$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: pJyAlu5M7iYv4CvWXzifTw03GAfCKfqvcWG+F5lZ2zw= Subject key identifier: 17:5A:B1:50:10:0E:CB:E9:70:94:5E:96:F7:2D:24:39:B7:1B:60:FC Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01D1 Signing time: Mon 02 Mar 2026 01:03:32 +0000 Manifest this update: Mon 02 Mar 2026 01:03:31 +0000 Manifest next update: Mon 09 Mar 2026 01:03:31 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: 1Pw8qGMAsWarxvrquYRB0aQI3hSzxG5EDwUh3W+EFyA=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: LAlnyo3rb9AwHKq6SAQyKOj1FSqQ0wWefEg411QdKi4=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: foxTG8mq8kcm/d5eCXjWBJn4Sw2IsdHZd1ZWxbUvu/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Mar 2 01:03:31 2026 GMT Not After : Mar 9 01:03:31 2026 GMT Subject: CN=69a4e1e4-0c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:81:da:05:5b:eb:29:f6:1d:c3:86:a1:f9: 9e:49:2b:e7:b0:3f:3a:96:02:bd:85:e7:7c:33:ba: fc:a8:2c:6d:a3:45:28:00:a2:79:99:6c:9f:e6:28: 4c:d3:b5:8c:ad:27:1f:c9:1d:01:a6:91:f2:63:99: f0:8f:1e:b6:60:1b:a5:e5:ab:76:22:51:bf:35:57: af:93:59:bd:7c:b6:29:36:11:fd:16:06:b2:34:32: 8c:d9:6d:09:7d:25:bd:b4:d0:ed:1b:fc:0e:73:1e: 22:93:5a:bf:dd:57:5b:19:fd:83:9f:e2:7e:cb:62: e2:ff:00:95:c6:d6:48:d3:6d:1b:aa:5c:04:4e:2e: 63:4f:64:bd:88:cb:6d:54:45:33:2f:6f:b9:f3:82: c9:dc:d3:66:95:85:63:7b:63:7c:1b:e8:b3:08:9a: 27:e2:73:47:45:30:88:08:b6:22:39:99:e0:d7:a5: 76:f9:98:24:66:37:90:9c:ef:35:00:7a:b6:24:c6: 5e:d0:3b:11:16:06:62:26:2b:5a:bd:d2:b0:1e:84: 01:af:f3:d2:43:d2:94:03:f4:b5:be:6a:44:52:7d: 80:20:38:6a:d6:6f:f5:0c:25:c9:48:3b:ca:50:2c: 25:9a:9a:8f:62:c1:5c:32:7f:e7:81:6a:c4:36:0f: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:B1:50:10:0E:CB:E9:70:94:5E:96:F7:2D:24:39:B7:1B:60:FC X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a7:7f:61:f6:41:01:98:7c:27:e5:a9:96:08:4f:e5:fd:ac: 4a:72:0b:da:2c:68:b3:5e:ca:0a:d1:33:c2:c5:0d:07:19:36: 65:2a:b1:26:89:1a:ab:5e:ea:08:de:69:81:cd:1f:17:16:1f: fa:87:fc:54:fd:01:7f:a5:75:8d:38:88:73:4f:5b:bc:98:96: 2f:81:d7:eb:43:23:0d:3d:c5:ed:5f:53:02:f2:84:69:9b:c6: e3:01:93:de:64:05:95:16:a2:77:2c:2b:f2:06:4a:1c:47:2d: d1:86:07:3c:86:24:60:29:bc:ad:ff:aa:84:0c:84:96:5b:bb: 10:25:65:86:b1:41:10:ab:4c:29:56:ba:2e:66:91:79:2a:01: 54:23:fe:ce:4a:99:a2:7e:c3:a1:6c:d9:13:d0:d8:43:ad:66: 69:5e:2c:5a:d5:7e:d4:ec:a5:b2:2c:88:06:11:f7:35:08:cd: 4f:5f:ea:70:dc:79:b1:6b:36:c9:9c:cf:23:2e:47:4a:15:42: b7:e4:e3:c8:4f:19:be:cd:ad:8a:b7:80:0b:a4:41:e3:22:3f: 1c:b4:5e:70:47:8d:db:d6:0e:a6:55:03:ed:d5:a0:63:f1:29: 5d:0d:60:93:3b:92:43:1c:ed:4b:35:36:6f:4a:ba:9a:c1:a3: c9:37:aa:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwMzAyMDEwMzMxWhcNMjYwMzA5MDEwMzMxWjAYMRYwFAYD VQQDEw02OWE0ZTFlNC0wYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu2B2gVb6yn2HcOGofmeSSvnsD86lgK9hed8M7r8qCxto0UoAKJ5mWyf5ihM 07WMrScfyR0BppHyY5nwjx62YBul5at2IlG/NVevk1m9fLYpNhH9FgayNDKM2W0J fSW9tNDtG/wOcx4ik1q/3VdbGf2Dn+J+y2Li/wCVxtZI020bqlwETi5jT2S9iMtt VEUzL2+584LJ3NNmlYVje2N8G+izCJon4nNHRTCICLYiOZng16V2+ZgkZjeQnO81 AHq2JMZe0DsRFgZiJitavdKwHoQBr/PSQ9KUA/S1vmpEUn2AIDhq1m/1DCXJSDvK UCwlmpqPYsFcMn/ngWrENg+exwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdasVAQ DsvpcJRelvctJDm3G2D8MB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoad/YfZBAZh8J+WplghP5f2sSnIL2ixos17KCtEzwsUNBxk2ZSqxJokaq17q CN5pgc0fFxYf+of8VP0Bf6V1jTiIc09bvJiWL4HX60MjDT3F7V9TAvKEaZvG4wGT 3mQFlRaidywr8gZKHEct0YYHPIYkYCm8rf+qhAyEllu7ECVlhrFBEKtMKVa6LmaR eSoBVCP+zkqZon7DoWzZE9DYQ61maV4sWtV+1OylsiyIBhH3NQjNT1/qcNx5sWs2 yZzPIy5HShVCt+TjyE8Zvs2tireAC6RB4yI/HLRecEeN29YOplUD7dWgY/EpXQ1g kzuSQxztSzU2b0q6msGjyTeqAg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:29 2026 by rpki-client