$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: OHJpezVjfggF9vQCAslygvej+R2Xdc9WhsK/I9Zl4Kg= Subject key identifier: B6:35:C6:65:76:0F:01:6F:1B:FD:1F:B9:33:AF:B2:8E:BA:4B:3D:A4 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: E6 Signing time: Sun 01 Mar 2026 07:35:46 +0000 Manifest this update: Sun 01 Mar 2026 07:35:46 +0000 Manifest next update: Sun 08 Mar 2026 07:35:46 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: DPl8BgqCAz/R85RswObWXnQQWRLZkcya7G+6t12TMxY=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Mar 1 07:35:46 2026 GMT Not After : Mar 8 07:35:46 2026 GMT Subject: CN=69a3ec52-b99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:71:60:eb:61:93:d8:3d:04:d2:d8:b3:db: c6:76:2a:4f:a1:c8:13:01:94:12:69:f0:ce:0c:62: 09:f9:ae:a4:ee:f6:0a:17:1b:21:57:ff:1f:b8:dc: b3:de:82:38:44:11:5b:ef:73:79:80:84:29:7d:8d: 0a:db:b9:3a:0f:b7:d4:e3:d0:7e:6e:d0:45:b1:de: d6:b0:f9:5f:35:4d:49:05:db:dc:09:57:31:d7:2b: 07:e8:70:2a:3b:78:1e:ab:cf:b3:72:12:4d:29:34: e8:32:82:0a:99:df:8a:cd:11:a2:03:82:62:70:01: a0:06:5f:03:f7:3f:60:36:7c:2e:b0:e6:59:68:22: a6:5f:53:b4:83:93:2c:38:1b:41:24:91:8c:70:d9: c1:84:76:a7:c2:86:07:6e:32:d7:42:ce:e2:43:74: cc:d7:83:f6:50:c1:7c:1b:93:e9:3f:2c:30:83:72: 0f:e1:84:19:48:65:0a:1c:82:a9:16:bf:3c:11:09: 77:0b:a7:4b:d3:34:20:39:7f:68:89:d3:27:99:60: 2a:58:9e:05:83:ae:b0:73:7d:86:a1:03:f8:8a:00: 51:dd:ed:b1:41:d0:67:ee:a5:98:74:28:fb:c2:ab: 9d:d6:70:c4:02:9f:aa:d4:7e:d5:1d:91:f3:b3:73: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:35:C6:65:76:0F:01:6F:1B:FD:1F:B9:33:AF:B2:8E:BA:4B:3D:A4 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:25:b9:d1:ab:f3:a1:80:e7:73:d3:c4:7e:67:a4:5f:2c:7a: b1:4a:8f:36:3a:0a:52:d9:98:b2:29:b3:43:b6:34:6e:8c:a1: bd:97:9b:df:f7:42:e9:64:5d:cb:a2:39:90:46:04:58:91:f2: 6e:bd:d0:80:81:f4:ca:6b:05:22:11:b8:b1:29:c1:27:db:8a: 5e:27:db:9d:bb:6f:84:55:2b:ad:d9:d5:e9:e6:a0:0d:41:c6: 48:62:a7:6f:45:e2:df:3a:59:61:8e:91:8b:c8:92:ad:47:4e: 46:7b:ca:6d:e9:65:a9:55:f3:ba:b9:f5:f3:be:2a:5c:9e:7a: 1b:27:c6:40:f0:ff:c3:1a:78:d9:fb:df:19:03:2c:47:ad:10: 6e:27:c9:c0:b2:7a:0a:5a:de:f6:fe:6a:d2:da:a0:45:01:d7: e7:c7:81:43:bd:9e:e1:79:e0:55:89:e6:29:1c:aa:72:25:9b: 85:ff:9a:ec:1f:18:d3:65:2e:b8:d4:f4:62:fd:28:72:12:3d: dc:34:f9:1f:23:93:d3:76:0d:40:6e:d2:3d:a0:6c:dc:06:17: 38:55:19:84:77:81:e1:ac:3c:e9:23:27:92:6d:69:00:77:d2: 19:06:91:0c:ab:62:e3:a4:c1:ea:5d:44:98:76:64:d2:5c:ff: 69:88:c9:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjYwMzAxMDczNTQ2WhcNMjYwMzA4MDczNTQ2WjAYMRYwFAYD VQQDEw02OWEzZWM1Mi1iOTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CBxYOthk9g9BNLYs9vGdipPocgTAZQSafDODGIJ+a6k7vYKFxshV/8fuNyz 3oI4RBFb73N5gIQpfY0K27k6D7fU49B+btBFsd7WsPlfNU1JBdvcCVcx1ysH6HAq O3geq8+zchJNKTToMoIKmd+KzRGiA4JicAGgBl8D9z9gNnwusOZZaCKmX1O0g5Ms OBtBJJGMcNnBhHanwoYHbjLXQs7iQ3TM14P2UMF8G5PpPywwg3IP4YQZSGUKHIKp Fr88EQl3C6dL0zQgOX9oidMnmWAqWJ4Fg66wc32GoQP4igBR3e2xQdBn7qWYdCj7 wqud1nDEAp+q1H7VHZHzs3Na4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLY1xmV2 DwFvG/0fuTOvso66Sz2kMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOCW50avzoYDnc9PEfmekXyx6sUqPNjoKUtmYsimzQ7Y0boyhvZeb3/dC6WRd y6I5kEYEWJHybr3QgIH0ymsFIhG4sSnBJ9uKXifbnbtvhFUrrdnV6eagDUHGSGKn b0Xi3zpZYY6Ri8iSrUdORnvKbellqVXzurn1874qXJ56GyfGQPD/wxp42fvfGQMs R60QbifJwLJ6Clre9v5q0tqgRQHX58eBQ72e4XngVYnmKRyqciWbhf+a7B8Y02Uu uNT0Yv0ochI93DT5HyOT03YNQG7SPaBs3AYXOFUZhHeB4aw86SMnkm1pAHfSGQaR DKti46TB6l1EmHZk0lz/aYjJ3Q== -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:13 2026 by rpki-client