$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: T2i7beGz4Exn5u6dSxgacdq3zugijI0jKks18zQL4Jc= Subject key identifier: E1:F3:2B:AC:A2:42:EF:E6:B6:5D:E7:C4:65:6E:77:AC:3D:A4:BB:33 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17A2 Signing time: Sat 28 Feb 2026 16:38:28 +0000 Manifest this update: Sat 28 Feb 2026 16:38:28 +0000 Manifest next update: Sat 07 Mar 2026 16:38:28 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: xclPRgg6tlpHcgfIw7dxlV+LgEGQRSLLLxNlyEq6N+U=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: d2whCwS+Y7KOQh+htsvadrNGS89OQG8frvlHn3CdTfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6061 (0x17ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Feb 28 16:38:28 2026 GMT Not After : Mar 7 16:38:28 2026 GMT Subject: CN=69a31a04-2268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:35:12:5f:63:45:25:18:ae:8b:1e:ce:28: 28:40:38:4b:16:44:a1:63:cf:b3:1a:c5:bc:7c:26: f9:eb:a4:64:20:97:a3:bd:af:80:f8:1d:c7:a9:24: 72:51:d0:bf:c3:48:9e:38:00:cd:60:c8:2b:d8:ae: a1:1b:2c:12:c1:16:50:64:47:7d:23:5e:0a:5c:17: 4b:85:b2:ee:18:5e:66:ca:cd:6d:51:97:7c:d2:1f: 14:b7:2b:6d:bc:b5:b7:7e:50:f5:31:98:4e:a3:58: df:21:7a:b5:ad:2a:36:c7:26:fb:5a:44:31:98:43: 8f:c9:8f:bf:3d:5f:27:f0:48:0f:2c:64:3b:84:b8: 07:c0:fa:b1:2c:c7:2a:9c:88:91:d2:f4:34:81:6d: dd:6e:74:35:ce:a0:bd:f9:6f:d8:42:c9:32:02:1f: 44:0c:f1:e0:91:1f:9e:20:2e:fd:96:87:c5:4b:56: c9:d9:c3:07:2d:9d:b5:2e:b2:6d:2d:c2:a1:48:57: fc:98:bb:ac:6a:6f:4e:45:54:bc:a8:83:61:33:aa: 19:c7:e5:84:fc:1f:3b:53:19:35:26:3e:82:eb:ff: 28:c6:6b:30:6c:7b:70:fd:a9:52:2b:3d:cd:14:b2: a9:1c:d7:ff:ab:60:22:f4:6e:cc:a3:2c:66:01:2d: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F3:2B:AC:A2:42:EF:E6:B6:5D:E7:C4:65:6E:77:AC:3D:A4:BB:33 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:14:92:1a:05:a8:a5:6f:99:5a:c4:d7:25:32:74:68:22:60: e1:99:bb:9c:d7:14:4d:ac:fb:57:a9:d1:27:a8:0c:f4:9b:6b: f1:20:d6:a3:86:97:a9:45:07:6a:39:ae:23:f5:60:bc:7e:c1: 8b:16:e8:03:1d:e5:de:0d:aa:a4:4a:c5:ec:9d:cf:a4:70:9f: 5f:3b:3b:36:ba:33:e2:2d:e4:dd:16:88:cf:47:ab:ba:1f:cb: ef:81:87:65:ec:0b:39:17:49:98:e0:6c:a3:ff:f7:88:f7:c4: f2:b3:af:06:7b:d8:74:fe:ff:33:18:25:c8:ee:b5:bf:a3:ad: 77:c6:ee:4e:80:32:07:78:81:55:75:cc:76:f3:30:d7:9b:f0: 57:22:e5:34:83:b3:23:d1:ce:a1:f0:ce:4f:32:f7:0d:d7:e3: 09:ef:9a:6f:de:18:19:be:30:bc:5c:c7:87:08:0a:4a:36:d3: 88:8b:14:f5:7f:13:c3:99:2f:8f:df:20:fa:4d:e7:ad:29:52: 11:91:cb:5b:6b:88:43:0a:a0:77:f6:29:99:a2:b5:a8:3a:41: 89:fc:92:de:47:d2:01:55:38:8c:bb:47:46:a5:ab:47:28:5f: 6d:39:f9:45:62:7c:67:fb:bc:f9:3b:d6:0d:0e:24:cb:8f:f3: a5:b7:1d:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwMjI4MTYzODI4WhcNMjYwMzA3MTYzODI4WjAYMRYwFAYD VQQDDA02OWEzMWEwNC0yMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OU1El9jRSUYrosezigoQDhLFkShY8+zGsW8fCb566RkIJejva+A+B3HqSRy UdC/w0ieOADNYMgr2K6hGywSwRZQZEd9I14KXBdLhbLuGF5mys1tUZd80h8Utytt vLW3flD1MZhOo1jfIXq1rSo2xyb7WkQxmEOPyY+/PV8n8EgPLGQ7hLgHwPqxLMcq nIiR0vQ0gW3dbnQ1zqC9+W/YQskyAh9EDPHgkR+eIC79lofFS1bJ2cMHLZ21LrJt LcKhSFf8mLusam9ORVS8qINhM6oZx+WE/B87Uxk1Jj6C6/8oxmswbHtw/alSKz3N FLKpHNf/q2Ai9G7MoyxmAS3VEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHzK6yi Qu/mtl3nxGVud6w9pLszMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRSSGgWopW+ZWsTXJTJ0aCJg4Zm7nNcUTaz7V6nRJ6gM9Jtr8SDWo4aXqUUH ajmuI/VgvH7BixboAx3l3g2qpErF7J3PpHCfXzs7Nroz4i3k3RaIz0eruh/L74GH ZewLORdJmOBso//3iPfE8rOvBnvYdP7/MxglyO61v6Otd8buToAyB3iBVXXMdvMw 15vwVyLlNIOzI9HOofDOTzL3DdfjCe+ab94YGb4wvFzHhwgKSjbTiIsU9X8Tw5kv j98g+k3nrSlSEZHLW2uIQwqgd/YpmaK1qDpBifyS3kfSAVU4jLtHRqWrRyhfbTn5 RWJ8Z/u8+TvWDQ4ky4/zpbcdzg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:29:54 2026 by rpki-client