$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: XNSqF1NP21vmFyMNv2emvtrxUByhW4J90EjsMB/XHfQ= Subject key identifier: DB:F4:6B:AF:BA:8C:A3:7D:BA:24:91:6D:B6:69:F6:E4:F9:A7:5B:FC Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 074B Signing time: Mon 02 Mar 2026 00:26:59 +0000 Manifest this update: Mon 02 Mar 2026 00:26:57 +0000 Manifest next update: Mon 09 Mar 2026 00:26:57 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: 5HyGtCu8jU962pAPD6Bdv1o/kD/HoaYD+sCrLKJF054=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: mEYGjaNN5jDYnCeSiBe6hdOluvdI6s67MbAh10UyMUA=) 3: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: JTfIQDzlma+BMDLHgBpGIyVgGKJ2u7QeJy1k4YDsRZ4=) 4: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: gDwp6KKgBGoLeRcHe+lBeS3zF2+f120cEyNPP+dhw54=) 5: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: dqu+IGrDwQGnaCXjrPhpRpLVWhrg7vjaTG4OX0l2hO4=) 6: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: Mgc4frtsf2+Mk4kqhvP9ShsUUEAvGd8n3hXxY5uC1m4=) 7: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: Z5HvLfJRCWWPtpANNACtMj7b18F6vbfNbpJjSdS2KbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Mar 2 00:26:57 2026 GMT Not After : Mar 9 00:26:57 2026 GMT Subject: CN=69a4d952-ab3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:10:31:c8:c8:7b:61:7e:0a:3a:87:6b:8e: 06:34:26:c1:34:14:d1:a0:13:35:40:63:ae:70:d4: 01:c8:88:b2:b2:aa:35:92:90:17:30:57:fc:62:e0: ae:9f:e4:cf:79:36:50:8f:e7:1c:9b:e8:56:8b:07: 04:42:3a:35:26:9e:14:e9:04:ed:7b:1c:95:7b:22: 26:79:c3:5a:5b:c6:8c:48:24:92:90:36:a9:5e:06: af:6d:9f:30:8c:9a:28:dd:ec:fb:06:33:af:00:70: 8e:34:2c:07:c2:cd:02:da:2d:d1:23:e5:2a:20:ba: 9c:f8:f8:99:92:74:91:80:df:35:d9:4c:66:f4:ca: b5:be:ca:c2:b5:ea:27:ce:bf:80:9c:ca:68:3d:91: 7c:2f:df:dc:05:ba:ad:d2:ed:c1:9c:24:d8:3b:74: 74:6c:1f:fc:f2:2b:9d:da:c4:a2:eb:e0:b4:c5:10: 48:eb:97:2f:be:d1:73:7f:3e:05:8a:3a:30:64:31: 18:09:97:66:0a:e1:4b:9f:62:26:be:e7:25:bd:41: eb:28:45:47:b2:b8:b7:83:93:5e:8f:ac:45:29:4a: 7a:ca:ef:43:34:f3:f6:d6:c4:24:4e:73:c0:19:be: 15:37:97:a6:e6:bf:1a:e9:dd:90:54:0a:4a:0e:6c: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F4:6B:AF:BA:8C:A3:7D:BA:24:91:6D:B6:69:F6:E4:F9:A7:5B:FC X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:f4:e7:88:4c:6f:10:43:33:e5:54:75:11:e1:82:5f:f2: 3b:7e:78:b8:11:de:cc:a4:b9:be:dc:2b:a5:fc:00:d0:26:09: 2a:04:5a:43:29:2a:fd:58:64:c6:f1:e1:7e:67:ca:ce:ed:c5: c6:43:72:92:5c:cf:ce:df:92:00:64:0f:86:90:ef:86:54:f8: bf:ac:a4:2f:a3:4d:04:33:12:a3:3d:a6:d3:4f:22:e3:e7:10: f5:e9:c5:46:d4:47:7c:99:39:d2:31:61:c9:fc:73:1b:3f:e7: a8:43:17:e2:63:87:1d:68:95:05:be:c1:b5:35:cc:d3:41:71: a7:29:4c:89:cf:29:69:de:a7:c7:5d:6f:c5:ff:ba:f5:83:b3: 1a:ae:b5:3a:39:ec:fe:54:4d:5f:00:97:fe:52:bc:ec:84:dd: 70:c4:66:24:1d:ff:91:db:76:1b:e3:0c:1c:93:68:3e:c7:6f: 99:a3:72:4d:50:ab:6b:8f:7c:e6:4c:3e:e7:18:44:00:72:b9: 00:96:fe:a0:41:16:4d:1f:b6:70:74:d4:a1:e4:7f:05:93:59: b1:4f:ee:1e:f4:ac:87:ae:66:50:ec:e7:06:ed:7f:52:4e:0f: 48:30:53:8b:b3:d8:55:93:f1:13:78:70:41:35:58:2c:84:9e: df:01:a3:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwMzAyMDAyNjU3WhcNMjYwMzA5MDAyNjU3WjAYMRYwFAYD VQQDEw02OWE0ZDk1Mi1hYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJMQMcjIe2F+CjqHa44GNCbBNBTRoBM1QGOucNQByIiysqo1kpAXMFf8YuCu n+TPeTZQj+ccm+hWiwcEQjo1Jp4U6QTtexyVeyImecNaW8aMSCSSkDapXgavbZ8w jJoo3ez7BjOvAHCONCwHws0C2i3RI+UqILqc+PiZknSRgN812Uxm9Mq1vsrCteon zr+AnMpoPZF8L9/cBbqt0u3BnCTYO3R0bB/88iud2sSi6+C0xRBI65cvvtFzfz4F ijowZDEYCZdmCuFLn2ImvuclvUHrKEVHsri3g5Nej6xFKUp6yu9DNPP21sQkTnPA Gb4VN5em5r8a6d2QVApKDmy3vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNv0a6+6 jKN9uiSRbbZp9uT5p1v8MB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV2/054hMbxBDM+VUdRHhgl/yO354uBHezKS5vtwrpfwA0CYJKgRaQykq/Vhk xvHhfmfKzu3FxkNyklzPzt+SAGQPhpDvhlT4v6ykL6NNBDMSoz2m008i4+cQ9enF RtRHfJk50jFhyfxzGz/nqEMX4mOHHWiVBb7BtTXM00FxpylMic8pad6nx11vxf+6 9YOzGq61Ojns/lRNXwCX/lK87ITdcMRmJB3/kdt2G+MMHJNoPsdvmaNyTVCra498 5kw+5xhEAHK5AJb+oEEWTR+2cHTUoeR/BZNZsU/uHvSsh65mUOznBu1/Uk4PSDBT i7PYVZPxE3hwQTVYLISe3wGj4w== -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:00 2026 by rpki-client