$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: 7//JPY1hZ+ApKduTIIVYnNleDMmoZ6TQn7gM2wJEXXc= Subject key identifier: C7:1C:03:E0:B7:BF:AB:2C:E5:4E:1B:10:66:48:7D:D2:7F:9C:D5:EC Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 0207 Signing time: Sun 01 Mar 2026 22:27:52 +0000 Manifest this update: Sun 01 Mar 2026 22:27:52 +0000 Manifest next update: Sun 08 Mar 2026 22:27:52 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: /MTvydlsX8S3ePtQ1Hgko4q49eCZo5tIZxobM/czduo=) 2: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) 3: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Mar 1 22:27:52 2026 GMT Not After : Mar 8 22:27:52 2026 GMT Subject: CN=69a4bd68-86d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:3e:8b:c8:88:7d:7e:81:c8:d7:c1:57:cc: 93:ed:d2:f4:93:f7:05:6d:cd:86:d6:fb:8e:b2:28: 3f:d5:3d:6d:8f:d3:e7:c8:a8:e6:29:f0:24:eb:21: 01:cc:ad:46:5c:ed:e4:6c:0e:66:77:37:a5:da:8a: fd:11:ea:49:05:6d:7b:72:46:03:bd:fc:ce:bb:2e: b3:0e:95:9a:9e:06:5b:9a:77:f9:02:f4:8f:95:21: 7a:0d:dc:5c:3b:58:30:ee:45:0c:4e:c3:3f:08:cb: 6c:1a:b4:d1:82:77:dd:e9:f9:06:6b:82:d1:56:dc: 35:eb:76:97:0d:ac:17:b8:4e:db:7e:6f:78:3e:48: 7c:8d:11:ac:c6:cd:97:f6:46:6f:46:f2:e8:5e:0a: 6a:8d:e9:82:54:6d:f9:41:80:37:7d:35:6b:c1:cd: 5b:b6:ac:71:6d:b8:8c:2b:21:2a:2e:f1:90:cc:d0: f0:3b:4a:13:58:57:5e:65:05:70:30:60:e2:bf:50: c8:61:40:6a:8f:b8:7c:b4:1e:47:53:55:12:04:1e: 3a:ce:02:f7:3b:7c:c7:70:52:58:26:a6:8c:c7:23: ae:5c:6a:85:b7:85:c1:5f:50:4e:4c:20:64:b3:61: f4:e0:75:4f:7a:5f:0e:8a:6d:0a:99:42:32:94:51: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:03:E0:B7:BF:AB:2C:E5:4E:1B:10:66:48:7D:D2:7F:9C:D5:EC X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:36:e3:ed:10:69:97:f3:e6:35:26:45:5b:55:09:e5:8e: 28:4a:b0:7a:13:8b:84:e0:70:9f:2b:b2:81:b0:55:ab:d4:32: 83:c5:75:d4:29:de:3d:21:1f:f0:6f:92:71:2b:03:74:d5:42: c7:82:97:2e:32:56:d6:2e:a2:f8:b4:00:db:ee:d9:0a:49:52: 9b:2b:86:e4:e1:c1:af:9d:5b:71:27:c7:30:d6:fe:9c:f5:97: 10:5e:99:53:ed:78:25:46:a3:25:5f:52:8b:46:13:b7:52:f9: e2:6f:b5:52:be:62:04:ff:cf:e3:a8:48:f8:5f:3a:84:05:93: 8b:66:90:8d:ff:d4:51:98:af:53:7c:30:f1:c5:24:5a:0d:86: 96:a9:57:42:54:b1:3c:90:91:97:1b:bc:2b:99:17:37:ca:b2: 17:15:3b:56:f2:40:73:7b:f1:85:66:3b:11:c1:cb:35:d3:c6: d9:8e:45:41:c3:03:0f:06:76:32:be:58:e5:d4:d5:6d:fc:58: cf:1e:58:65:5b:56:76:64:91:36:d0:2d:25:8c:98:ef:0f:18: 1a:60:ef:37:e8:74:06:0d:de:19:1b:c3:04:5e:4c:7d:bf:8a: 15:0a:15:0a:ba:14:32:ac:34:c0:eb:a2:8a:6c:8e:3c:bd:90: 0b:79:d5:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYwMzAxMjIyNzUyWhcNMjYwMzA4MjIyNzUyWjAYMRYwFAYD VQQDEw02OWE0YmQ2OC04NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kQ+i8iIfX6ByNfBV8yT7dL0k/cFbc2G1vuOsig/1T1tj9PnyKjmKfAk6yEB zK1GXO3kbA5mdzel2or9EepJBW17ckYDvfzOuy6zDpWangZbmnf5AvSPlSF6Ddxc O1gw7kUMTsM/CMtsGrTRgnfd6fkGa4LRVtw163aXDawXuE7bfm94Pkh8jRGsxs2X 9kZvRvLoXgpqjemCVG35QYA3fTVrwc1btqxxbbiMKyEqLvGQzNDwO0oTWFdeZQVw MGDiv1DIYUBqj7h8tB5HU1USBB46zgL3O3zHcFJYJqaMxyOuXGqFt4XBX1BOTCBk s2H04HVPel8Oim0KmUIylFGs9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMccA+C3 v6ss5U4bEGZIfdJ/nNXsMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYc24+0QaZfz5jUmRVtVCeWOKEqwehOLhOBwnyuygbBVq9Qyg8V11CnePSEf 8G+ScSsDdNVCx4KXLjJW1i6i+LQA2+7ZCklSmyuG5OHBr51bcSfHMNb+nPWXEF6Z U+14JUajJV9Si0YTt1L54m+1Ur5iBP/P46hI+F86hAWTi2aQjf/UUZivU3ww8cUk Wg2GlqlXQlSxPJCRlxu8K5kXN8qyFxU7VvJAc3vxhWY7EcHLNdPG2Y5FQcMDDwZ2 Mr5Y5dTVbfxYzx5YZVtWdmSRNtAtJYyY7w8YGmDvN+h0Bg3eGRvDBF5Mfb+KFQoV CroUMqw0wOuiimyOPL2QC3nVIg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:08 2026 by rpki-client