$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: Fp6Uz0tuuOf92gAOW83cFjmTJbvojbcL7nWA+NPxyIg= Subject key identifier: D1:CB:33:EF:43:F8:53:51:EC:84:3D:0E:5D:69:91:F6:91:39:66:E1 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1AD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1AAF Signing time: Sun 01 Mar 2026 22:30:02 +0000 Manifest this update: Sun 01 Mar 2026 22:30:01 +0000 Manifest next update: Sun 08 Mar 2026 22:30:01 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: HHCFYfNsIiMV52A8UqfbgF5dUX+LA/RS9Wtb5RrcYJ0=) 2: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) 3: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6865 (0x1ad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Mar 1 22:30:01 2026 GMT Not After : Mar 8 22:30:01 2026 GMT Subject: CN=69a4bdea-7d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:30:cd:18:d0:49:81:c1:52:be:d2:ef:3e: 06:ce:c6:0e:99:6d:7a:1c:ca:fc:42:c5:1d:d6:a5: 33:ff:77:65:da:19:5f:5e:2e:16:73:5d:ec:d2:fb: 60:19:15:bf:91:e3:26:04:d3:ec:77:d3:16:d3:db: 63:1f:86:26:44:4c:01:ee:08:58:83:7c:31:ea:0f: 6c:f7:17:83:44:f1:f4:a1:7b:1f:61:c7:6c:a9:52: ec:b9:73:63:a3:41:8c:25:10:ce:3a:e4:13:5d:72: d3:dc:e4:d5:eb:61:43:56:ba:c3:84:5f:c1:89:d2: 91:de:bd:29:03:c3:a7:a0:14:45:8f:e1:0b:d0:0e: 95:33:f2:ac:f5:13:1d:3e:2c:ca:a0:db:7f:22:6b: 53:83:f4:d2:09:21:62:97:4d:a1:fa:37:a5:fb:41: fa:91:57:73:52:8f:3b:90:82:72:22:48:37:12:65: c6:cb:3a:5a:f2:d6:c0:43:ff:ec:f0:52:be:44:fa: 9d:ca:7e:5c:9e:9f:94:cb:2d:f1:37:e3:63:fb:65: e1:c3:33:ca:ac:45:53:29:77:ef:56:96:b3:97:b8: 8a:24:77:b5:8a:35:c7:f4:31:9c:26:90:c8:38:94: 86:50:c9:1b:66:14:2f:db:c4:21:83:62:e9:92:3d: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CB:33:EF:43:F8:53:51:EC:84:3D:0E:5D:69:91:F6:91:39:66:E1 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:00:77:81:d6:da:73:4d:3e:6c:ba:1a:ad:a3:18:bb:06:8a: a7:bb:3f:05:57:fb:aa:34:8a:3f:6d:92:60:b2:95:2e:a9:58: b9:45:eb:e3:d9:53:89:af:df:a5:10:12:05:ee:19:c0:d1:b1: 64:84:57:c2:a7:a9:1e:cd:78:8f:a2:c1:a3:27:0e:ba:44:ef: 2d:d7:e1:5d:cd:64:50:6d:c3:b6:c0:7c:00:fc:6e:bb:20:6f: dc:f1:c8:3f:b3:17:4f:a1:76:63:f8:85:4e:c8:c3:80:93:56: 49:12:a8:89:81:06:8d:cb:3f:3c:27:b0:f0:f6:e0:19:d8:1f: b9:5e:ed:60:4d:8d:11:4e:f1:e6:ea:02:76:d6:f6:4d:a1:b3: a8:fc:25:86:0b:7d:14:cb:98:86:bb:8d:e0:0b:10:84:e7:85: 38:b0:14:5b:ef:4e:65:e2:94:b4:af:11:a4:fa:47:d6:2f:cd: 45:14:f0:d1:e6:87:10:db:d9:27:6d:57:3b:56:a2:7a:54:0b: 0e:7c:71:67:e3:99:2f:eb:d1:2d:e1:99:f6:44:e4:0d:76:35: 17:05:0c:a7:da:35:82:89:bf:8d:32:e7:2c:39:d9:c5:a4:da: ac:65:bc:92:1d:e1:5a:14:63:d2:ce:cc:5a:e8:29:ab:6d:ae: ab:a0:d7:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwMzAxMjIzMDAxWhcNMjYwMzA4MjIzMDAxWjAYMRYwFAYD VQQDEw02OWE0YmRlYS03ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnUwzRjQSYHBUr7S7z4GzsYOmW16HMr8QsUd1qUz/3dl2hlfXi4Wc13s0vtg GRW/keMmBNPsd9MW09tjH4YmREwB7ghYg3wx6g9s9xeDRPH0oXsfYcdsqVLsuXNj o0GMJRDOOuQTXXLT3OTV62FDVrrDhF/BidKR3r0pA8OnoBRFj+EL0A6VM/Ks9RMd PizKoNt/ImtTg/TSCSFil02h+jel+0H6kVdzUo87kIJyIkg3EmXGyzpa8tbAQ//s 8FK+RPqdyn5cnp+Uyy3xN+Nj+2XhwzPKrEVTKXfvVpazl7iKJHe1ijXH9DGcJpDI OJSGUMkbZhQv28Qhg2Lpkj1/DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHLM+9D +FNR7IQ9Dl1pkfaROWbhMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABQB3gdbac00+bLoaraMYuwaKp7s/BVf7qjSKP22SYLKVLqlYuUXr49lTia/f pRASBe4ZwNGxZIRXwqepHs14j6LBoycOukTvLdfhXc1kUG3DtsB8APxuuyBv3PHI P7MXT6F2Y/iFTsjDgJNWSRKoiYEGjcs/PCew8PbgGdgfuV7tYE2NEU7x5uoCdtb2 TaGzqPwlhgt9FMuYhruN4AsQhOeFOLAUW+9OZeKUtK8RpPpH1i/NRRTw0eaHENvZ J21XO1aielQLDnxxZ+OZL+vRLeGZ9kTkDXY1FwUMp9o1gom/jTLnLDnZxaTarGW8 kh3hWhRj0s7MWugpq22uq6DXGQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:58 2026 by rpki-client