$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: LrJkNEM3MrH11lapbTRireXqBXe0tPw1OoVzDvFPBLk= Subject key identifier: AA:D8:46:AF:44:B2:56:3B:1A:CE:52:DA:33:0E:C0:C8:34:6C:7B:8A Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 74 Signing time: Sun 01 Mar 2026 09:11:53 +0000 Manifest this update: Sun 01 Mar 2026 09:11:52 +0000 Manifest next update: Sun 08 Mar 2026 09:11:52 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: g2uvDJ0C4TgvSHv6O7iMoHxK/DDxEi17I+aAQG8UNH0=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: M6rkGSeZPUm0wxx29VHDM0R87EJ/m/X/nduKyOdgs7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Mar 1 09:11:52 2026 GMT Not After : Mar 8 09:11:52 2026 GMT Subject: CN=69a402d9-e00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:f6:d5:79:cc:0a:aa:ca:87:e3:0d:32:60: bc:20:51:a9:06:32:ce:2e:c0:61:98:c8:f9:4e:2a: c4:ae:29:9e:be:dc:14:aa:94:b2:8b:d6:75:0a:52: 6b:20:16:c7:9e:96:d2:73:3b:02:97:7f:52:81:3d: ed:12:d9:52:6b:e9:e0:e3:84:16:fd:ce:ed:69:a2: 08:97:86:7d:19:5f:05:10:66:3b:21:0e:f4:bb:29: 30:20:ea:56:56:f6:21:a0:39:77:81:67:d5:7c:76: 9d:a0:a6:a7:8a:db:cf:6d:4a:18:9e:5b:bc:60:c9: fb:42:33:03:77:0b:cf:93:86:0d:d9:03:e1:43:cd: 44:01:be:f2:fd:cc:16:8c:2d:7a:6c:bb:6f:c3:24: db:d3:e0:04:4f:08:37:1e:6a:5b:85:d4:73:44:57: 67:d1:1d:1c:ef:ed:cc:c6:1c:17:dd:6a:b3:62:87: 53:75:4c:97:a6:4e:7d:cc:55:69:40:ab:9c:ba:13: e0:af:ab:0c:d9:d9:ef:f2:cf:1e:03:be:76:dc:79: 69:a1:51:b0:64:70:cf:79:6c:ad:b8:3f:82:75:b4: 7b:a5:01:36:d3:cf:c4:64:e7:4b:a5:18:ba:d0:9e: f4:e0:22:94:1c:63:0a:7f:94:dd:39:98:48:ec:20: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:46:AF:44:B2:56:3B:1A:CE:52:DA:33:0E:C0:C8:34:6C:7B:8A X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3c:00:9c:48:b1:02:73:48:57:23:a5:f7:a6:82:50:4c:39: fa:13:05:07:dc:ee:f8:e5:54:a8:ae:1c:97:a0:33:03:54:8e: 75:d1:de:74:5f:8e:62:6a:80:6f:59:6d:0d:c8:7f:74:38:7e: 46:a3:45:91:ed:5e:5b:bc:9a:55:d0:46:44:51:92:55:2f:b7: 10:80:46:a0:47:cc:e8:8a:af:04:db:20:cd:d1:3b:87:73:8f: 6c:f1:be:54:a6:bd:15:9d:a3:c2:6c:25:e8:85:50:51:43:52: 22:ac:dd:2b:da:0e:c1:e9:d7:a9:81:29:b8:e6:ff:e9:df:2a: 87:b7:37:e6:2a:c8:7c:73:97:bb:7d:69:33:76:a0:b8:62:40: 3e:08:de:4e:c7:fc:39:d6:90:d4:21:10:14:4e:8f:5d:07:c5: be:e7:35:55:4b:c1:fe:cd:dc:e9:d0:3b:36:81:8c:d4:ca:07: fc:91:67:af:0a:3d:00:71:2d:83:69:7f:86:15:dc:b4:25:fb: 15:8c:01:f1:2e:1b:49:dc:e4:b7:22:15:6c:fa:b3:6d:02:c2: 18:1d:a5:c7:9e:c5:c7:a2:72:d2:0d:b2:31:6e:e8:45:a0:83: 7d:3f:9d:8d:df:d5:5c:42:07:23:31:5f:69:bf:e6:da:69:32: bf:83:fb:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUVENTExMC8GA1UEBRMoNjY3ODE3OUE1REE4RTVFOTFFN0Q5RERGQzlGRjVCMzU0 M0VENEQ3NDAeFw0yNjAzMDEwOTExNTJaFw0yNjAzMDgwOTExNTJaMBgxFjAUBgNV BAMTDTY5YTQwMmQ5LWUwMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/2/bVecwKqsqH4w0yYLwgUakGMs4uwGGYyPlOKsSuKZ6+3BSqlLKL1nUKUmsg FseeltJzOwKXf1KBPe0S2VJr6eDjhBb9zu1pogiXhn0ZXwUQZjshDvS7KTAg6lZW 9iGgOXeBZ9V8dp2gpqeK289tShieW7xgyftCMwN3C8+Thg3ZA+FDzUQBvvL9zBaM LXpsu2/DJNvT4ARPCDcealuF1HNEV2fRHRzv7czGHBfdarNih1N1TJemTn3MVWlA q5y6E+CvqwzZ2e/yzx4DvnbceWmhUbBkcM95bK24P4J1tHulATbTz8Rk50ulGLrQ nvTgIpQcYwp/lN05mEjsIGd9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqthGr0Sy VjsazlLaMw7AyDRse4owHwYDVR0jBBgwFoAUZngXml2o5ekefZ3fyf9bNUPtTXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRUQ1L0FGQTQ2NDY0Njcy RjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5nWG1sMm81ZWtlZlozZnlmOWJOVVB0VFhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RUQ1L0FGQTQ2NDY0NjcyRjExRjBCNDhEQjA3M0M0RjlBRTAyL1puZ1htbDJvNWVr ZWZaM2Z5ZjliTlVQdFRYUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/PACcSLECc0hXI6X3poJQTDn6EwUH3O745VSorhyXoDMDVI510d50X45iaoBv WW0NyH90OH5Go0WR7V5bvJpV0EZEUZJVL7cQgEagR8zoiq8E2yDN0TuHc49s8b5U pr0VnaPCbCXohVBRQ1IirN0r2g7B6depgSm45v/p3yqHtzfmKsh8c5e7fWkzdqC4 YkA+CN5Ox/w51pDUIRAUTo9dB8W+5zVVS8H+zdzp0Ds2gYzUygf8kWevCj0AcS2D aX+GFdy0JfsVjAHxLhtJ3OS3IhVs+rNtAsIYHaXHnsXHonLSDbIxbuhFoIN9P52N 39VcQgcjMV9pv+baaTK/g/to -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:19 2026 by rpki-client