$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json) Hash identifier: JVfd85Km+m3dzLaJg+ANY5USFsOyMAjaAqe4E17MQxg= Subject key identifier: DB:87:4B:7F:F6:29:6E:15:FB:F3:EE:64:79:23:57:CF:AD:E5:E8:70 Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft Manifest number: 32 Signing time: Sun 01 Mar 2026 10:07:11 +0000 Manifest this update: Sun 01 Mar 2026 10:07:10 +0000 Manifest next update: Sun 08 Mar 2026 10:07:10 +0000 Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: n47cWig77xg4i62trDzJoTPde7QifLWJAOD2kci+ve8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Mar 1 10:07:10 2026 GMT Not After : Mar 8 10:07:10 2026 GMT Subject: CN=69a40fcf-f93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:c2:73:d0:ef:36:07:f1:8f:df:34:78:d7: 95:c8:60:0b:c3:14:f9:86:f6:54:74:55:a9:63:80: 0a:b8:88:ad:84:a7:a0:8b:02:be:bd:4b:88:42:3b: b7:07:03:a4:de:5b:64:f4:3e:df:2e:1a:87:b1:c7: e7:b2:17:cb:dd:a2:bc:57:03:a4:0d:11:1d:f5:2d: 33:e3:24:0b:17:07:31:38:fa:e3:c6:7f:6c:19:8f: 2a:55:6c:b3:12:ed:ac:2d:b9:59:07:38:ef:85:6c: 79:f0:6d:b8:29:9a:6e:0e:60:f4:f7:83:a8:9f:01: fe:f8:78:e3:69:df:5e:f0:51:56:f5:57:b4:9c:a6: e9:b7:62:c0:30:c1:c4:a0:18:b9:bb:26:e3:76:47: 4a:8a:cb:b9:3f:4b:ce:dc:f8:e2:22:be:38:ea:64: bb:3e:9c:0a:bb:c4:4d:14:72:df:ec:ea:64:81:b6: 62:64:00:9f:68:cb:53:90:3c:d3:6c:1f:25:6d:c4: c2:bb:76:23:71:80:aa:92:14:09:c7:1b:1c:7f:8d: 1c:ca:43:99:ba:b5:61:32:cb:6f:3f:98:2a:70:a3: 49:ed:00:4d:fd:3a:92:68:36:41:6f:d9:1d:d7:24: 56:e5:cc:2d:84:7b:08:85:e2:ca:d9:bb:38:a3:f4: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:87:4B:7F:F6:29:6E:15:FB:F3:EE:64:79:23:57:CF:AD:E5:E8:70 X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:87:bd:0b:04:6c:83:c3:55:94:02:99:eb:21:1e:0e:a4:a3: b1:15:1b:48:94:13:b0:37:58:d0:9c:ec:a4:3e:c4:ef:76:84: 8f:6f:0a:37:c4:c2:d5:0f:12:61:64:a5:44:0a:a9:f7:3d:b6: c7:64:c4:52:36:5a:ba:ec:64:b4:8a:4e:66:6e:51:a8:dc:20: 46:d9:c9:3f:29:6b:f4:cc:3a:76:4b:97:58:07:c0:28:cb:fe: 47:d2:f0:56:03:0a:13:a1:b6:f6:60:19:92:d5:98:33:de:f4: 25:80:97:c2:ef:b1:11:ae:e7:a8:23:67:81:97:cb:0e:d1:32: 52:c1:41:fe:70:04:4d:37:ed:29:10:d5:92:ba:dd:50:49:27: 92:36:1a:2e:8c:7c:28:06:78:16:22:0b:2b:00:d3:0f:57:91: ef:b9:c5:8e:6e:c7:90:9b:0a:2b:70:04:33:49:11:f4:9d:97: e2:fa:31:9b:c1:2d:76:99:3b:9e:29:68:6a:42:a1:a0:2b:49: 9c:1b:ec:4a:70:0a:e9:37:9d:e5:c2:47:84:a9:ca:2f:09:da: 4e:25:d7:04:03:95:cb:3c:3c:9f:d0:85:45:e6:94:67:1b:28: 22:ae:ef:c5:85:27:1e:7e:eb:38:33:76:98:0d:7c:ed:3f:3b: e3:98:57:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDExQTExMC8GA1UEBRMoNjRBQjVFREI1MTEyNjJCNzM2QUY4MTc0MUQ0RDczMTQx NEQzNEE1NzAeFw0yNjAzMDExMDA3MTBaFw0yNjAzMDgxMDA3MTBaMBgxFjAUBgNV BAMTDTY5YTQwZmNmLWY5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjIMJz0O82B/GP3zR415XIYAvDFPmG9lR0ValjgAq4iK2Ep6CLAr69S4hCO7cH A6TeW2T0Pt8uGoexx+eyF8vdorxXA6QNER31LTPjJAsXBzE4+uPGf2wZjypVbLMS 7awtuVkHOO+FbHnwbbgpmm4OYPT3g6ifAf74eONp317wUVb1V7Scpum3YsAwwcSg GLm7JuN2R0qKy7k/S87c+OIivjjqZLs+nAq7xE0Uct/s6mSBtmJkAJ9oy1OQPNNs HyVtxMK7diNxgKqSFAnHGxx/jRzKQ5m6tWEyy28/mCpwo0ntAE39OpJoNkFv2R3X JFblzC2EewiF4srZuzij9O/jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU24dLf/Yp bhX78+5keSNXz63l6HAwHwYDVR0jBBgwFoAUZKte21ESYrc2r4F0HU1zFBTTSlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMTFBL0EyM0YyM0I4RDBD MDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkt0ZTIxRVNZcmMycjRGMEhVMXpGQlRUU2xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MTFBL0EyM0YyM0I4RDBDMDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJj MnI0RjBIVTF6RkJUVFNsYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSh70LBGyDw1WUApnrIR4OpKOxFRtIlBOwN1jQnOykPsTvdoSPbwo3xMLVDxJh ZKVECqn3PbbHZMRSNlq67GS0ik5mblGo3CBG2ck/KWv0zDp2S5dYB8Aoy/5H0vBW AwoTobb2YBmS1Zgz3vQlgJfC77ERrueoI2eBl8sO0TJSwUH+cARNN+0pENWSut1Q SSeSNhoujHwoBngWIgsrANMPV5HvucWObseQmworcAQzSRH0nZfi+jGbwS12mTue KWhqQqGgK0mcG+xKcArpN53lwkeEqcovCdpOJdcEA5XLPDyf0IVF5pRnGygiru/F hScefus4M3aYDXztPzvjmFdK -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:43 2026 by rpki-client