$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: URN3+Zidsz/9/k6OdhS+IRgPJu2D9t+1RnfG0EEaTMg= Subject key identifier: 1B:FE:F7:44:DE:D8:DA:17:1E:E2:04:A2:A3:10:88:5A:C4:A5:E5:81 Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: 79 Signing time: Sun 01 Mar 2026 09:07:33 +0000 Manifest this update: Sun 01 Mar 2026 09:07:32 +0000 Manifest next update: Sun 08 Mar 2026 09:07:32 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: +TSJd+47hDhBXxRn87ei0gCcffJUTuxik9Nsju2yAAA=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: rAsgVXsXPyayrU2c0ruv6hB/awxi4k3UFmNsKrMdYlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Mar 1 09:07:32 2026 GMT Not After : Mar 8 09:07:32 2026 GMT Subject: CN=69a401d5-a9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:e5:d5:91:27:06:30:37:91:8c:7c:fe:b9: 56:20:49:d1:5c:90:f3:f9:aa:3f:be:b2:c6:fb:1a: 72:0c:30:00:0a:08:34:b5:af:2a:7e:da:69:67:79: 1c:89:8d:85:25:33:e4:b6:59:0c:6b:43:18:9a:39: 8f:3a:d4:78:ba:fc:ec:6a:45:80:a2:cd:a9:4d:51: 69:67:de:04:8e:c6:8f:43:f7:65:41:aa:00:d5:fa: 97:1e:89:5b:03:4b:97:bb:e7:fe:0a:f1:ec:7e:e8: 85:6a:73:c6:c2:1a:2d:4d:86:35:e9:17:b8:be:30: f8:e3:d5:cd:18:3b:6e:c1:1f:9a:1b:53:b4:94:7f: 1e:dc:c3:17:68:c6:c6:d0:4a:a7:24:61:6d:e7:d1: e0:31:02:78:a5:b5:81:d9:ab:95:8f:bd:62:d2:0b: 38:30:aa:d4:75:14:c4:53:fb:b2:e0:25:43:db:3c: 5d:f3:61:b6:ce:6a:b0:e8:cb:ea:55:0e:bb:0a:bb: 03:4e:d0:fb:80:58:59:53:85:8d:4a:c6:9c:fc:81: aa:35:d9:02:84:e5:63:f3:5b:98:8f:ea:2f:bd:08: 70:81:a7:de:57:79:e1:67:c3:f6:52:d8:ca:26:bf: 20:7e:ad:45:18:ac:12:8d:fc:20:24:c6:15:9b:bf: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:F7:44:DE:D8:DA:17:1E:E2:04:A2:A3:10:88:5A:C4:A5:E5:81 X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:32:f2:aa:6a:09:be:62:08:3c:9b:42:ab:07:1a:5d:9f: 8f:df:72:eb:71:1d:da:ae:9e:a3:37:af:96:f2:e3:b8:8a:23: 53:e3:25:63:22:70:49:2a:67:c6:aa:3d:c0:06:1b:cb:fa:68: 90:87:86:f4:e0:98:f7:c1:77:00:49:84:b7:87:f3:ed:f6:4b: f9:8a:eb:04:a5:da:09:be:ff:24:86:9e:c7:13:f1:ca:1b:1d: ad:af:44:f5:61:24:24:6f:60:45:9e:61:09:4f:f8:d9:d6:dd: d1:d5:2e:bf:0b:18:1b:47:c6:c2:5d:72:3e:bc:6a:55:c6:2b: 73:d2:72:bf:80:be:f4:03:6b:1b:c7:69:e1:ee:6f:d9:88:81: 42:3a:f0:21:fe:20:ca:b2:e6:65:dd:30:d1:21:f6:cb:a2:bf: 6e:01:46:b6:1d:1c:6e:5f:05:1e:54:9f:5e:69:a4:98:7d:1a: c8:ae:8f:21:05:d4:e0:17:ba:93:b5:ed:55:06:25:af:80:1d: a9:a5:e2:4e:f5:c4:f1:2a:aa:88:07:04:ee:62:d5:9c:ea:6f: b8:1e:68:a7:e5:2b:df:ab:01:6e:b4:ab:36:a5:6a:be:67:c6: b7:62:7a:b4:f8:75:a9:f2:60:a8:3c:74:c8:ad:65:05:1c:2b: 1e:db:d2:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNjQ3RTVDQURDQjFGQkY3RUJCODk5QTcyMTlDM0EwRjAz RDNGN0IwRDAeFw0yNjAzMDEwOTA3MzJaFw0yNjAzMDgwOTA3MzJaMBgxFjAUBgNV BAMTDTY5YTQwMWQ1LWE5YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxiuXVkScGMDeRjHz+uVYgSdFckPP5qj++ssb7GnIMMAAKCDS1ryp+2mlneRyJ jYUlM+S2WQxrQxiaOY861Hi6/OxqRYCizalNUWln3gSOxo9D92VBqgDV+pceiVsD S5e75/4K8ex+6IVqc8bCGi1NhjXpF7i+MPjj1c0YO27BH5obU7SUfx7cwxdoxsbQ SqckYW3n0eAxAniltYHZq5WPvWLSCzgwqtR1FMRT+7LgJUPbPF3zYbbOarDoy+pV DrsKuwNO0PuAWFlThY1Kxpz8gao12QKE5WPzW5iP6i+9CHCBp95XeeFnw/ZS2Mom vyB+rUUYrBKN/CAkxhWbv4P/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG/73RN7Y 2hce4gSioxCIWsSl5YEwHwYDVR0jBBgwFoAUZH5crcsfv367iZpyGcOg8D0/ew0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzkwNEY4NzBBNjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkg1Y3Jjc2Z2MzY3aVpweUdjT2c4RDBfZXcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 MURFLzkwNEY4NzBBNjBCNDExRjA4RUQ3QUU2M0M0RjlBRTAyL1pINWNyY3NmdjM2 N2lacHlHY09nOEQwX2V3MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBj8zLyqmoJvmIIPJtCqwcaXZ+P33LrcR3arp6jN6+W8uO4iiNT4yVjInBJKmfG qj3ABhvL+miQh4b04Jj3wXcASYS3h/Pt9kv5iusEpdoJvv8khp7HE/HKGx2tr0T1 YSQkb2BFnmEJT/jZ1t3R1S6/CxgbR8bCXXI+vGpVxitz0nK/gL70A2sbx2nh7m/Z iIFCOvAh/iDKsuZl3TDRIfbLor9uAUa2HRxuXwUeVJ9eaaSYfRrIro8hBdTgF7qT te1VBiWvgB2ppeJO9cTxKqqIBwTuYtWc6m+4Hmin5SvfqwFutKs2pWq+Z8a3Ynq0 +HWp8mCoPHTIrWUFHCse29Jf -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:55 2026 by rpki-client