$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft File: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft (raw, json) Hash identifier: Or94JogSE0cJfrLZmWMGjOH81fzua6Slt/ecjfYb0VM= Subject key identifier: 79:BE:0E:DF:CB:8C:D5:08:60:33:55:1E:F4:C0:D3:C8:D6:FF:87:11 Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49 Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft Manifest number: 1C Signing time: Sun 01 Mar 2026 10:30:18 +0000 Manifest this update: Sun 01 Mar 2026 10:30:17 +0000 Manifest next update: Sun 08 Mar 2026 10:30:17 +0000 Files and hashes: 1: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl (hash: bLpeReW+hcTm43tCV7a/zohFVcQVJnc4zymyDP1SJ1Y=) 2: 511F1EDCFC0511F081195104746F56BC.roa (hash: nuEm/nImsWX8e2aMNTAfOV22vEEsr1OrR90OJJJ/kIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449 Validity Not Before: Mar 1 10:30:17 2026 GMT Not After : Mar 8 10:30:17 2026 GMT Subject: CN=69a4153a-69fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:c9:62:9f:30:84:46:5f:d4:08:f4:41:54: 70:1b:30:98:e1:88:e2:63:81:8f:5e:36:a2:d7:a0: eb:4d:8b:e2:2b:ba:9a:98:88:c0:2f:96:f3:94:12: 9f:1e:f2:2d:08:df:6d:2c:bf:57:d9:85:52:77:13: ed:14:df:d8:d5:80:d6:7f:18:65:9f:9f:6b:55:6f: 48:2d:5b:7f:6f:d2:87:1e:c3:6a:90:e5:dd:f1:91: 10:8d:4a:80:17:d7:85:39:82:48:7c:4f:7e:f7:2f: cc:8e:96:34:22:07:d0:cb:1a:0f:0e:7b:ba:1a:8f: 07:89:be:12:2e:fc:d5:33:0e:f1:72:6e:1c:50:51: 42:fc:82:0f:75:6b:4e:ef:aa:ce:de:4a:26:96:bc: d3:f5:89:87:f3:ac:54:3c:55:51:05:62:d6:a1:7f: dd:16:d9:51:f7:c0:d9:c8:f4:29:8f:4b:f4:d3:37: d7:16:cf:8a:b6:90:6e:47:1c:c9:7e:f8:8a:00:a9: 98:50:76:54:94:f9:00:cd:fb:80:b6:32:65:ce:0b: 19:60:74:77:fd:be:0f:e0:2d:52:74:4e:aa:e8:c9: de:a3:3f:e5:59:b7:62:50:a0:7b:47:d1:99:42:bb: c0:87:ac:78:c1:54:c1:ae:2e:ac:b8:36:9e:e4:c8: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:0E:DF:CB:8C:D5:08:60:33:55:1E:F4:C0:D3:C8:D6:FF:87:11 X509v3 Authority Key Identifier: keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3f:f9:fb:84:42:a1:a4:50:50:6b:01:85:95:82:f2:62:aa: 95:b0:d7:f4:aa:1a:be:d6:88:8e:83:c7:1f:93:71:ef:b6:f1: 94:00:f4:bc:5d:83:0a:3e:2a:96:a4:bb:de:25:7d:4b:c1:c3: e1:81:0d:31:5a:b2:2e:2c:b2:73:d6:e0:36:e4:95:cb:d3:9e: 36:07:91:68:3c:be:4b:16:4a:9f:9d:55:aa:63:0c:4d:50:02: bc:ad:18:c5:92:7c:f8:94:d9:c1:4c:16:d0:e5:9f:c6:aa:70: 14:50:4d:83:36:3e:11:fa:39:5c:cb:a7:5e:8d:25:57:41:5a: eb:70:46:57:69:32:53:07:53:e2:44:32:59:f1:8e:1c:0f:a6: 81:22:78:df:31:4e:c2:0d:dc:8c:4a:82:33:65:e1:1d:9c:84: 32:c1:a1:48:23:d6:67:d4:77:fb:b0:2e:7e:9b:02:f1:aa:cd: c4:98:bc:38:98:9c:52:29:6b:75:fc:5c:f2:78:3d:9a:67:96: 95:60:17:54:e3:de:d3:9d:03:a9:13:62:7e:fc:90:8b:29:4e: 71:fa:83:fa:5e:b5:82:df:23:95:3b:f7:9c:64:1c:75:60:f7: 6e:22:a1:44:24:85:ae:49:c5:46:52:e5:2e:58:c2:49:56:d7: 03:23:ba:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzQ3MzExMC8GA1UEBRMoMzMzNzdBMTE1RkU1MkU5MUNENjEyMTk3MTk4NUEwMDNC QjNCQTQ0OTAeFw0yNjAzMDExMDMwMTdaFw0yNjAzMDgxMDMwMTdaMBgxFjAUBgNV BAMTDTY5YTQxNTNhLTY5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd4MlinzCERl/UCPRBVHAbMJjhiOJjgY9eNqLXoOtNi+IrupqYiMAvlvOUEp8e 8i0I320sv1fZhVJ3E+0U39jVgNZ/GGWfn2tVb0gtW39v0ocew2qQ5d3xkRCNSoAX 14U5gkh8T373L8yOljQiB9DLGg8Oe7oajweJvhIu/NUzDvFybhxQUUL8gg91a07v qs7eSiaWvNP1iYfzrFQ8VVEFYtahf90W2VH3wNnI9CmPS/TTN9cWz4q2kG5HHMl+ +IoAqZhQdlSU+QDN+4C2MmXOCxlgdHf9vg/gLVJ0Tqroyd6jP+VZt2JQoHtH0ZlC u8CHrHjBVMGuLqy4Np7kyKolAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeb4O38uM 1QhgM1Ue9MDTyNb/hxEwHwYDVR0jBBgwFoAUMzd6EV/lLpHNYSGXGYWgA7s7pEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNDczLzZDMTdFRUNDRkMw NDExRjA4RTNDRkEwMDc0NkY1NkJDL016ZDZFVl9sTHBITllTR1hHWVdnQTdzN3BF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXpkNkVWX2xMcEhOWVNHWEdZV2dBN3M3cEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NDczLzZDMTdFRUNDRkMwNDExRjA4RTNDRkEwMDc0NkY1NkJDL016ZDZFVl9sTHBI TllTR1hHWVdnQTdzN3BFay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8P/n7hEKhpFBQawGFlYLyYqqVsNf0qhq+1oiOg8cfk3HvtvGUAPS8XYMKPiqW pLveJX1LwcPhgQ0xWrIuLLJz1uA25JXL0542B5FoPL5LFkqfnVWqYwxNUAK8rRjF knz4lNnBTBbQ5Z/GqnAUUE2DNj4R+jlcy6dejSVXQVrrcEZXaTJTB1PiRDJZ8Y4c D6aBInjfMU7CDdyMSoIzZeEdnIQywaFII9Zn1Hf7sC5+mwLxqs3EmLw4mJxSKWt1 /FzyeD2aZ5aVYBdU497TnQOpE2J+/JCLKU5x+oP6XrWC3yOVO/ecZBx1YPduIqFE JIWuScVGUuUuWMJJVtcDI7pF -----END CERTIFICATE-----Generated at Sun Mar 1 20:12:26 2026 by rpki-client