$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: NGoSuqp1YbN7K0FSWvamVrQYexhDpgHUyDkl9P5uP4s= Subject key identifier: 80:4D:1F:96:3F:3E:0E:A6:3C:27:CC:53:CF:72:A0:0E:36:1E:1A:CD Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: DA Signing time: Sun 01 Mar 2026 07:58:32 +0000 Manifest this update: Sun 01 Mar 2026 07:58:31 +0000 Manifest next update: Sun 08 Mar 2026 07:58:31 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: 6/3sU24Y/obWPbExeXTwmXJetnUu/pJc9Qkcz+vTpjg=) 2: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: qELOCsisC5h80weRL5N25yw+GcjDtQKTB0QyBuh6P1o=) 3: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 4: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Mar 1 07:58:31 2026 GMT Not After : Mar 8 07:58:31 2026 GMT Subject: CN=69a3f1a8-ea3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:9b:ef:42:2a:03:73:92:5e:4a:0b:fa:1e: 60:7e:b7:58:26:69:65:07:12:5a:20:40:ad:aa:7e: b0:b3:6e:37:03:f0:ac:b4:a4:8f:00:28:d5:d9:ef: 7b:8f:86:c0:55:64:08:81:93:2d:29:67:3c:c2:65: 02:dd:a6:04:c5:2f:91:21:64:48:54:8d:6b:2a:e7: 13:57:e1:6e:47:65:40:ad:3d:f7:7e:b4:a9:2e:4a: 82:36:37:b8:50:c2:51:03:aa:da:b6:63:50:32:1d: 01:c2:0c:b5:d2:6e:fa:52:f3:57:46:4d:2b:4e:e0: 01:4c:b7:14:ab:ba:49:4f:3f:e7:58:77:e6:71:4c: a8:95:62:ac:f5:4b:c6:4f:a6:e0:f1:32:41:bc:da: 2f:9c:eb:e6:cf:1f:4e:5c:d6:b5:47:4b:aa:0e:c2: 35:7d:4b:48:f2:eb:b1:92:09:47:11:a0:b6:e5:4a: 1c:46:51:5b:4a:04:a8:23:30:19:69:3e:fc:3d:df: 78:63:fd:1f:88:2b:72:5f:0c:9b:ab:b1:69:c9:91: 08:c1:fb:bf:ee:07:87:b2:2d:03:07:43:0e:5b:b6: a9:46:bd:00:ab:6e:d0:e0:9d:38:f7:d0:f1:2d:82: 89:2e:9a:51:0c:5d:4a:82:e9:01:ca:2b:0d:37:cd: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4D:1F:96:3F:3E:0E:A6:3C:27:CC:53:CF:72:A0:0E:36:1E:1A:CD X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:ee:8f:d6:5b:89:0a:1a:9c:e4:61:ee:91:41:b7:57:cd: 86:d3:e8:89:3c:1c:d3:af:92:83:27:7b:18:31:ca:5a:88:61: 27:74:92:0c:8d:65:e6:06:4e:13:be:1b:30:8d:96:b0:7c:b9: 51:e3:de:23:8d:a2:de:7e:39:c2:5a:7f:41:df:36:28:8f:62: ee:12:3e:c4:ea:0d:5c:e3:1c:5c:a6:bb:33:0b:34:72:c9:3b: ba:2c:23:47:df:38:a5:f6:ce:fb:0a:86:5b:3d:82:33:97:1e: e9:e0:3c:63:62:7d:b0:80:7c:e0:c5:c7:4d:c1:7c:ce:23:0c: 1b:b2:de:c6:3b:7f:8e:ad:a6:c8:1a:d8:17:d2:41:98:83:1c: 8a:f3:9a:5f:92:3b:60:37:a5:3d:82:30:b9:91:dc:13:cd:f0: 77:3d:45:ac:f3:dc:38:03:22:a7:89:eb:d3:67:69:4f:44:f1: 43:3f:7d:aa:cc:34:50:a4:8f:34:b4:22:bb:16:d0:00:b2:2d: f9:97:d3:dc:0e:b2:5d:23:76:8f:ec:32:f8:d4:b6:ef:e1:3f: f7:fe:98:11:5e:0d:f2:4e:dd:03:d4:c8:cb:91:2f:2f:b4:23: 18:b9:22:7a:6e:c7:50:b6:4c:35:c2:62:d3:48:b0:30:86:e4: a7:73:6e:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwMzAxMDc1ODMxWhcNMjYwMzA4MDc1ODMxWjAYMRYwFAYD VQQDEw02OWEzZjFhOC1lYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmeb70IqA3OSXkoL+h5gfrdYJmllBxJaIECtqn6ws243A/CstKSPACjV2e97 j4bAVWQIgZMtKWc8wmUC3aYExS+RIWRIVI1rKucTV+FuR2VArT33frSpLkqCNje4 UMJRA6ratmNQMh0Bwgy10m76UvNXRk0rTuABTLcUq7pJTz/nWHfmcUyolWKs9UvG T6bg8TJBvNovnOvmzx9OXNa1R0uqDsI1fUtI8uuxkglHEaC25UocRlFbSgSoIzAZ aT78Pd94Y/0fiCtyXwybq7FpyZEIwfu/7geHsi0DB0MOW7apRr0Aq27Q4J0499Dx LYKJLppRDF1KgukByisNN80jAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBNH5Y/ Pg6mPCfMU89yoA42HhrNMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgNLuj9ZbiQoanORh7pFBt1fNhtPoiTwc06+Sgyd7GDHKWohhJ3SSDI1l5gZO E74bMI2WsHy5UePeI42i3n45wlp/Qd82KI9i7hI+xOoNXOMcXKa7Mws0csk7uiwj R984pfbO+wqGWz2CM5ce6eA8Y2J9sIB84MXHTcF8ziMMG7Lexjt/jq2myBrYF9JB mIMcivOaX5I7YDelPYIwuZHcE83wdz1FrPPcOAMip4nr02dpT0TxQz99qsw0UKSP NLQiuxbQALIt+ZfT3A6yXSN2j+wy+NS27+E/9/6YEV4N8k7dA9TIy5EvL7QjGLki em7HULZMNcJi00iwMIbkp3Nusw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:40:23 2026 by rpki-client