$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft File: d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json) Hash identifier: B+qcjB41jUsHliG3/xxkzqQJq6mZnLPqqdwW9kZ5Pv8= Subject key identifier: D2:68:A5:44:17:0B:5F:EC:5E:13:67:47:7C:05:7D:1D:C5:B6:4C:CC Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft Manifest number: 0159 Signing time: Sun 01 Mar 2026 06:04:06 +0000 Manifest this update: Sun 01 Mar 2026 06:04:06 +0000 Manifest next update: Sun 08 Mar 2026 06:04:06 +0000 Files and hashes: 1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: +VpnnCBLC1qgKP/50CvTNELbhwbegDtNloE9Gbz8RvU=) 2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: mAjzpgSn4LjU+hGR/suY8fIT9L0ResXkBxM/GBV6W9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Validity Not Before: Mar 1 06:04:06 2026 GMT Not After : Mar 8 06:04:06 2026 GMT Subject: CN=69a3d6d6-3b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:f4:4e:c7:b3:10:50:ed:b6:5d:b6:7e:43: 79:72:fe:ba:a4:cc:ca:d4:0c:73:95:3b:55:74:dc: 4f:ee:67:42:8f:12:de:6a:b9:5c:98:88:f5:c1:fb: ff:32:90:8c:4d:5b:07:98:21:75:25:c0:28:9b:88: 81:90:ae:9f:5b:7c:db:78:5c:27:45:18:08:9d:0e: 9b:17:c4:4d:14:89:05:dd:5f:fe:74:96:8d:80:33: 98:8a:f7:68:87:0f:ca:da:59:77:f9:36:1d:25:6f: 83:d4:d8:6d:d3:a3:c8:ae:2e:fc:a3:8d:34:93:78: ce:cc:28:73:69:7b:f8:3f:87:26:7b:c6:b5:02:ac: af:92:c4:39:c6:c0:01:a0:42:0e:90:36:44:ef:67: 64:dd:29:87:0c:ef:db:ce:61:44:78:a9:4e:7e:e1: d3:de:26:8f:3b:e2:ee:e1:79:59:59:9d:eb:39:d2: cf:33:9b:5e:48:77:40:69:6e:e2:f1:44:f3:60:d4: 11:f4:7d:a5:a6:90:98:c5:02:b7:91:31:52:65:91: fa:ff:b3:27:32:c5:74:62:b5:1b:a8:ac:d3:dc:65: 54:35:c7:f4:7b:e8:91:64:b7:ec:e0:98:f3:ae:53: 28:4c:e6:b3:b6:f1:fc:cc:c0:65:37:0d:90:0a:58: 72:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:A5:44:17:0B:5F:EC:5E:13:67:47:7C:05:7D:1D:C5:B6:4C:CC X509v3 Authority Key Identifier: keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:51:46:28:dc:64:0b:fb:47:d3:14:36:2e:52:8e:f6:35:5f: ce:03:f0:53:75:07:97:6a:b1:ac:14:85:32:9e:db:dc:ca:03: 6a:67:13:cd:f4:01:41:8f:7a:a5:88:89:52:83:34:77:c7:7e: 58:d3:31:bc:15:7f:5e:78:4a:43:a4:a8:39:0d:5f:8d:75:42: 6f:8e:8c:03:98:a6:3b:9c:ab:bd:94:b8:69:c2:6d:63:bf:2c: 77:39:d3:cd:06:26:a9:79:6b:e9:d2:23:24:41:c1:29:e4:68: 69:b4:38:54:a9:95:cf:07:34:f9:9a:6f:9a:28:44:12:60:20: 4f:24:95:76:63:67:28:4d:5d:dd:e4:81:32:7e:34:43:39:82: d7:65:b3:67:f9:8e:26:38:96:76:ae:c7:79:23:ef:85:ae:b6: 26:a5:43:b0:a3:e7:01:5b:75:83:5c:33:cb:0d:f1:e5:af:0c: 8a:bc:15:89:dc:af:71:72:1e:a6:7e:1d:fe:de:6a:bf:16:6e: c6:dc:4e:d8:34:8b:31:96:da:ec:2b:37:69:4b:a1:c3:c3:ca: 45:cf:70:2c:04:12:84:6d:fb:58:a7:aa:cd:fd:4a:64:ad:45: 1a:8c:e8:12:4a:81:56:08:cd:7c:4b:f7:93:fe:3f:5f:8e:0b: ae:5c:b7:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG Q0YyQTYwMUEwHhcNMjYwMzAxMDYwNDA2WhcNMjYwMzA4MDYwNDA2WjAYMRYwFAYD VQQDEw02OWEzZDZkNi0zYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Sb0TsezEFDttl22fkN5cv66pMzK1AxzlTtVdNxP7mdCjxLearlcmIj1wfv/ MpCMTVsHmCF1JcAom4iBkK6fW3zbeFwnRRgInQ6bF8RNFIkF3V/+dJaNgDOYivdo hw/K2ll3+TYdJW+D1Nht06PIri78o400k3jOzChzaXv4P4cme8a1AqyvksQ5xsAB oEIOkDZE72dk3SmHDO/bzmFEeKlOfuHT3iaPO+Lu4XlZWZ3rOdLPM5teSHdAaW7i 8UTzYNQR9H2lppCYxQK3kTFSZZH6/7MnMsV0YrUbqKzT3GVUNcf0e+iRZLfs4Jjz rlMoTOaztvH8zMBlNw2QClhy4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJopUQX C1/sXhNnR3wFfR3FtkzMMB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRENi9ERTIyQUQyNDBDREYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBj VFRacU1HdUFhVG44OHFZQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlFFGKNxkC/tH0xQ2LlKO9jVfzgPwU3UHl2qxrBSFMp7b3MoDamcTzfQBQY96 pYiJUoM0d8d+WNMxvBV/XnhKQ6SoOQ1fjXVCb46MA5imO5yrvZS4acJtY78sdznT zQYmqXlr6dIjJEHBKeRoabQ4VKmVzwc0+ZpvmihEEmAgTySVdmNnKE1d3eSBMn40 QzmC12WzZ/mOJjiWdq7HeSPvha62JqVDsKPnAVt1g1wzyw3x5a8MirwVidyvcXIe pn4d/t5qvxZuxtxO2DSLMZba7Cs3aUuhw8PKRc9wLAQShG37WKeqzf1KZK1FGozo EkqBVgjNfEv3k/4/X44Lrly3hw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:11 2026 by rpki-client