$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: 9vQQ9eB39efOr9NZAk7iMrogW7qbgnzjCro4JdzYtf0= Subject key identifier: 34:EC:2F:19:AA:5F:F5:59:56:1C:75:EB:52:02:B7:A6:C0:CF:41:DF Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 018C Signing time: Sun 01 Mar 2026 05:31:35 +0000 Manifest this update: Sun 01 Mar 2026 05:31:35 +0000 Manifest next update: Sun 08 Mar 2026 05:31:35 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: bsBtxHuKGDHp42rsx3DOdNF/Jnvb1t6Ws9UjG3VbVbw=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: OCIfPT6csLAtAeWTDBTvsXbrYBJPIHeFKZh9yC7jO40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Mar 1 05:31:35 2026 GMT Not After : Mar 8 05:31:35 2026 GMT Subject: CN=69a3cf37-57c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:51:86:ca:a2:3f:86:24:7f:57:1e:46:58: 1f:7f:5e:a1:86:86:33:02:a4:e7:3b:e3:50:8b:6c: 95:a2:1f:08:22:9b:5f:b3:cc:dc:fb:77:b3:d1:f5: 17:ff:15:bf:50:e0:98:29:f2:cc:4d:4e:f0:30:8f: bf:5c:6e:75:e8:b5:d6:8e:be:92:bd:53:91:f6:bd: 53:a8:47:b3:5b:98:36:d2:f9:f6:6d:33:9d:a9:8b: ba:26:c5:7e:72:79:cb:57:69:f0:e7:5f:c0:99:7c: e4:0b:5b:b9:b2:c4:fd:03:1a:df:48:3b:5f:8a:4c: d4:22:b5:a1:ed:73:ed:c3:d2:43:5d:2c:71:45:0b: 49:7c:a5:47:2c:1f:06:cd:c3:e8:79:a7:21:ab:b4: 30:8f:aa:fd:e4:02:d3:0b:32:12:b5:1c:c0:67:44: cc:6c:ce:41:60:47:38:05:5f:33:0f:6b:17:f6:e4: 68:18:6a:72:e5:5b:55:50:e9:8d:7e:e2:7b:4e:97: 56:85:8c:19:d1:6a:c0:d9:cc:42:2a:46:2f:b3:ed: 37:0f:5e:3e:ec:b5:14:94:54:90:b4:82:d7:48:d3: 45:98:d6:f7:a4:ec:cf:8b:a6:77:c0:79:2e:aa:a1: 17:36:6d:72:6f:68:9b:37:bd:2f:ef:6c:ef:e4:b8: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EC:2F:19:AA:5F:F5:59:56:1C:75:EB:52:02:B7:A6:C0:CF:41:DF X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:37:1a:0f:ab:7f:4f:27:5b:11:cd:22:3c:b5:68:1b:bf:fa: 2a:59:5d:e4:39:2f:33:b1:8f:ea:fd:b0:04:e1:46:f9:e4:b2: b4:a6:2b:19:93:bf:30:82:dd:af:02:f8:78:c9:ca:93:22:df: d2:38:ee:0c:24:a7:03:ac:a1:02:ba:8b:36:a0:3c:4f:73:84: 2e:8a:72:e2:d5:cc:ed:ae:19:0f:58:76:49:31:68:ac:cc:1b: e6:90:f4:68:8d:0a:78:8e:7b:26:23:4e:2d:16:2c:af:ac:bb: 37:27:d1:8d:6f:3f:f5:98:cc:80:bb:6f:c5:63:b9:53:6a:93: 91:06:21:f8:5e:d2:7c:00:f4:ab:07:53:27:27:67:7f:38:3f: 3f:83:da:25:d8:1a:8e:56:14:05:58:92:89:57:ce:57:d5:46: 92:5e:1b:89:62:cf:37:44:39:16:88:aa:30:ba:2b:4d:db:9c: 2d:d7:94:e9:13:9d:be:21:bb:29:51:5d:54:e6:c4:e9:2b:d6: 3d:3c:35:94:40:a6:a2:e9:f5:30:90:50:92:1f:de:51:2c:20: 8a:5d:44:fb:0d:62:67:73:34:84:f5:68:6d:72:95:2e:c5:1b: 6a:91:1e:91:dd:76:3d:97:b7:f9:e1:f8:38:66:b2:dd:e7:00: 84:ca:ac:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjYwMzAxMDUzMTM1WhcNMjYwMzA4MDUzMTM1WjAYMRYwFAYD VQQDEw02OWEzY2YzNy01N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+9RhsqiP4Ykf1ceRlgff16hhoYzAqTnO+NQi2yVoh8IIptfs8zc+3ez0fUX /xW/UOCYKfLMTU7wMI+/XG516LXWjr6SvVOR9r1TqEezW5g20vn2bTOdqYu6JsV+ cnnLV2nw51/AmXzkC1u5ssT9AxrfSDtfikzUIrWh7XPtw9JDXSxxRQtJfKVHLB8G zcPoeachq7Qwj6r95ALTCzIStRzAZ0TMbM5BYEc4BV8zD2sX9uRoGGpy5VtVUOmN fuJ7TpdWhYwZ0WrA2cxCKkYvs+03D14+7LUUlFSQtILXSNNFmNb3pOzPi6Z3wHku qqEXNm1yb2ibN70v72zv5LicCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTsLxmq X/VZVhx161ICt6bAz0HfMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvjcaD6t/TydbEc0iPLVoG7/6Klld5DkvM7GP6v2wBOFG+eSytKYrGZO/MILd rwL4eMnKkyLf0jjuDCSnA6yhArqLNqA8T3OELopy4tXM7a4ZD1h2STForMwb5pD0 aI0KeI57JiNOLRYsr6y7NyfRjW8/9ZjMgLtvxWO5U2qTkQYh+F7SfAD0qwdTJydn fzg/P4PaJdgajlYUBViSiVfOV9VGkl4biWLPN0Q5FoiqMLorTducLdeU6ROdviG7 KVFdVObE6SvWPTw1lECmoun1MJBQkh/eUSwgil1E+w1iZ3M0hPVobXKVLsUbapEe kd12PZe3+eH4OGay3ecAhMqsVg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:08:02 2026 by rpki-client