$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: yZu7Bk2wu4gXNRcozkh+Bp9WDhZjvEq3TcJygJWsbFU= Subject key identifier: CF:1C:CE:8B:4C:B2:3A:F0:04:AA:92:E5:51:F1:9C:68:E6:DE:F5:F8 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0203 Signing time: Sun 01 Mar 2026 03:53:57 +0000 Manifest this update: Sun 01 Mar 2026 03:53:57 +0000 Manifest next update: Sun 08 Mar 2026 03:53:57 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: GgrRTbP6PWapqrYaWWTpBD+E8cK+VtvvRUCnhU2n/aQ=) 2: 13208484C09311F0A7D8232BC4F9AE02.roa (hash: hBLg2BLl1rPstJMxz3stP61DmfvaYTD96oOlcj8P2gg=) 3: 534DAC6AC0B811F099CB7061C4F9AE02.roa (hash: YEhOF4SYFPQCGhzAw4OsVUzu5vAW32dSw+OwYHcqvMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Mar 1 03:53:57 2026 GMT Not After : Mar 8 03:53:57 2026 GMT Subject: CN=69a3b855-1936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:d0:fc:9f:40:47:dc:bd:12:f9:58:85:31: 72:69:ab:3f:25:11:53:ea:2d:bb:33:21:7f:9e:c8: b6:14:87:92:39:f4:c6:8f:bc:56:71:77:d1:00:85: a0:26:cd:af:73:3c:18:b0:11:78:4c:8f:3a:55:5d: eb:03:03:ac:36:13:21:5a:c7:5a:24:00:77:9f:31: 26:34:82:63:8b:79:68:23:bb:23:8c:6c:ff:52:84: 7b:ee:a8:78:a4:8f:f4:2d:0c:6a:30:4c:07:1e:71: 53:c6:de:be:69:2a:c7:98:23:d0:56:df:85:d5:40: 6b:83:87:d9:e6:74:cc:26:92:5b:24:6b:f4:72:1f: 26:8f:79:4e:b3:4e:17:45:f0:34:a3:e1:5b:17:0f: 75:35:a8:27:b6:55:8d:13:77:e3:96:1b:e2:d0:d6: 69:64:8b:4a:2c:15:8c:5f:4a:cb:d0:65:f1:b2:b4: 45:a7:61:84:df:ab:aa:ce:e6:ac:27:5f:a2:c1:58: 02:9a:35:21:fe:68:01:85:23:10:26:b9:72:93:e6: de:9d:cf:b5:de:94:90:dd:02:1a:b8:34:40:22:e2: 5d:2f:85:9f:7f:2d:a5:e2:13:7c:d1:b1:e6:8c:10: 49:78:fa:ea:03:b9:30:34:67:b1:da:40:49:f3:29: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1C:CE:8B:4C:B2:3A:F0:04:AA:92:E5:51:F1:9C:68:E6:DE:F5:F8 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:67:21:5a:2c:c2:84:01:8e:37:6c:63:7a:a0:00:69:5a:9a: f4:83:01:53:52:1c:73:13:55:3a:0e:a9:4b:2b:bd:bf:4a:4e: 4e:11:72:fa:70:69:71:21:52:1e:49:64:f4:65:0d:fe:3e:53: a4:98:47:02:7b:a1:eb:b1:6d:bf:13:10:7a:9d:b3:0f:45:71: 1c:39:93:95:45:25:b6:9d:09:75:91:8e:f0:5c:ab:2a:c8:6f: 7d:15:0c:e8:71:4d:87:83:66:d4:86:a1:88:57:40:b1:84:c5: ca:b8:4c:bb:92:56:24:c2:cc:cb:eb:d5:a4:8e:87:d1:7f:b7: 02:4a:dc:aa:6f:7c:d8:fb:49:b1:13:03:6f:1f:e3:87:99:e6: 80:17:82:9b:10:5b:be:44:bc:a4:1e:fb:91:f4:06:d4:29:dd: a4:c3:dd:a8:2f:97:6c:cb:2a:4c:62:45:72:60:07:98:16:6a: ea:04:e3:df:81:f1:90:79:90:62:ac:3b:15:7c:73:cb:1d:90: 2f:75:a1:06:00:2d:ff:93:7f:3c:1d:84:46:c0:a3:d7:6f:a8: 5a:5c:92:01:32:ff:2e:9b:05:7a:e4:02:34:18:9b:bf:e4:d3: 8e:8c:98:78:b3:02:15:38:32:48:46:3e:5c:d5:3e:1d:38:5b: 47:fc:8f:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwMzAxMDM1MzU3WhcNMjYwMzA4MDM1MzU3WjAYMRYwFAYD VQQDDA02OWEzYjg1NS0xOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZnQ/J9AR9y9EvlYhTFyaas/JRFT6i27MyF/nsi2FIeSOfTGj7xWcXfRAIWg Js2vczwYsBF4TI86VV3rAwOsNhMhWsdaJAB3nzEmNIJji3loI7sjjGz/UoR77qh4 pI/0LQxqMEwHHnFTxt6+aSrHmCPQVt+F1UBrg4fZ5nTMJpJbJGv0ch8mj3lOs04X RfA0o+FbFw91NagntlWNE3fjlhvi0NZpZItKLBWMX0rL0GXxsrRFp2GE36uqzuas J1+iwVgCmjUh/mgBhSMQJrlyk+benc+13pSQ3QIauDRAIuJdL4Wffy2l4hN80bHm jBBJePrqA7kwNGex2kBJ8yk+pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8czotM sjrwBKqS5VHxnGjm3vX4MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPWchWizChAGON2xjeqAAaVqa9IMBU1IccxNVOg6pSyu9v0pOThFy+nBpcSFS Hklk9GUN/j5TpJhHAnuh67FtvxMQep2zD0VxHDmTlUUltp0JdZGO8FyrKshvfRUM 6HFNh4Nm1IahiFdAsYTFyrhMu5JWJMLMy+vVpI6H0X+3Akrcqm982PtJsRMDbx/j h5nmgBeCmxBbvkS8pB77kfQG1CndpMPdqC+XbMsqTGJFcmAHmBZq6gTj34HxkHmQ Yqw7FXxzyx2QL3WhBgAt/5N/PB2ERsCj12+oWlySATL/LpsFeuQCNBibv+TTjoyY eLMCFTgySEY+XNU+HThbR/yPgQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:50 2026 by rpki-client