$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: AlpjJED/WRNCbGc2ZCyrsHcYzi69pegsuPTM+CYA/Q0= Subject key identifier: BD:29:E8:F6:27:D2:DF:A4:76:6C:B0:DA:C8:11:03:50:72:06:57:87 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 6A Signing time: Sun 01 Mar 2026 22:41:25 +0000 Manifest this update: Sun 01 Mar 2026 22:41:24 +0000 Manifest next update: Sun 08 Mar 2026 22:41:24 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: NxuMxgLmM3oqprGS4E7dAOG1cxa/VHlvM8blE+q/ZZg=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: HwBaR9DFvRruafibdzHZt0AKvLZeU3/E2zo82zwY8ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Mar 1 22:41:24 2026 GMT Not After : Mar 8 22:41:24 2026 GMT Subject: CN=69a4c094-e29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:14:a4:a9:01:5e:c1:7f:b0:9c:be:de:2f: 5d:7c:93:d3:f8:e4:3f:ad:7b:af:76:81:d2:fc:ec: 03:75:6a:df:32:6e:79:36:a7:3e:3b:aa:a4:ef:d3: 20:2c:70:0d:15:a9:55:33:f0:1b:57:03:6d:46:c2: e3:9f:82:fe:ad:3e:a3:ed:05:59:b3:e9:b2:51:c6: 0f:17:4f:1f:c2:91:b3:75:3a:ff:c4:46:87:cc:57: 79:5d:fc:87:6e:da:04:30:ba:e9:b1:90:79:6c:78: 61:3e:78:14:b6:11:87:c4:b8:dc:93:d0:d1:c1:15: d4:19:55:ac:46:df:1c:02:76:4d:b9:a8:e2:d4:e0: 51:39:0f:7e:8a:47:6a:6d:8f:3e:0e:9d:ba:ad:ca: 35:ce:fd:96:03:e3:25:3d:c6:12:29:6a:7c:e9:36: eb:42:c6:bb:9e:c4:13:d1:8f:97:e7:8c:b3:b5:80: e9:20:b5:cb:a0:22:b5:38:c2:fb:16:81:6e:f6:40: 97:c3:ea:57:1a:fc:d6:22:c2:cd:b5:b0:6d:26:e8: 9a:d6:70:8d:29:27:61:86:10:f5:6f:db:6c:da:58: 17:58:73:95:cd:8b:3b:76:44:7f:93:b0:30:a0:03: 11:46:21:b9:94:a2:e8:7b:f3:74:3f:d9:7f:27:46: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:29:E8:F6:27:D2:DF:A4:76:6C:B0:DA:C8:11:03:50:72:06:57:87 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:8d:4e:ac:53:f9:5f:f6:90:36:01:0c:b2:ae:ec:29:d6: a7:8f:9d:f7:18:a1:3e:70:95:a0:1f:56:6a:7d:82:e1:5c:17: 6d:32:0e:5f:38:b2:f8:dd:07:fb:2d:fc:ed:1b:71:80:2f:3f: 89:84:e3:62:d5:c1:48:5e:86:cf:5f:3c:6e:c8:36:89:16:7d: c8:ab:ff:0e:5d:64:ed:6e:3e:84:55:69:99:cb:4a:6a:d4:8e: c1:34:06:f6:41:f0:58:ae:e1:9b:ef:a4:5c:76:6e:b6:8a:ed: fb:cf:c5:dc:5c:ac:d7:1d:f9:b4:a5:f9:24:dd:e9:a9:6e:b3: fd:1e:de:c3:4f:76:73:f6:da:96:cd:de:c8:c9:53:64:01:81: 7e:cb:10:f9:d6:38:df:bf:db:5f:14:77:0f:28:6c:7b:1d:df: d8:7b:07:ef:cd:4c:4b:9d:9d:24:9f:fc:58:bf:18:16:72:bf: f8:98:0a:42:6d:b4:03:3e:19:6c:26:91:03:f5:81:bc:e7:27: f8:8d:e1:a7:8b:23:d8:f9:09:92:5c:b2:ec:c9:18:29:3a:76: b0:62:b5:24:29:1f:86:26:17:ce:f3:54:39:56:9e:7e:27:1c: ef:d1:0f:53:02:8a:71:8a:a9:e7:f2:30:0b:9e:d0:f7:23:c1: 66:2c:1a:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoNjc3RjBDRDY0QTVERTJDMUIwMjhFRDAwM0M1Njg3NEI0 OEZBMkUyMTAeFw0yNjAzMDEyMjQxMjRaFw0yNjAzMDgyMjQxMjRaMBgxFjAUBgNV BAMTDTY5YTRjMDk0LWUyOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFPhSkqQFewX+wnL7eL118k9P45D+te692gdL87AN1at8ybnk2pz47qqTv0yAs cA0VqVUz8BtXA21GwuOfgv6tPqPtBVmz6bJRxg8XTx/CkbN1Ov/ERofMV3ld/Idu 2gQwuumxkHlseGE+eBS2EYfEuNyT0NHBFdQZVaxG3xwCdk25qOLU4FE5D36KR2pt jz4OnbqtyjXO/ZYD4yU9xhIpanzpNutCxruexBPRj5fnjLO1gOkgtcugIrU4wvsW gW72QJfD6lca/NYiws21sG0m6JrWcI0pJ2GGEPVv22zaWBdYc5XNizt2RH+TsDCg AxFGIbmUouh783Q/2X8nRvepAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvSno9ifS 36R2bLDayBEDUHIGV4cwHwYDVR0jBBgwFoAUZ38M1kpd4sGwKO0APFaHS0j6LiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzU1OEM2MDk4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWjM4TTFrcGQ0c0d3S08wQVBGYUhTMGo2TGlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzU1OEM2MDk4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNH d0tPMEFQRmFIUzBqNkxpRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCNMo1OrFP5X/aQNgEMsq7sKdanj533GKE+cJWgH1ZqfYLhXBdtMg5fOLL43Qf7 LfztG3GALz+JhONi1cFIXobPXzxuyDaJFn3Iq/8OXWTtbj6EVWmZy0pq1I7BNAb2 QfBYruGb76Rcdm62iu37z8XcXKzXHfm0pfkk3empbrP9Ht7DT3Zz9tqWzd7IyVNk AYF+yxD51jjfv9tfFHcPKGx7Hd/YewfvzUxLnZ0kn/xYvxgWcr/4mApCbbQDPhls JpED9YG85yf4jeGniyPY+QmSXLLsyRgpOnawYrUkKR+GJhfO81Q5Vp5+Jxzv0Q9T Aopxiqnn8jALntD3I8FmLBp+ -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:26 2026 by rpki-client