$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: fEmoHpNpcMF+a88GvarnVnok06fhqUpOVyrKejyrysU= Subject key identifier: B1:C4:9B:1E:1E:8B:5F:49:86:CD:D0:72:11:5F:3C:CE:EE:D1:F4:EF Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0A7B Signing time: Mon 02 Mar 2026 00:00:24 +0000 Manifest this update: Mon 02 Mar 2026 00:00:21 +0000 Manifest next update: Mon 09 Mar 2026 00:00:21 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: xIfNM5y9Zds3Vf13itS6oH/B3aNnlAzCPX4FXpM7Rjw=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: KZtbjZhIPVZieICSR3uXBqeTO+29IORbZVxYIdgkEd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Mar 2 00:00:21 2026 GMT Not After : Mar 9 00:00:21 2026 GMT Subject: CN=69a4d318-fcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:48:f0:57:32:3c:d3:03:b1:65:89:0e:59: 21:dd:c5:a3:a3:7c:d3:fd:f1:2f:81:19:76:6f:dc: 58:71:4d:bf:fa:c0:f4:a1:c3:d7:14:24:67:76:6d: 11:9e:a5:b6:d0:c7:ca:fc:7d:7b:51:3d:ac:09:0f: 8d:98:5b:0b:a7:3a:55:bc:ba:a9:72:49:c1:63:6c: d4:99:ec:1a:78:f2:5c:ec:1b:6c:b7:32:b0:cd:4c: dd:1e:97:47:61:a1:46:00:27:11:97:ae:e6:e6:85: e1:2e:a9:1a:39:76:79:f0:f2:2c:66:e9:29:5f:ec: c4:4d:cf:e0:8b:ba:a7:ee:d6:48:f3:f6:2f:78:d2: 89:e5:31:78:9f:ce:9d:a4:c1:a8:ad:26:85:be:9d: 49:66:4c:79:63:6d:19:52:aa:46:1f:ea:5d:42:83: 47:60:f4:87:ef:d9:ef:b6:35:3e:c1:84:3d:7b:e0: 86:01:89:29:f1:1c:77:a3:0f:26:22:b3:98:92:ad: cc:7d:7c:34:c6:35:3d:d6:b1:ff:f1:9e:ee:45:46: d2:b6:53:42:12:a4:d8:bd:ef:74:ba:77:1b:7f:a3: 4b:68:64:d3:b2:f9:da:be:fc:f4:f7:99:49:ac:c3: c6:38:e3:c1:c2:06:3b:fd:48:78:a4:a5:c1:31:e8: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C4:9B:1E:1E:8B:5F:49:86:CD:D0:72:11:5F:3C:CE:EE:D1:F4:EF X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d1:b9:7a:58:68:fb:ae:c9:c9:8e:8f:d1:9d:a9:3c:24:09: 8d:99:bb:68:1f:97:88:2c:c9:e5:3d:df:d8:7c:b5:31:70:5a: ab:12:a3:ee:49:75:fc:5c:76:21:aa:8a:ac:0c:5d:c5:2d:8b: e4:11:5c:6a:68:b3:0b:f8:25:72:09:98:36:2c:84:d1:9b:db: a3:57:cf:d2:11:48:f7:3f:3f:9a:55:96:7a:c9:3c:57:5b:81: cc:1c:ee:1f:12:e0:74:24:fc:84:27:a9:d1:c0:13:d2:46:6c: 5d:73:01:02:f9:e7:66:dc:d7:65:9d:9c:bc:8b:37:d6:35:31: 89:69:da:d1:ad:44:0f:ed:16:d9:d4:4e:be:71:86:ed:96:6a: d8:21:c3:08:33:94:8d:88:f2:75:e2:c7:df:fb:d4:a7:19:23: 2a:af:86:45:20:58:ec:b8:de:2b:6b:63:93:46:7c:f4:6d:6a: c2:2e:d3:8b:b2:75:79:b1:e7:fa:20:1b:93:78:1a:6e:9b:2a: fd:50:5e:12:50:15:5c:08:47:0e:e4:62:36:a0:44:00:cc:e6: 7d:f5:25:c4:52:89:20:a5:6b:65:d6:c6:68:64:9b:b3:af:7d: 40:d9:f9:e3:61:13:c1:d0:d8:76:5e:5d:d8:46:ae:8d:ef:fc: aa:6c:f9:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjYwMzAyMDAwMDIxWhcNMjYwMzA5MDAwMDIxWjAYMRYwFAYD VQQDEw02OWE0ZDMxOC1mY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt91I8FcyPNMDsWWJDlkh3cWjo3zT/fEvgRl2b9xYcU2/+sD0ocPXFCRndm0R nqW20MfK/H17UT2sCQ+NmFsLpzpVvLqpcknBY2zUmewaePJc7BtstzKwzUzdHpdH YaFGACcRl67m5oXhLqkaOXZ58PIsZukpX+zETc/gi7qn7tZI8/YveNKJ5TF4n86d pMGorSaFvp1JZkx5Y20ZUqpGH+pdQoNHYPSH79nvtjU+wYQ9e+CGAYkp8Rx3ow8m IrOYkq3MfXw0xjU91rH/8Z7uRUbStlNCEqTYve90uncbf6NLaGTTsvnavvz095lJ rMPGOOPBwgY7/Uh4pKXBMej72QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHEmx4e i19Jhs3QchFfPM7u0fTvMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdG5elho+67JyY6P0Z2pPCQJjZm7aB+XiCzJ5T3f2Hy1MXBaqxKj7kl1/Fx2 IaqKrAxdxS2L5BFcamizC/glcgmYNiyE0Zvbo1fP0hFI9z8/mlWWesk8V1uBzBzu HxLgdCT8hCep0cAT0kZsXXMBAvnnZtzXZZ2cvIs31jUxiWna0a1ED+0W2dROvnGG 7ZZq2CHDCDOUjYjydeLH3/vUpxkjKq+GRSBY7LjeK2tjk0Z89G1qwi7Ti7J1ebHn +iAbk3gabpsq/VBeElAVXAhHDuRiNqBEAMzmffUlxFKJIKVrZdbGaGSbs699QNn5 42ETwdDYdl5d2Eauje/8qmz5Eg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:08 2026 by rpki-client