$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: dXATcaJUt8BPDMecACgde9gwgtSz5OkJSSjQXQQOKoY= Subject key identifier: F9:77:4C:70:E8:A2:23:08:DF:51:EE:FA:00:3B:89:65:43:36:FE:54 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 096A Signing time: Sat 28 Feb 2026 20:23:14 +0000 Manifest this update: Sat 28 Feb 2026 20:23:13 +0000 Manifest next update: Sat 07 Mar 2026 20:23:13 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: vdZhTNci6a5a3Q+zTnK04eqUDwAI9y/bZwRl/6C0l3w=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: gtW0T63Z+cyhIr7vbr9l7KyLrM/pqhz2h7OhpzuAs3U=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: 7Rz4+k6mAxaMGjURB8/55D4QBQngSJ+avXX3hTaAO80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Feb 28 20:23:13 2026 GMT Not After : Mar 7 20:23:13 2026 GMT Subject: CN=69a34eb2-f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:f4:3e:07:4b:df:5e:c1:ff:d0:59:d2:d9: d4:76:48:63:5a:2c:a3:b6:1c:47:2b:f7:b0:41:fb: 4b:fc:ef:9e:b7:4a:9c:25:cd:b1:3c:59:b2:77:20: 25:a8:90:0b:8e:5b:b6:52:64:0f:9d:c1:84:f3:f4: f5:44:71:64:b8:b6:ae:98:28:43:9f:b3:25:28:8a: d2:9f:7b:bb:1b:ef:3f:35:58:bc:56:a6:09:3e:cb: 28:9d:ad:9b:89:ae:68:c0:c2:ea:04:0c:fb:e5:93: 45:03:28:be:08:49:e0:39:39:a2:9e:85:48:4b:85: 54:55:1e:7d:95:a8:39:a1:51:e0:44:b8:cd:2c:b1: e4:ec:00:9b:8f:3f:d5:64:07:e0:50:56:aa:b3:70: 22:d1:9b:a2:eb:33:3a:f6:7b:0d:74:d5:6c:8b:74: e6:bd:a4:36:9b:24:72:ed:21:69:e8:71:90:b6:ae: a0:15:5b:90:9d:87:3d:91:07:00:63:73:25:09:6e: cf:ea:7b:94:31:71:18:a9:bb:9e:30:7a:24:9d:04: 2b:b8:2f:6b:3d:ea:fa:cb:35:da:c0:b3:0d:25:73: ba:05:58:6b:62:aa:fb:5b:90:bf:00:01:64:02:a0: d3:03:e4:b2:72:17:40:5f:83:f5:a6:00:a0:e8:57: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:4C:70:E8:A2:23:08:DF:51:EE:FA:00:3B:89:65:43:36:FE:54 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:c3:6f:bf:7e:2c:68:35:1e:7e:fc:89:f0:cc:86:ff:27: 83:d2:dc:ef:74:27:44:2b:98:80:07:1c:a2:23:bf:40:db:b6: c2:8a:39:8e:3e:b4:26:7c:d0:14:17:b7:2a:3e:b0:4b:2e:5a: 30:b3:0d:b5:40:8d:8d:50:b2:e3:90:b4:03:b7:ef:7c:0f:ca: 4e:de:21:48:3c:3b:71:32:0d:ae:f3:de:68:b7:f0:5c:3e:28: 76:c2:e1:84:21:d7:95:ed:5a:a6:70:b6:6a:16:f5:06:52:c1: 1f:fd:18:28:c2:12:ec:94:a2:f6:f9:77:b1:a0:2d:b7:80:19: 27:03:32:5b:7f:4d:5d:86:80:a4:24:f2:41:3e:05:e0:ee:07: eb:5f:9e:b8:89:28:20:00:10:11:19:fb:fd:2a:a1:c0:92:05: 8e:d2:a9:cc:3e:d1:06:64:6c:9b:98:dc:93:91:60:81:8e:6f: 5d:b4:3c:a3:1a:10:1f:34:96:27:29:9b:4a:0f:65:cd:49:ab: 0f:2f:28:1c:40:63:1c:84:0b:5c:9c:db:09:35:71:6a:9a:f8: a0:d4:a3:eb:a4:56:32:57:c9:1e:48:05:b8:37:41:6f:2b:7e: 20:73:71:39:e3:23:b3:10:1a:3d:f9:ec:dc:72:0e:0b:53:32: 76:30:43:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwMjI4MjAyMzEzWhcNMjYwMzA3MjAyMzEzWjAYMRYwFAYD VQQDDA02OWEzNGViMi1mNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsX0PgdL317B/9BZ0tnUdkhjWiyjthxHK/ewQftL/O+et0qcJc2xPFmydyAl qJALjlu2UmQPncGE8/T1RHFkuLaumChDn7MlKIrSn3u7G+8/NVi8VqYJPssona2b ia5owMLqBAz75ZNFAyi+CEngOTminoVIS4VUVR59lag5oVHgRLjNLLHk7ACbjz/V ZAfgUFaqs3Ai0Zui6zM69nsNdNVsi3TmvaQ2myRy7SFp6HGQtq6gFVuQnYc9kQcA Y3MlCW7P6nuUMXEYqbueMHoknQQruC9rPer6yzXawLMNJXO6BVhrYqr7W5C/AAFk AqDTA+SychdAX4P1pgCg6FdS3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPl3THDo oiMI31Hu+gA7iWVDNv5UMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWPDb79+LGg1Hn78ifDMhv8ng9Lc73QnRCuYgAccoiO/QNu2woo5jj60JnzQ FBe3Kj6wSy5aMLMNtUCNjVCy45C0A7fvfA/KTt4hSDw7cTINrvPeaLfwXD4odsLh hCHXle1apnC2ahb1BlLBH/0YKMIS7JSi9vl3saAtt4AZJwMyW39NXYaApCTyQT4F 4O4H61+euIkoIAAQERn7/SqhwJIFjtKpzD7RBmRsm5jck5FggY5vXbQ8oxoQHzSW JymbSg9lzUmrDy8oHEBjHIQLXJzbCTVxapr4oNSj66RWMlfJHkgFuDdBbyt+IHNx OeMjsxAaPfns3HIOC1MydjBDmA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:59 2026 by rpki-client