$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: bBhz1abLFMqMurJI+9peEp/mkSa/Nw8c/w60LORt8Tk= Subject key identifier: 68:CB:28:79:53:06:38:73:34:0C:C1:B2:36:10:67:2F:3E:3C:1D:E8 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 08E3 Signing time: Sat 28 Feb 2026 20:43:05 +0000 Manifest this update: Sat 28 Feb 2026 20:43:05 +0000 Manifest next update: Sat 07 Mar 2026 20:43:05 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: xJv3c7jUxsCuSbuuPUtJ2FdQIRmc8Jox7AWDmVvICfU=) 2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=) 3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Feb 28 20:43:05 2026 GMT Not After : Mar 7 20:43:05 2026 GMT Subject: CN=69a35359-e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:76:62:a9:29:a2:5d:70:a6:37:47:c8:66: 22:3c:ba:54:e8:d0:4c:e8:68:48:38:a9:fa:4f:67: d1:65:4d:e8:e2:2d:27:fb:d6:62:6f:87:00:39:27: 8a:df:ad:06:d1:8e:c2:cd:7f:51:29:ae:ff:47:fb: da:f2:78:b5:2f:d8:5d:44:8d:a7:7b:c8:b6:25:b6: b7:dc:12:84:f4:d7:01:b9:83:81:8f:a9:29:65:30: 8c:b9:eb:22:af:37:78:23:1d:1b:12:ee:7f:cf:3a: ef:52:f0:e5:b9:8f:cd:0b:24:03:a4:3e:5f:ff:79: a7:ed:4e:08:78:fe:27:62:01:56:4a:3b:66:a7:1c: 89:8b:f3:86:5e:14:3e:f4:fa:07:87:28:99:f2:d2: 8f:10:01:cd:9d:92:bb:d1:0f:e4:18:e9:46:77:29: a9:a4:f9:0d:22:77:bb:de:1a:35:5b:3b:df:9f:a8: c9:aa:22:9c:17:8a:af:76:48:82:d4:7d:85:7c:6c: 30:3b:5e:7c:31:ce:ef:66:8e:79:48:c9:58:2e:c2: 7c:1e:6e:64:3d:e0:b5:03:6a:88:4a:e6:5e:3c:52: 61:5a:a5:2a:3f:b7:72:ce:39:aa:9c:5f:52:c5:0a: ff:84:b3:75:ce:61:6e:b1:2c:b0:23:9d:aa:9c:b2: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:28:79:53:06:38:73:34:0C:C1:B2:36:10:67:2F:3E:3C:1D:E8 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:24:d5:2c:0b:2e:21:b7:1d:ce:96:30:eb:9f:23:a1:3f: e6:17:50:66:8f:ce:a8:54:62:8d:ae:e2:c2:37:95:6a:cd:17: 41:93:60:d7:f1:0e:82:e9:f5:f6:21:8b:b0:e4:6a:fc:19:57: 35:ff:be:78:66:6f:eb:87:ae:7c:57:f7:a2:80:fd:2c:dc:5b: e2:f6:a3:ea:62:55:db:47:a3:13:a0:f0:bc:f5:16:54:70:a1: e4:c2:ea:02:45:06:5e:f6:78:9f:b3:95:d6:58:73:c4:be:d1: 7c:48:d2:2a:7b:b6:bf:2a:42:0e:8c:04:cc:09:3a:a1:5a:46: 80:43:15:b1:9b:23:3a:47:a7:4a:80:97:38:5d:5b:17:2a:af: ba:fd:a2:92:68:60:4c:e7:1e:fe:0c:ff:1b:30:48:99:df:47: 71:00:6a:4a:f3:b7:e6:25:0a:b7:41:cb:51:96:c3:bc:7a:85: 68:e9:bb:fc:18:bd:0d:a7:a2:75:90:ac:74:19:b7:b1:7b:a6: aa:f8:3c:32:f2:35:5f:71:5b:b8:3e:a7:f9:77:6d:3f:3a:4f: 1c:2b:2c:78:b7:4d:09:fb:a8:f8:f5:a0:e0:f9:c6:45:f6:4d: e4:81:32:da:45:6e:10:5a:a5:15:c9:ce:30:8d:80:f6:79:c9: 98:21:ac:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYwMjI4MjA0MzA1WhcNMjYwMzA3MjA0MzA1WjAYMRYwFAYD VQQDDA02OWEzNTM1OS1lN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9N2Yqkpol1wpjdHyGYiPLpU6NBM6GhIOKn6T2fRZU3o4i0n+9Zib4cAOSeK 360G0Y7CzX9RKa7/R/va8ni1L9hdRI2ne8i2Jba33BKE9NcBuYOBj6kpZTCMuesi rzd4Ix0bEu5/zzrvUvDluY/NCyQDpD5f/3mn7U4IeP4nYgFWSjtmpxyJi/OGXhQ+ 9PoHhyiZ8tKPEAHNnZK70Q/kGOlGdymppPkNIne73ho1Wzvfn6jJqiKcF4qvdkiC 1H2FfGwwO158Mc7vZo55SMlYLsJ8Hm5kPeC1A2qISuZePFJhWqUqP7dyzjmqnF9S xQr/hLN1zmFusSywI52qnLIFhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjLKHlT BjhzNAzBsjYQZy8+PB3oMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPsk1SwLLiG3Hc6WMOufI6E/5hdQZo/OqFRija7iwjeVas0XQZNg1/EOgun1 9iGLsORq/BlXNf++eGZv64eufFf3ooD9LNxb4vaj6mJV20ejE6DwvPUWVHCh5MLq AkUGXvZ4n7OV1lhzxL7RfEjSKnu2vypCDowEzAk6oVpGgEMVsZsjOkenSoCXOF1b Fyqvuv2ikmhgTOce/gz/GzBImd9HcQBqSvO35iUKt0HLUZbDvHqFaOm7/Bi9Daei dZCsdBm3sXumqvg8MvI1X3FbuD6n+XdtPzpPHCsseLdNCfuo+PWg4PnGRfZN5IEy 2kVuEFqlFcnOMI2A9nnJmCGsqQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:06 2026 by rpki-client