$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: lAwMQNGyPI1Zu770cvONjs+GDl/5JGnlt+O9C6o05VE= Subject key identifier: DA:7A:C6:DF:93:F6:06:C0:A4:C4:F7:DC:54:C2:28:53:0A:D3:40:6E Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 22 Signing time: Sun 01 Mar 2026 10:19:48 +0000 Manifest this update: Sun 01 Mar 2026 10:19:47 +0000 Manifest next update: Sun 08 Mar 2026 10:19:47 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: DSOgFH9jUImXxbzIgIGatraa8yjWIj+Dw16Y+IhTLCs=) 2: 04A3F314E94211F095EE60383C6F56BC.roa (hash: E/pMPjrg0dCjAeEdBiXHBrQ/2l6q/HpNWw3HPIwPnM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Mar 1 10:19:47 2026 GMT Not After : Mar 8 10:19:47 2026 GMT Subject: CN=69a412c4-5b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:7c:38:53:2c:44:1d:10:6c:be:fa:5e:63: 58:51:c3:a8:8b:83:3c:b0:2d:9f:67:11:51:67:e5: 60:31:d6:97:14:34:02:52:d9:86:b5:ca:82:b5:94: 04:3f:33:a8:00:e8:20:d1:aa:9c:73:97:f4:78:10: 7b:68:05:52:ac:45:96:52:94:ee:27:ad:73:48:5e: 73:9a:ed:5c:cd:76:a2:90:b7:2f:c4:b1:06:f5:8d: fb:e3:94:b3:89:75:67:84:2d:35:c8:ab:9c:cd:dc: ee:8c:66:63:34:44:ae:84:87:8a:4b:bf:a0:b5:41: a9:17:15:0c:cd:29:66:a9:5a:73:d7:89:33:2b:04: d5:15:0e:46:99:d4:a5:1f:02:62:f6:9e:20:9b:3f: e8:a3:10:ba:23:8f:43:01:c3:7a:df:0d:a4:2a:2a: 9d:14:a3:d8:11:41:39:af:29:bc:01:ed:03:c7:1b: be:f6:42:ff:a6:d7:98:32:55:08:f6:38:13:3a:f4: 33:5c:ff:87:a5:f1:e5:44:28:6d:fe:3f:23:8d:6f: f6:6d:44:20:85:75:25:69:b8:a9:b9:67:94:3f:5c: 8d:b8:55:f7:ce:58:ed:c1:e5:c5:80:10:23:ab:f3: 91:e4:0a:b3:a0:c8:5c:90:f5:ab:58:eb:bd:5f:1f: fb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:C6:DF:93:F6:06:C0:A4:C4:F7:DC:54:C2:28:53:0A:D3:40:6E X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:45:01:d8:78:f6:ce:e1:17:cc:5a:30:b0:90:63:af:ec:1b: 59:0e:23:04:ff:3d:53:56:35:d7:16:a2:82:a5:8b:ba:39:96: a9:cd:73:4a:13:b5:38:b8:65:31:10:e9:97:7d:b5:45:80:a3: 9b:c0:6c:a2:5a:75:01:e9:16:f9:b8:3f:e1:4c:28:06:a0:43: 30:f2:98:15:c9:80:d5:06:1c:22:61:e1:83:3c:4b:1a:e5:0d: a2:3d:69:bb:36:8a:32:b8:09:05:a4:ba:81:56:47:b0:ed:79: f9:b2:f3:90:dd:2d:b0:f1:4e:98:cc:54:7e:e3:3b:02:c5:96: 06:df:dc:55:d6:a0:51:a3:57:7d:d2:38:3f:7c:3e:eb:3a:e2: 75:dd:92:97:19:f5:02:40:f4:61:84:a4:e6:d6:86:63:56:71: 37:c7:2c:51:a0:0b:82:6e:61:d1:d9:5a:ce:1a:13:6c:3f:b9: 00:d8:71:f2:59:c2:0a:4f:5c:56:d0:b7:84:9b:93:f2:bd:6d: 39:13:d4:d1:07:2c:1a:27:18:43:f4:60:93:bd:83:a3:29:d6: ce:b8:87:5c:5d:7f:1a:fe:b8:d8:b5:a7:89:a6:69:00:c7:37: 75:65:42:97:eb:86:02:da:74:8e:37:01:f7:77:fe:a9:c9:6f: 39:97:72:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjAzMDExMDE5NDdaFw0yNjAzMDgxMDE5NDdaMBgxFjAUBgNV BAMTDTY5YTQxMmM0LTViMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCraHw4UyxEHRBsvvpeY1hRw6iLgzywLZ9nEVFn5WAx1pcUNAJS2Ya1yoK1lAQ/ M6gA6CDRqpxzl/R4EHtoBVKsRZZSlO4nrXNIXnOa7VzNdqKQty/EsQb1jfvjlLOJ dWeELTXIq5zN3O6MZmM0RK6Eh4pLv6C1QakXFQzNKWapWnPXiTMrBNUVDkaZ1KUf AmL2niCbP+ijELojj0MBw3rfDaQqKp0Uo9gRQTmvKbwB7QPHG772Qv+m15gyVQj2 OBM69DNc/4el8eVEKG3+PyONb/ZtRCCFdSVpuKm5Z5Q/XI24VffOWO3B5cWAECOr 85HkCrOgyFyQ9atY671fH/vvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2nrG35P2 BsCkxPfcVMIoUwrTQG4wHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASRQHYePbO4RfMWjCwkGOv7BtZDiME/z1TVjXXFqKCpYu6OZapzXNKE7U4uGUx EOmXfbVFgKObwGyiWnUB6Rb5uD/hTCgGoEMw8pgVyYDVBhwiYeGDPEsa5Q2iPWm7 NooyuAkFpLqBVkew7Xn5svOQ3S2w8U6YzFR+4zsCxZYG39xV1qBRo1d90jg/fD7r OuJ13ZKXGfUCQPRhhKTm1oZjVnE3xyxRoAuCbmHR2VrOGhNsP7kA2HHyWcIKT1xW 0LeEm5PyvW05E9TRBywaJxhD9GCTvYOjKdbOuIdcXX8a/rjYtaeJpmkAxzd1ZUKX 64YC2nSONwH3d/6pyW85l3I1 -----END CERTIFICATE-----Generated at Mon Mar 2 05:11:42 2026 by rpki-client