$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: Nv1bNg2BupaAPD85TS4BZMNq+frSXqjrrOHKOnZPd+g= Subject key identifier: F6:2C:7A:21:22:02:1D:A2:B5:1D:55:A7:F2:3E:AE:F8:8A:73:67:52 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2517 Signing time: Sat 28 Feb 2026 15:46:58 +0000 Manifest this update: Sat 28 Feb 2026 15:46:58 +0000 Manifest next update: Sat 07 Mar 2026 15:46:58 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: HDYXzvedKhHgFYS69xdYQL3DdoeHz/160leuWUaNI1E=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9521 (0x2531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Feb 28 15:46:58 2026 GMT Not After : Mar 7 15:46:58 2026 GMT Subject: CN=69a30df2-16f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:d8:6a:4d:8e:49:4e:c9:9f:4b:35:b9:18: 4a:95:d1:83:e6:fd:2d:0b:6b:bb:be:3d:02:3b:39: 31:52:8c:d2:16:b3:0b:8d:1e:ad:8e:c5:60:26:5c: 4e:a2:4d:10:38:07:d9:56:c8:11:0f:2d:da:74:9e: 04:b7:26:39:26:ec:70:df:89:ba:9b:91:89:12:db: ea:82:c6:f2:9f:de:e0:7d:63:2c:16:90:18:ec:6b: 80:5d:e5:c6:49:7d:7f:f1:51:29:e7:08:26:10:0e: f1:e2:5d:86:c7:fe:5b:9a:61:2a:35:8b:f8:bf:05: dd:a7:c1:25:6b:97:ba:7a:68:8b:d9:40:a0:9b:6e: b5:58:d6:a6:55:66:7f:e1:dd:3b:3a:0f:6e:42:84: f6:ed:c8:8e:ad:e1:fa:7f:c8:ef:47:da:86:da:a0: 30:48:63:43:b3:fa:e5:7a:28:35:c5:fe:75:ce:32: a0:94:98:d2:4e:6b:4e:8f:89:78:d0:2f:37:e6:6f: af:4d:df:f0:0b:dc:75:2e:cd:db:87:4c:92:70:a1: e9:52:8d:bb:39:cc:84:64:4d:9a:d2:cd:bd:a1:8b: a1:d7:ef:38:91:e9:62:74:e1:6d:83:7c:a2:11:3e: 3e:55:68:34:4f:be:3f:3b:77:7c:20:fa:5e:20:c3: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:7A:21:22:02:1D:A2:B5:1D:55:A7:F2:3E:AE:F8:8A:73:67:52 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e7:da:ac:89:03:fe:8b:4d:81:40:0c:7a:f8:3c:89:98:37: b6:63:e7:3e:c3:4e:a3:be:cd:ba:6e:f1:8a:2e:00:c1:5d:14: ec:da:e1:bc:0e:63:f1:63:67:fa:51:82:a3:b0:cd:a8:a7:c8: a7:a2:ba:c2:4f:d9:4d:59:ab:3d:68:09:18:97:5f:69:bf:23: a4:37:ec:13:37:61:3b:fe:25:65:c5:18:9d:a4:98:7e:fa:b9: b0:e9:d9:42:4e:f7:65:4e:7d:32:14:7f:45:3b:51:7a:5b:bb: 67:d7:df:ae:a1:16:01:ec:d2:95:5f:95:ef:b4:48:18:d1:b9: 68:6e:b7:dc:91:ff:73:90:14:8a:e0:86:92:ec:aa:13:eb:43: 79:9d:cd:f1:f4:db:d4:c8:98:82:02:a4:b2:9a:f8:f1:56:66: 70:ac:6b:07:33:69:6a:3b:12:3f:c8:95:8e:f6:21:60:3f:fd: 26:5c:89:c4:ba:4a:c3:63:54:8b:bf:c6:71:ee:14:95:0e:5f: bd:62:b0:0d:12:14:9f:67:af:29:96:52:54:65:ff:98:72:d0: c3:cc:b8:ee:82:f3:59:67:6f:fd:91:a3:e7:ad:b0:b5:57:f4: 4e:bf:6e:1e:0d:17:c8:ac:2a:90:02:8a:74:e1:4d:53:90:aa: 08:06:87:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwMjI4MTU0NjU4WhcNMjYwMzA3MTU0NjU4WjAYMRYwFAYD VQQDDA02OWEzMGRmMi0xNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyvYak2OSU7Jn0s1uRhKldGD5v0tC2u7vj0COzkxUozSFrMLjR6tjsVgJlxO ok0QOAfZVsgRDy3adJ4EtyY5Juxw34m6m5GJEtvqgsbyn97gfWMsFpAY7GuAXeXG SX1/8VEp5wgmEA7x4l2Gx/5bmmEqNYv4vwXdp8Ela5e6emiL2UCgm261WNamVWZ/ 4d07Og9uQoT27ciOreH6f8jvR9qG2qAwSGNDs/rleig1xf51zjKglJjSTmtOj4l4 0C835m+vTd/wC9x1Ls3bh0yScKHpUo27OcyEZE2a0s29oYuh1+84kelidOFtg3yi ET4+VWg0T74/O3d8IPpeIMP5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYseiEi Ah2itR1Vp/I+rviKc2dSMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoufarIkD/otNgUAMevg8iZg3tmPnPsNOo77Num7xii4AwV0U7NrhvA5j8WNn +lGCo7DNqKfIp6K6wk/ZTVmrPWgJGJdfab8jpDfsEzdhO/4lZcUYnaSYfvq5sOnZ Qk73ZU59MhR/RTtRelu7Z9ffrqEWAezSlV+V77RIGNG5aG633JH/c5AUiuCGkuyq E+tDeZ3N8fTb1MiYggKkspr48VZmcKxrBzNpajsSP8iVjvYhYD/9JlyJxLpKw2NU i7/Gce4UlQ5fvWKwDRIUn2evKZZSVGX/mHLQw8y47oLzWWdv/ZGj562wtVf0Tr9u Hg0XyKwqkAKKdOFNU5CqCAaH4Q== -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:13 2026 by rpki-client