$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: zMiiYq4s7WME+ZCpt+DnF/yIXuCltY7a0M9A+zo6lCY= Subject key identifier: AF:3F:CC:C1:5A:07:22:80:06:F0:C6:33:C4:C1:BC:7D:FF:70:19:11 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CE5 Signing time: Sat 28 Feb 2026 18:20:20 +0000 Manifest this update: Sat 28 Feb 2026 18:20:20 +0000 Manifest next update: Sat 07 Mar 2026 18:20:20 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: dhCTKiwV76Ww4gpIlKg+A/UMPV33rN6HWWbcD41CqWI=) 2: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=) 3: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Feb 28 18:20:20 2026 GMT Not After : Mar 7 18:20:20 2026 GMT Subject: CN=69a331e4-1b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:84:f4:8b:e4:bb:44:ca:a2:18:42:4f:12: 6c:22:53:49:57:f5:e8:4f:03:d6:d8:ca:95:29:16: 12:c6:bc:8a:b2:f6:bf:17:64:5d:3b:90:12:43:6a: 14:b4:02:e8:13:5b:42:f4:58:84:8e:5c:b8:1e:c3: 12:a5:d5:61:20:cb:c3:f8:06:39:80:b6:5f:fb:8e: df:ec:e3:50:8a:ae:96:e8:01:b9:10:99:ba:c2:a0: ee:b7:a9:00:d2:4f:cb:4d:5e:a1:c8:e8:81:ba:4c: 76:1f:7d:8e:cc:45:53:a6:b5:58:a0:0a:0d:f7:b5: d4:76:ca:14:80:cf:a7:04:f8:ae:78:f0:7c:47:44: 43:55:56:5b:b6:eb:01:aa:4f:1a:f9:e8:d2:fe:98: c8:6d:d9:79:b8:89:b1:45:54:78:e7:e6:c7:e4:ed: 20:59:56:73:23:4d:5d:5d:c6:f6:d0:77:6d:15:52: 7b:71:20:eb:7d:1d:b2:e4:1d:d1:4d:06:90:af:7a: 6d:7b:ac:34:bd:4e:26:b7:06:34:49:c0:74:15:12: 40:0d:60:d5:c7:d1:26:3f:e7:66:3e:e2:d5:c2:53: 45:4d:39:d5:99:c8:fa:b8:5c:90:2b:23:6a:64:5f: 44:a2:b4:d3:ef:d3:53:cb:2b:4e:2d:7b:c4:5f:27: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:CC:C1:5A:07:22:80:06:F0:C6:33:C4:C1:BC:7D:FF:70:19:11 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:54:3a:f4:54:5e:8f:22:a9:37:96:35:8b:96:30:a6:b9:88: 01:11:d1:dd:37:46:ea:d9:ef:7e:3b:a1:01:d3:ea:74:4e:67: e5:e8:6d:5f:22:7d:0a:d1:f3:8f:5d:77:cc:99:a1:44:86:40: d0:89:20:dd:70:c3:51:4c:e5:14:e2:45:c5:1f:2c:bf:db:f0: bd:1b:2e:d2:b9:0f:3a:82:25:74:57:cc:fc:4a:17:a2:5d:f5: c7:8f:54:c0:da:f6:68:ae:1d:c8:a8:ac:30:f0:2e:32:1f:6b: f8:a8:2c:6d:be:8b:6d:e8:b1:ed:cd:7d:32:95:b5:57:e1:34: 8d:33:7c:ca:fa:2d:fa:9a:bd:2c:9a:54:b4:3e:45:9a:39:b1: d1:e0:92:5f:90:e6:9e:fb:a2:8e:11:c9:b8:15:db:96:e1:45: 31:55:ca:7c:70:cb:01:b3:a0:34:ad:0b:0c:b8:c7:04:95:b0: 7a:33:3b:08:81:80:da:96:f9:ed:a8:e2:74:08:fb:f6:c5:46: 85:6f:bc:71:e5:a7:78:31:f5:c8:fb:91:db:37:e5:d8:85:4e: 69:c9:c9:2a:5d:0f:ad:89:75:f8:6c:c7:8a:c6:37:84:cf:61: 24:65:16:30:01:74:73:88:27:67:23:1a:7b:ac:cd:fc:cc:52: e4:a6:ad:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjYwMjI4MTgyMDIwWhcNMjYwMzA3MTgyMDIwWjAYMRYwFAYD VQQDDA02OWEzMzFlNC0xYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/SE9Ivku0TKohhCTxJsIlNJV/XoTwPW2MqVKRYSxryKsva/F2RdO5ASQ2oU tALoE1tC9FiEjly4HsMSpdVhIMvD+AY5gLZf+47f7ONQiq6W6AG5EJm6wqDut6kA 0k/LTV6hyOiBukx2H32OzEVTprVYoAoN97XUdsoUgM+nBPiuePB8R0RDVVZbtusB qk8a+ejS/pjIbdl5uImxRVR45+bH5O0gWVZzI01dXcb20HdtFVJ7cSDrfR2y5B3R TQaQr3pte6w0vU4mtwY0ScB0FRJADWDVx9EmP+dmPuLVwlNFTTnVmcj6uFyQKyNq ZF9EorTT79NTyytOLXvEXycluwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8/zMFa ByKABvDGM8TBvH3/cBkRMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFQ69FRejyKpN5Y1i5YwprmIARHR3TdG6tnvfjuhAdPqdE5n5ehtXyJ9CtHz j113zJmhRIZA0Ikg3XDDUUzlFOJFxR8sv9vwvRsu0rkPOoIldFfM/EoXol31x49U wNr2aK4dyKisMPAuMh9r+Kgsbb6Lbeix7c19MpW1V+E0jTN8yvot+pq9LJpUtD5F mjmx0eCSX5DmnvuijhHJuBXbluFFMVXKfHDLAbOgNK0LDLjHBJWwejM7CIGA2pb5 7ajidAj79sVGhW+8ceWneDH1yPuR2zfl2IVOacnJKl0PrYl1+GzHisY3hM9hJGUW MAF0c4gnZyMae6zN/MxS5KatLA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:46 2026 by rpki-client