$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: 5vetXceZ//jmnQlhCdFkqFwUKBy3uW7B2HW1CtK6ENU= Subject key identifier: 66:E8:A6:56:AA:F4:24:79:5F:3D:7B:BE:DC:52:92:28:E3:A7:0A:01 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 095E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 0944 Signing time: Mon 02 Mar 2026 00:39:34 +0000 Manifest this update: Mon 02 Mar 2026 00:39:32 +0000 Manifest next update: Mon 09 Mar 2026 00:39:32 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: kDFYMdZ75TvElE+Rg1zwAYFaDvirIbnhYuexq5+a6xw=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: PDPdfJs3Sp/L4O6BvH4/f/PfyDghykuDm6tMTYKRkIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2398 (0x95e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Mar 2 00:39:32 2026 GMT Not After : Mar 9 00:39:32 2026 GMT Subject: CN=69a4dc45-f07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f8:fe:f9:0a:21:88:30:e5:24:fe:e0:e0:98: 26:7f:9c:8f:e8:81:62:e6:6b:3a:79:51:a5:3a:fa: 64:4e:44:da:d9:af:38:8d:e7:35:ab:ba:15:09:9f: 52:29:00:58:73:bc:2a:d6:db:a5:85:96:40:63:ca: 1d:2d:39:c4:82:1a:dc:53:9c:c1:dc:c4:84:35:2f: 9a:2e:41:ba:b1:69:97:34:53:a1:7c:16:99:c9:8a: 5b:b9:5f:10:ed:c7:96:8b:c1:99:46:80:9f:a5:ec: 98:ab:92:09:f1:83:a2:39:be:e1:ce:f0:e1:62:7e: 72:c8:84:38:dc:10:02:f9:a1:57:6c:58:f2:c7:cf: d2:01:92:48:f7:da:76:ef:0d:a3:9e:f3:63:e8:9a: d4:26:1e:d0:a2:0d:7a:6c:9c:14:39:05:a3:00:d5: 61:e2:12:5f:a6:42:fc:67:29:51:4c:c6:3f:a4:7a: 07:cc:82:af:ac:ef:f5:f8:4b:08:c3:18:02:d8:51: 94:95:61:16:6b:98:d1:60:e1:76:68:df:16:ba:55: 10:f2:c4:5c:cc:45:a6:93:f6:e3:d6:02:68:a6:c6: e0:63:1b:8b:0e:dd:03:5a:d9:80:74:30:46:0e:22: 60:eb:83:69:52:c8:5a:a7:a8:c1:6c:34:ae:e1:9e: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E8:A6:56:AA:F4:24:79:5F:3D:7B:BE:DC:52:92:28:E3:A7:0A:01 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b5:62:cd:c5:20:c5:b7:68:f8:02:b5:88:f8:4f:49:29:3d: d9:14:c4:d0:a0:76:8c:74:28:45:f3:6d:cb:4f:6b:d4:39:dc: a7:67:c6:67:ed:48:dc:ac:2d:b0:9c:fa:3f:e2:85:28:7e:bd: b7:51:33:72:90:d2:97:ca:44:d4:1c:cb:85:11:c2:7a:0b:05: bf:8d:1e:b3:f1:8e:81:b0:a7:82:98:88:c3:e9:2b:77:44:f6: cc:f7:7e:cb:43:c1:d0:d4:ff:b2:44:56:41:98:dc:94:a9:0d: b0:c2:77:14:a0:d6:55:e6:67:01:54:c8:5d:84:f3:ef:30:9b: d4:4a:84:57:e3:57:07:4b:bd:84:3e:68:9a:66:68:73:c3:d5: 44:b5:b9:7e:5f:7f:8f:7d:55:8f:92:d9:6c:e9:20:e7:dc:0d: bd:a5:ff:98:e3:5c:74:d3:ea:ae:a9:d6:3f:42:aa:b5:a5:2b: af:0c:0b:4b:f4:e1:09:00:38:2f:f1:0c:e9:60:4e:76:e1:07: ad:0c:0d:0a:f0:c5:a9:77:2c:f4:cf:d5:bb:a3:ab:1b:2c:49: 96:c9:28:9c:bf:92:de:1b:a4:a9:70:54:21:2b:c7:1a:25:9a: ea:60:d8:51:c2:44:fd:a3:39:74:95:eb:c1:7d:0a:bb:02:31: 5a:81:65:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjYwMzAyMDAzOTMyWhcNMjYwMzA5MDAzOTMyWjAYMRYwFAYD VQQDEw02OWE0ZGM0NS1mMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vj++QohiDDlJP7g4Jgmf5yP6IFi5ms6eVGlOvpkTkTa2a84jec1q7oVCZ9S KQBYc7wq1tulhZZAY8odLTnEghrcU5zB3MSENS+aLkG6sWmXNFOhfBaZyYpbuV8Q 7ceWi8GZRoCfpeyYq5IJ8YOiOb7hzvDhYn5yyIQ43BAC+aFXbFjyx8/SAZJI99p2 7w2jnvNj6JrUJh7Qog16bJwUOQWjANVh4hJfpkL8ZylRTMY/pHoHzIKvrO/1+EsI wxgC2FGUlWEWa5jRYOF2aN8WulUQ8sRczEWmk/bj1gJopsbgYxuLDt0DWtmAdDBG DiJg64NpUshap6jBbDSu4Z7A4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGboplaq 9CR5Xz17vtxSkijjpwoBMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFbVizcUgxbdo+AK1iPhPSSk92RTE0KB2jHQoRfNty09r1Dncp2fGZ+1I3Kwt sJz6P+KFKH69t1EzcpDSl8pE1BzLhRHCegsFv40es/GOgbCngpiIw+krd0T2zPd+ y0PB0NT/skRWQZjclKkNsMJ3FKDWVeZnAVTIXYTz7zCb1EqEV+NXB0u9hD5ommZo c8PVRLW5fl9/j31Vj5LZbOkg59wNvaX/mONcdNPqrqnWP0KqtaUrrwwLS/ThCQA4 L/EM6WBOduEHrQwNCvDFqXcs9M/Vu6OrGyxJlskonL+S3hukqXBUISvHGiWa6mDY UcJE/aM5dJXrwX0KuwIxWoFlyw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:53 2026 by rpki-client