$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: +f6A0XAWN4bKNAhyV7aTpQIZR6qYax5UCYpjYAE18HQ= Subject key identifier: 42:56:9A:A2:F6:A9:78:BC:0C:97:C9:1F:0D:AC:43:E8:68:F1:AF:8D Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 313D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 3123 Signing time: Mon 02 Mar 2026 02:43:29 +0000 Manifest this update: Mon 02 Mar 2026 02:43:28 +0000 Manifest next update: Mon 09 Mar 2026 02:43:28 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: jcwrRlSzT5QPFeI3vLEtMVou9084ptOVW1Ch4i8UVNU=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: uTzcih1KaqTWD5o3aEAbBRCjnKgSsq3hesblpLVQM8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12605 (0x313d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Mar 2 02:43:28 2026 GMT Not After : Mar 9 02:43:28 2026 GMT Subject: CN=69a4f951-4352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:85:3a:c1:3e:81:13:6f:ba:a4:ef:c4:69: 04:72:a4:33:01:3f:be:11:03:72:d6:76:32:08:e5: ed:d1:ce:a2:e6:39:5b:54:d4:d5:e9:1e:12:ae:65: 6a:fe:a5:3d:1c:68:76:3c:67:fb:f2:f1:de:62:d5: 0a:fd:42:af:4a:2f:ed:68:60:fe:af:93:a6:6e:86: ea:e7:a0:76:06:d7:ec:06:9b:94:86:b3:3e:da:cb: 3e:01:30:25:82:c3:62:bb:b7:62:13:93:f8:de:3c: f5:6e:6d:da:c7:89:fc:17:b7:b7:8b:48:78:c2:07: 18:cc:ba:3e:f1:17:60:1c:e3:33:39:82:1a:42:37: e4:2c:07:da:06:4d:e9:40:5c:7f:28:f3:8a:c0:fe: c7:ed:14:75:3c:67:9d:01:76:50:a2:74:0e:5c:ad: b9:08:45:4d:10:84:90:e9:2d:ad:67:71:3f:3c:8a: 48:c4:62:7d:cc:cf:27:87:3a:74:b2:a4:f7:19:d8: d4:63:0b:30:ff:c3:4d:ea:9d:30:35:9b:f8:3a:29: 4b:af:9e:27:99:46:4e:aa:a0:84:85:8a:d4:24:32: c7:71:5a:91:b0:96:6d:15:5f:31:fe:02:5b:2b:f9: 16:7f:ec:2f:8d:63:c0:9d:39:b4:29:87:3b:9b:dc: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:9A:A2:F6:A9:78:BC:0C:97:C9:1F:0D:AC:43:E8:68:F1:AF:8D X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:47:38:48:32:6a:fd:e2:55:ea:cc:9c:3b:91:eb:63:5c:08: c0:b6:d9:1e:4f:cd:5a:41:79:63:e9:ed:6e:94:75:b9:54:8b: a4:f8:eb:2d:bd:f5:d5:e9:c8:f8:43:11:40:c0:38:1d:b4:7a: 0b:ea:39:3f:86:a9:7e:d8:a0:dd:41:d1:db:55:f7:0a:b1:9e: 21:ed:e0:b1:5f:45:81:dc:db:e5:5f:0b:15:ae:a7:33:a8:b5: 3b:e0:d6:c2:59:15:18:d0:fa:04:e5:07:8f:3d:e5:33:a5:80: 1a:91:2b:ac:9f:4f:36:ab:b5:1c:f4:f3:05:fc:e4:e1:80:b2: 78:35:d3:2d:94:04:72:2e:42:08:bb:61:40:68:73:3a:88:23: 60:79:c7:33:f8:b0:6d:4b:bd:e6:ab:c2:64:01:ca:7d:40:7c: 51:e5:e0:3a:bd:3d:a4:b8:2d:9d:01:73:e4:23:f1:f4:52:87: 2f:69:f4:3a:a0:44:df:76:80:25:22:ce:9a:a7:4d:25:3c:88: 0a:20:43:75:a4:76:71:83:71:a2:a2:ee:f2:d0:6e:cd:cb:a7: 3d:99:2c:11:5c:3e:5a:a9:77:0b:40:62:d1:eb:aa:b7:9b:41: 3d:50:f1:9e:10:75:0a:41:29:72:14:95:c6:bd:f9:4b:40:e4: 27:82:c1:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjYwMzAyMDI0MzI4WhcNMjYwMzA5MDI0MzI4WjAYMRYwFAYD VQQDEw02OWE0Zjk1MS00MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DaFOsE+gRNvuqTvxGkEcqQzAT++EQNy1nYyCOXt0c6i5jlbVNTV6R4SrmVq /qU9HGh2PGf78vHeYtUK/UKvSi/taGD+r5Ombobq56B2BtfsBpuUhrM+2ss+ATAl gsNiu7diE5P43jz1bm3ax4n8F7e3i0h4wgcYzLo+8RdgHOMzOYIaQjfkLAfaBk3p QFx/KPOKwP7H7RR1PGedAXZQonQOXK25CEVNEISQ6S2tZ3E/PIpIxGJ9zM8nhzp0 sqT3GdjUYwsw/8NN6p0wNZv4OilLr54nmUZOqqCEhYrUJDLHcVqRsJZtFV8x/gJb K/kWf+wvjWPAnTm0KYc7m9wjDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJWmqL2 qXi8DJfJHw2sQ+ho8a+NMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUEc4SDJq/eJV6sycO5HrY1wIwLbZHk/NWkF5Y+ntbpR1uVSLpPjrLb311enI +EMRQMA4HbR6C+o5P4apftig3UHR21X3CrGeIe3gsV9Fgdzb5V8LFa6nM6i1O+DW wlkVGND6BOUHjz3lM6WAGpErrJ9PNqu1HPTzBfzk4YCyeDXTLZQEci5CCLthQGhz OogjYHnHM/iwbUu95qvCZAHKfUB8UeXgOr09pLgtnQFz5CPx9FKHL2n0OqBE33aA JSLOmqdNJTyICiBDdaR2cYNxoqLu8tBuzcunPZksEVw+Wql3C0Bi0euqt5tBPVDx nhB1CkEpchSVxr35S0DkJ4LBWg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:15 2026 by rpki-client