$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: CKhxMaCkEmmnXW75z5FK9HKQdsK9WRbZTY6iJEWHS6s= Subject key identifier: 21:4B:37:DE:BA:E4:AB:7A:8B:32:28:31:4B:5A:49:74:0E:48:F8:53 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 0958 Signing time: Sat 28 Feb 2026 20:36:17 +0000 Manifest this update: Sat 28 Feb 2026 20:36:16 +0000 Manifest next update: Sat 07 Mar 2026 20:36:16 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: cia7biplMkQN3JK3w2+AlS+64NZhrWCaPUsWYzGhHrE=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Feb 28 20:36:16 2026 GMT Not After : Mar 7 20:36:16 2026 GMT Subject: CN=69a351c1-33ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:09:58:d3:98:93:32:7b:ce:c6:7e:2f:83: ad:1d:25:a0:24:59:c4:df:19:75:c7:2a:56:ee:0f: 25:58:92:ac:7b:b7:d9:c5:bb:09:a4:df:9f:b6:e0: 16:0c:f9:a0:bb:60:45:25:34:04:b0:35:82:52:3b: 8a:7c:7e:1f:20:17:fe:e1:c0:71:92:63:b9:9a:6b: 62:29:bb:db:d0:eb:8d:df:5a:11:fc:b3:36:d6:ef: 1e:33:eb:e0:a9:50:85:5b:8e:6f:b0:41:16:5c:97: 25:33:15:22:77:85:28:9a:ed:16:47:74:20:f9:25: e2:af:a0:3e:2b:f3:3a:bb:9b:62:88:4b:9b:6b:f2: 0f:56:bb:f4:15:6d:ba:82:dc:49:ce:5a:dc:82:31: 90:9f:a4:66:57:8f:0f:c9:e3:35:60:f7:06:5c:31: 54:1e:f0:fb:22:26:dd:8b:08:51:5d:1b:08:1b:b4: 47:40:a8:cf:31:97:36:85:0d:8b:07:04:77:50:f8: 8d:53:40:b4:73:88:c6:94:12:e8:27:e3:49:23:3f: 1e:e8:2e:66:b2:bb:1a:0a:a6:a4:44:58:5b:03:d8: 82:2e:4d:13:96:84:05:6a:52:93:cc:b9:9f:d6:50: fa:b9:9b:b2:60:ec:a7:99:36:b8:ce:d1:b1:a1:51: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:37:DE:BA:E4:AB:7A:8B:32:28:31:4B:5A:49:74:0E:48:F8:53 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fe:86:09:86:04:18:69:74:6e:27:54:76:c9:17:1c:76:65: 20:7f:3f:e4:d7:cf:27:2b:f5:41:1b:ee:62:f2:ca:a3:69:e8: 84:25:8f:a8:e6:d7:d1:58:f9:99:57:35:2b:fa:8a:99:ad:ef: 38:2e:f6:a5:59:c1:61:01:4d:2d:ac:de:33:a9:7f:82:62:58: b1:4f:8d:0f:5c:5f:57:6a:07:c4:85:5b:f4:47:78:1c:27:e2: 62:df:4b:59:e7:da:aa:ff:6c:8a:c1:c9:b4:f2:9c:8e:a4:6a: 5d:af:29:aa:35:a7:61:f5:0d:82:c9:cf:f8:8e:b8:79:d0:34: f3:67:d6:a1:0c:19:8c:62:12:98:02:e3:12:31:21:bb:b7:4f: 75:3a:31:3c:a7:b4:e4:ef:76:9d:8f:ae:ed:97:8e:e2:e9:a5: e2:71:94:6e:64:81:33:f7:b9:61:22:90:b3:03:59:5f:9e:f1: 0e:27:a2:08:6f:4f:d7:9b:01:c3:82:15:78:0f:12:0c:28:be: 84:c8:c9:1d:b0:fa:75:ac:e5:ed:a6:69:dd:47:78:ea:31:ec: 7e:96:b5:ab:f1:fd:9f:86:41:30:02:f7:f3:d9:13:81:44:8a: 39:1a:04:0c:66:e7:a6:d8:6a:95:a0:66:05:08:02:18:f0:b2: d9:35:b8:24 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNjAyMjgyMDM2MTZaFw0yNjAzMDcyMDM2MTZaMBgxFjAUBgNV BAMMDTY5YTM1MWMxLTMzZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpJAlY05iTMnvOxn4vg60dJaAkWcTfGXXHKlbuDyVYkqx7t9nFuwmk35+24BYM +aC7YEUlNASwNYJSO4p8fh8gF/7hwHGSY7maa2Ipu9vQ643fWhH8szbW7x4z6+Cp UIVbjm+wQRZclyUzFSJ3hSia7RZHdCD5JeKvoD4r8zq7m2KIS5tr8g9Wu/QVbbqC 3EnOWtyCMZCfpGZXjw/J4zVg9wZcMVQe8PsiJt2LCFFdGwgbtEdAqM8xlzaFDYsH BHdQ+I1TQLRziMaUEugn40kjPx7oLmayuxoKpqREWFsD2IIuTROWhAVqUpPMuZ/W UPq5m7Jg7KeZNrjO0bGhURqpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIUs33rrk q3qLMigxS1pJdA5I+FMwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCp/oYJhgQYaXRuJ1R2yRccdmUgfz/k188nK/VBG+5i8sqjaeiEJY+o5tfRWPmZ VzUr+oqZre84LvalWcFhAU0trN4zqX+CYlixT40PXF9XagfEhVv0R3gcJ+Ji30tZ 59qq/2yKwcm08pyOpGpdrymqNadh9Q2Cyc/4jrh50DTzZ9ahDBmMYhKYAuMSMSG7 t091OjE8p7Tk73adj67tl47i6aXicZRuZIEz97lhIpCzA1lfnvEOJ6IIb0/XmwHD ghV4DxIMKL6EyMkdsPp1rOXtpmndR3jqMex+lrWr8f2fhkEwAvfz2ROBRIo5GgQM Zuem2GqVoGYFCAIY8LLZNbgk -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:09 2026 by rpki-client