$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: YrEZNoMjhG0qTLWeXuwaAUU19VjunHahTQdGNHRrBLs= Subject key identifier: 6B:AA:A7:51:4C:76:91:B0:E4:9F:7D:AD:E5:A4:2B:4F:65:EC:AA:56 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 60 Signing time: Mon 02 Mar 2026 15:02:51 +0000 Manifest this update: Mon 02 Mar 2026 15:02:50 +0000 Manifest next update: Mon 09 Mar 2026 15:02:50 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: I2mh5QvtvcJTMmko/GZOGyd0Yqv7+4L/zKM1E+UVsvg=) 2: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) 3: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Mar 2 15:02:50 2026 GMT Not After : Mar 9 15:02:50 2026 GMT Subject: CN=69a5a69b-d2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:ca:c8:56:51:54:b7:da:62:e5:1a:1e:6d: 86:95:f3:1d:35:1d:ef:ff:36:e0:ef:7b:56:d0:1d: e1:54:f2:df:25:d7:64:f5:d0:da:76:85:6c:13:7d: 75:a8:7d:c5:d0:fc:2d:2a:91:fb:6a:79:6c:7a:85: 65:d9:d4:f7:0f:58:55:c3:3a:a1:14:e3:ae:e5:34: 68:df:5b:55:97:3f:94:7e:9c:36:32:cc:83:66:d5: ca:cb:a5:4e:12:ae:3c:7a:0f:3d:75:9f:a6:3e:63: 5a:51:7f:03:b1:da:ff:64:23:cc:c1:c9:f1:4d:5b: f2:86:8c:38:a6:fe:90:f2:82:d4:59:4d:91:8d:da: 1d:b2:25:03:1d:b0:80:d5:5d:d7:27:12:1c:e4:28: 98:3d:7f:9f:72:25:97:53:0a:36:4b:ae:97:90:f2: 1b:2a:d0:30:f5:d1:9e:18:74:9b:31:9e:2c:6e:54: aa:67:ee:ba:5c:19:91:54:00:9a:45:60:8f:eb:e9: 4d:37:36:91:22:78:5d:d2:22:bc:b6:8d:9e:80:ec: 20:38:c4:58:80:18:b8:fd:54:b5:49:e9:66:cb:a3: 24:71:45:81:ca:8a:fa:a6:bf:cc:61:26:d3:5c:7f: 8d:2f:0b:bd:3d:f8:9d:6d:27:c0:2d:84:bb:90:6d: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AA:A7:51:4C:76:91:B0:E4:9F:7D:AD:E5:A4:2B:4F:65:EC:AA:56 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:07:33:4b:93:9e:6e:84:85:5a:fd:cc:d1:e6:2c:a4:9c: a5:fd:20:b4:db:b5:95:2a:f5:35:2b:24:33:fc:2e:1a:5c:9d: 90:92:42:6e:22:4f:5d:fc:1a:1a:52:84:b4:0a:32:85:b1:34: 39:f0:dd:7b:33:28:65:17:1f:67:f9:50:b0:80:3b:aa:4d:bd: b8:b5:9b:be:94:2a:59:3d:f8:03:22:21:55:d9:2b:49:7a:f8: ea:f9:b6:e2:b1:c1:da:57:fd:37:6b:db:43:28:22:6f:97:44: 3c:d6:05:f4:be:43:c5:dc:0f:79:7c:91:15:9e:99:e8:ea:6e: 5e:05:bd:5d:e4:ab:ad:2a:94:40:bf:86:15:f1:7d:29:31:b5: f0:63:bf:bf:35:8c:ee:a2:7a:fe:c1:9e:f3:ca:f8:14:5c:d0: e9:73:fa:bb:69:9c:3c:15:8b:44:e0:d8:bc:61:41:d4:6c:51: ee:16:f2:67:49:b4:e4:fd:0a:bf:2d:a6:43:8a:40:88:67:6a: 33:d5:24:ec:21:9e:83:f6:2f:86:84:10:96:c5:d9:42:a2:bb: 39:41:02:02:70:e6:ff:89:6c:a0:e4:5f:44:31:ec:0c:2c:ba: 1b:ad:59:1d:45:19:c5:21:b5:6a:0d:20:11:3c:aa:0e:a9:12: 96:bc:fd:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNjAzMDIxNTAyNTBaFw0yNjAzMDkxNTAyNTBaMBgxFjAUBgNV BAMTDTY5YTVhNjliLWQyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvDsrIVlFUt9pi5RoebYaV8x01He//NuDve1bQHeFU8t8l12T10Np2hWwTfXWo fcXQ/C0qkftqeWx6hWXZ1PcPWFXDOqEU467lNGjfW1WXP5R+nDYyzINm1crLpU4S rjx6Dz11n6Y+Y1pRfwOx2v9kI8zByfFNW/KGjDim/pDygtRZTZGN2h2yJQMdsIDV XdcnEhzkKJg9f59yJZdTCjZLrpeQ8hsq0DD10Z4YdJsxnixuVKpn7rpcGZFUAJpF YI/r6U03NpEieF3SIry2jZ6A7CA4xFiAGLj9VLVJ6WbLoyRxRYHKivqmv8xhJtNc f40vC709+J1tJ8AthLuQbZDnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUa6qnUUx2 kbDkn32t5aQrT2XsqlYwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwCgczS5OeboSFWv3M0eYspJyl/SC027WVKvU1KyQz/C4aXJ2QkkJuIk9d/Boa UoS0CjKFsTQ58N17MyhlFx9n+VCwgDuqTb24tZu+lCpZPfgDIiFV2StJevjq+bbi scHaV/03a9tDKCJvl0Q81gX0vkPF3A95fJEVnpno6m5eBb1d5KutKpRAv4YV8X0p MbXwY7+/NYzuonr+wZ7zyvgUXNDpc/q7aZw8FYtE4Ni8YUHUbFHuFvJnSbTk/Qq/ LaZDikCIZ2oz1STsIZ6D9i+GhBCWxdlCors5QQICcOb/iWyg5F9EMewMLLobrVkd RRnFIbVqDSARPKoOqRKWvP04 -----END CERTIFICATE-----Generated at Tue Mar 3 05:30:42 2026 by rpki-client