$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json) Hash identifier: ZSS6q2SmERQsbzkieeDybn2zQ7VChfWQ2ttikTVsVho= Subject key identifier: A4:67:BA:26:74:F4:FC:01:07:DB:77:0C:C3:07:14:DE:5B:0A:13:D2 Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft Manifest number: 20 Signing time: Sun 01 Mar 2026 10:20:42 +0000 Manifest this update: Sun 01 Mar 2026 10:20:42 +0000 Manifest next update: Sun 08 Mar 2026 10:20:42 +0000 Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: bGiH5p9xndS4Npx9J9cGR7bl/eItIP20E3SLK0h7+wg=) 2: EE4BF2EAFB5911F0B335DD54496F56BC.roa (hash: eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=) 3: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: 8CNnaJx3H61GgnJxhNhOMmVhr6HZscFPEBcc69eMEC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Mar 1 10:20:42 2026 GMT Not After : Mar 8 10:20:42 2026 GMT Subject: CN=69a412fa-ccaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:95:c4:67:ae:3a:95:e9:45:39:4d:79:80: 43:20:e1:42:ad:53:0a:e5:41:d3:5c:03:dc:9e:03: 19:6e:a4:00:6f:a3:3e:c7:e7:e1:5b:6e:14:3f:66: 4a:78:74:51:f0:99:eb:b2:e2:f7:5a:b9:d2:1f:45: 7b:b8:c4:59:cd:3c:f7:75:72:3b:a7:f7:df:19:b8: 18:27:e5:6c:73:fb:58:9d:18:8b:80:53:26:4e:f3: 41:c8:24:5e:98:2f:71:f2:79:ca:96:51:49:3c:51: 9d:18:45:00:e3:e6:8f:c7:70:82:59:f0:2f:2a:bf: 35:aa:67:d9:4e:0f:70:65:69:51:2e:ae:ea:c3:e0: 6a:cf:6a:e9:ac:b1:a0:f3:98:50:4a:af:ab:36:19: b9:48:1f:1b:b2:43:ce:72:4d:d5:87:1c:ad:1d:78: 11:f8:0b:8c:ac:12:80:51:55:45:ff:8d:33:38:f3: e5:e7:c8:d4:cd:ba:11:ff:07:b3:03:d2:8e:41:ac: 39:ed:99:75:f5:3c:e7:aa:11:41:c2:9b:76:7c:c6: 2d:fe:44:87:dc:93:32:4e:29:4b:a3:37:97:33:fe: 8b:b7:b9:3e:d0:b6:65:48:4c:01:d1:34:d8:c0:12: 31:d8:49:0b:56:8e:a4:2d:e8:b7:98:94:6d:0e:37: c3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:67:BA:26:74:F4:FC:01:07:DB:77:0C:C3:07:14:DE:5B:0A:13:D2 X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:16:74:1a:f5:29:d2:9d:e1:7d:49:f3:4c:eb:da:cc:18:13: 6e:72:27:a8:9f:90:b4:70:54:db:c6:a8:96:82:ff:fa:04:41: 8e:4f:62:10:e1:62:1f:e6:54:b1:5e:df:54:46:fa:92:c8:e9: 64:5a:c4:d4:d8:56:95:9c:e5:1e:9c:f4:ec:83:20:34:1c:bf: b0:1d:32:87:b0:6a:0b:54:8e:b2:93:8b:ca:f4:d5:52:e1:cc: d1:f2:80:b6:af:ea:0b:96:0f:8c:d1:c6:1f:83:d9:36:a4:35: b5:7f:f3:a2:b8:58:17:41:b8:01:d1:8f:fd:39:e3:24:18:68: 9b:f7:21:1d:c7:08:90:65:12:ac:eb:3b:cb:07:a8:75:62:13: 34:3c:91:71:bf:30:51:6d:78:83:ea:64:92:a1:20:f3:e8:b5: 66:77:62:a9:23:d5:17:bf:c6:f7:42:32:0a:e4:2a:24:fd:73: 9f:ae:81:9f:00:52:79:e8:2b:d1:ce:0e:4f:9b:2f:00:e9:d8: 83:d3:7e:e4:f9:1b:d5:6f:e7:20:f1:5a:8d:fc:0a:aa:37:b4: 5e:80:f5:94:31:38:d0:81:61:3e:be:3d:14:59:c7:9d:21:38: 9a:c4:8e:20:1e:dc:3d:bf:ce:8b:ff:fe:da:df:ad:cf:c3:56: 35:af:e9:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5NTU0NkI3RTBD MUQxMUM1NzAeFw0yNjAzMDExMDIwNDJaFw0yNjAzMDgxMDIwNDJaMBgxFjAUBgNV BAMTDTY5YTQxMmZhLWNjYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWJJXEZ646lelFOU15gEMg4UKtUwrlQdNcA9yeAxlupABvoz7H5+FbbhQ/Zkp4 dFHwmeuy4vdaudIfRXu4xFnNPPd1cjun998ZuBgn5Wxz+1idGIuAUyZO80HIJF6Y L3HyecqWUUk8UZ0YRQDj5o/HcIJZ8C8qvzWqZ9lOD3BlaVEururD4GrPaumssaDz mFBKr6s2GblIHxuyQ85yTdWHHK0deBH4C4ysEoBRVUX/jTM48+XnyNTNuhH/B7MD 0o5BrDntmXX1POeqEUHCm3Z8xi3+RIfckzJOKUujN5cz/ou3uT7QtmVITAHRNNjA EjHYSQtWjqQt6LeYlG0ON8NVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpGe6JnT0 /AEH23cMwwcU3lsKE9IwHwYDVR0jBBgwFoAUzq7A6H2VhStEwGE5VUa34MHRHFcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzVDMkQxMDY0RUJD OTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhG Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenE3QTZIMlZoU3RFd0dFNVZVYTM0TUhSSEZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC OTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0 RXdHRTVWVWEzNE1IUkhGYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoFnQa9SnSneF9SfNM69rMGBNucieon5C0cFTbxqiWgv/6BEGOT2IQ4WIf5lSx Xt9URvqSyOlkWsTU2FaVnOUenPTsgyA0HL+wHTKHsGoLVI6yk4vK9NVS4czR8oC2 r+oLlg+M0cYfg9k2pDW1f/OiuFgXQbgB0Y/9OeMkGGib9yEdxwiQZRKs6zvLB6h1 YhM0PJFxvzBRbXiD6mSSoSDz6LVmd2KpI9UXv8b3QjIK5Cok/XOfroGfAFJ56CvR zg5Pmy8A6diD037k+RvVb+cg8VqN/AqqN7RegPWUMTjQgWE+vj0UWcedITiaxI4g Htw9v86L//7a363Pw1Y1r+lO -----END CERTIFICATE-----Generated at Mon Mar 2 09:42:38 2026 by rpki-client