: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3B:34:E9:0D:B0:F1:CA:35:36:27:02:8D:AA:B4:29:A3:CB:18:FA X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:03:c6:b2:d3:b2:26:a2:b0:e7:7c:2f:36:66:a1:4c:e6:88: e8:1d:4b:df:95:30:b7:5d:eb:8f:fc:dd:6f:82:2f:a2:6e:e1: b0:ec:54:5e:fd:c6:0d:77:a6:c2:47:c6:0c:63:9d:a5:d2:01: 5a:15:fc:85:23:4f:94:dc:b0:c9:68:9e:51:37:9a:b8:c0:77: 81:b5:a1:bd:69:19:72:e3:e0:5a:da:3f:0b:df:b9:43:87:0e: 37:77:0d:cf:26:55:3d:47:3c:6b:a1:6f:7d:cc:f0:78:68:58: d7:bf:18:5f:b4:71:94:a5:30:a3:72:a1:bf:22:60:d7:30:1c: af:db:96:e7:e0:f8:ef:d1:88:80:4e:f5:4a:46:c4:f5:05:df: de:84:87:60:14:1e:ae:18:d4:21:25:86:69:c3:27:0e:ff:ca: 47:d7:b7:bb:56:15:86:a4:4e:6d:b3:60:b8:f9:16:0d:c7:d5: 86:e4:23:3e:92:be:0c:a2:48:0f:1a:05:57:33:a9:10:b5:04: a4:bd:8e:67:41:85:7c:6a:88:34:15:9f:65:9a:ff:48:5f:a6: 9e:cd:fa:97:02:83:01:dd:6c:79:0c:1d:b6:21:1e:c6:f1:77: 03:4a:44:0f:0f:e7:66:dd:70:9f:00:3c:e6:25:18:16:97:9d: 75:14:a5:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYwMzAxMDE0MjMxWhcNMjYwMzA4MDE0MjMxWjAYMRYwFAYD VQQDDA02OWEzOTk4Ny00ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6mg3fEVCere/uwgborBhPtX50nEPWQWggoXNVoMm0ixtsZMdmHyP7py/fWN 5ZjesyFRI6kX+ujAAt5FH0jqiZn9DhcDKMoKDFYNguJF7AoRl5yDOgQGYS0x2/3M bkoFP3yZdT3iEMe0UUE/ag+4HTEw0MZMBxr5yUyfFjrZpy/SYnO28M4ckCulSemn qhqGTMdBUIlCELYla5/V5WCnYz+RZss6k3yv8Yxgg9VrgQktqUM22NqwN875/DyM fC7y2TsAboFyvu4jk3C8XEx+ZCkiyRDQ1QFuuVEZ+8NSY0ub42O3R8cKPeAdFITo eYv3LMi0Qat7lVogOv5LFDozkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNw7NOkN sPHKNTYnAo2qtCmjyxj6MB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUAPGstOyJqKw53wvNmahTOaI6B1L35Uwt13rj/zdb4Ivom7hsOxUXv3GDXem wkfGDGOdpdIBWhX8hSNPlNywyWieUTeauMB3gbWhvWkZcuPgWto/C9+5Q4cON3cN zyZVPUc8a6FvfczweGhY178YX7RxlKUwo3KhvyJg1zAcr9uW5+D479GIgE71SkbE 9QXf3oSHYBQerhjUISWGacMnDv/KR9e3u1YVhqRObbNguPkWDcfVhuQjPpK+DKJI DxoFVzOpELUEpL2OZ0GFfGqINBWfZZr/SF+mns36lwKDAd1seQwdtiEexvF3A0pE Dw/nZt1wnwA85iUYFpeddRSlOQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:55 2026 by rpki-client