$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: zX5ZDI4wpzTvfew5Spa5T1xHoY5+yLDflDASW2aw+FE= Subject key identifier: 82:13:4D:E5:5B:D5:60:CD:55:70:AE:C0:64:49:B5:64:16:F6:6B:E7 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: AA Signing time: Sun 01 Mar 2026 08:30:20 +0000 Manifest this update: Sun 01 Mar 2026 08:30:20 +0000 Manifest next update: Sun 08 Mar 2026 08:30:20 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: dYBE+kdcf7N2gEpVFUU8++903TDgzm8xBUAeuoAemL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Mar 1 08:30:20 2026 GMT Not After : Mar 8 08:30:20 2026 GMT Subject: CN=69a3f91c-8b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:35:75:fa:55:ac:c0:f0:5a:2e:9d:4d:69: 1b:53:74:65:d3:ff:bf:1d:72:f3:ef:a6:5d:12:ac: 0d:83:f4:20:3e:7a:cc:7e:22:67:b4:da:51:25:7c: b3:01:da:9a:31:ce:4a:66:0a:11:26:de:3c:e4:a7: 42:8d:8e:54:ed:b5:57:f2:1a:4a:b8:68:14:b0:03: 90:a0:ff:f6:ba:ff:c8:21:58:f7:cf:dd:48:4a:15: bf:fd:a9:11:44:13:d6:8b:55:8b:57:22:0e:50:34: 5e:ca:c2:a0:91:5f:9f:78:18:d6:08:f4:cb:9f:04: ce:64:3e:43:32:60:81:95:2f:78:2d:1e:88:2b:05: ef:0f:67:d7:23:3e:f4:ca:cd:35:59:84:e7:b4:b5: 65:69:41:00:7c:b1:00:df:a7:69:fc:0d:3e:29:18: 9b:f3:9b:ec:de:01:0a:63:91:34:d6:5c:50:5c:fb: 50:ab:cd:db:d3:cb:82:24:6a:43:c7:be:69:27:10: 07:35:6f:87:fc:46:26:4f:66:94:8e:fb:1a:57:94: 06:37:9e:89:20:71:24:0f:e8:8e:fa:31:f4:f7:a3: 6a:d6:10:9b:16:52:95:cb:a0:2f:f3:77:f1:cd:62: f6:35:2e:bb:c3:a3:dd:7c:db:9f:8b:ea:cc:56:0f: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:13:4D:E5:5B:D5:60:CD:55:70:AE:C0:64:49:B5:64:16:F6:6B:E7 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e6:21:8a:3e:37:2b:e5:60:2e:9f:03:69:4d:9e:85:fa:87: e8:b9:ee:c4:76:e8:50:22:d3:17:f3:29:e2:0c:11:db:ba:54: 99:3d:3c:b4:1f:11:80:b6:e2:7b:35:5a:2a:f2:de:2b:09:d3: b1:19:ec:48:eb:05:c5:d9:48:4f:cb:53:c5:77:bb:e2:4b:85: a4:4a:6e:3b:7a:20:f5:52:2a:b0:95:9b:48:2c:3d:5c:89:df: 7d:ec:3f:80:48:6e:35:ff:f2:8f:d3:a8:f7:96:b2:b7:90:18: f9:d8:1e:77:0a:0a:83:d1:02:36:1c:c3:3d:0e:1b:94:e5:41: 3f:85:58:fe:2b:0a:8f:5f:19:68:b7:9b:0a:90:93:7e:22:7c: 37:88:5a:ca:ae:c5:70:29:2c:0a:f3:78:e5:fd:2e:59:64:38: 4f:38:fe:a3:56:7d:2c:28:72:0b:7a:d4:eb:12:a4:51:67:d6: 69:fd:ed:c3:39:54:61:e2:80:14:56:cb:90:ea:88:08:70:7b: a2:91:29:0d:81:53:b8:b1:c4:26:fc:1a:e2:f4:0b:6c:9e:82: 42:04:8d:8b:44:4d:a4:68:6b:d1:ee:b7:13:cc:b0:11:4d:f9: 70:35:fe:cf:ae:2d:a7:7c:76:8e:e9:9b:f3:91:fb:ee:b8:ea: ab:d0:4b:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCQ0MxMTAvBgNVBAUTKENFNkU5MkZDQTAwMTdGNzVBNjJERjkyODVFOEQ3QzIx MEI3QUJDMDIwHhcNMjYwMzAxMDgzMDIwWhcNMjYwMzA4MDgzMDIwWjAYMRYwFAYD VQQDEw02OWEzZjkxYy04Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+E1dfpVrMDwWi6dTWkbU3Rl0/+/HXLz76ZdEqwNg/QgPnrMfiJntNpRJXyz AdqaMc5KZgoRJt485KdCjY5U7bVX8hpKuGgUsAOQoP/2uv/IIVj3z91IShW//akR RBPWi1WLVyIOUDReysKgkV+feBjWCPTLnwTOZD5DMmCBlS94LR6IKwXvD2fXIz70 ys01WYTntLVlaUEAfLEA36dp/A0+KRib85vs3gEKY5E01lxQXPtQq83b08uCJGpD x75pJxAHNW+H/EYmT2aUjvsaV5QGN56JIHEkD+iO+jH096Nq1hCbFlKVy6Av83fx zWL2NS67w6PdfNufi+rMVg9PlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIITTeVb 1WDNVXCuwGRJtWQW9mvnMB8GA1UdIwQYMBaAFM5ukvygAX91pi35KF6NfCELerwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJDQy9EOEJFOTJEQzE0 MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYzV21MZmtvWG8xOElRdDZ2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJDQy9EOEJFOTJEQzE0MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYz V21MZmtvWG8xOElRdDZ2QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX+Yhij43K+VgLp8DaU2ehfqH6LnuxHboUCLTF/Mp4gwR27pUmT08tB8RgLbi ezVaKvLeKwnTsRnsSOsFxdlIT8tTxXe74kuFpEpuO3og9VIqsJWbSCw9XInffew/ gEhuNf/yj9Oo95ayt5AY+dgedwoKg9ECNhzDPQ4blOVBP4VY/isKj18ZaLebCpCT fiJ8N4hayq7FcCksCvN45f0uWWQ4Tzj+o1Z9LChyC3rU6xKkUWfWaf3twzlUYeKA FFbLkOqICHB7opEpDYFTuLHEJvwa4vQLbJ6CQgSNi0RNpGhr0e63E8ywEU35cDX+ z64tp3x2jumb85H77rjqq9BLBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:01:57 2026 by rpki-client