$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json) Hash identifier: NmUOy+5q0bNx/r47J/pLDyMV/EyPRUtqtQYim8NJW3k= Subject key identifier: BE:E6:F7:C9:D8:0C:7D:D6:BD:B6:0E:11:77:82:DD:E0:A1:FC:D7:AE Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft Manifest number: 55 Signing time: Sun 01 Mar 2026 09:34:18 +0000 Manifest this update: Sun 01 Mar 2026 09:34:18 +0000 Manifest next update: Sun 08 Mar 2026 09:34:18 +0000 Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: PSYaoRQaz+J7N0MmwC5OFYMmj+vMAnL3xGmpn8Bs1dU=) 2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Mar 1 09:34:18 2026 GMT Not After : Mar 8 09:34:18 2026 GMT Subject: CN=69a4081a-04f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:cd:b9:f7:45:85:28:49:73:1e:0e:a3:77: 8b:7f:10:a8:c2:d8:37:cf:29:ec:cb:8c:e8:a0:f5: a5:56:24:8d:2b:9a:ae:1c:a2:5b:8a:06:85:69:63: 1c:91:db:f4:d6:f2:e3:4a:35:fe:35:cb:03:3d:90: 3d:59:d2:10:9f:01:ca:b1:b6:2f:6a:19:40:a6:8f: d7:9d:0f:ac:01:2c:c9:d0:a4:98:51:20:2c:9c:1f: 54:0d:b6:9e:35:56:5f:15:b7:57:f0:e4:f2:20:3a: 97:b9:15:f7:ec:5b:a8:ec:e2:a4:62:ba:ef:29:4c: 46:dc:2f:c0:36:50:90:24:40:78:1a:d9:7a:76:11: e4:a5:e1:35:40:0b:ce:59:da:07:6d:77:b9:7f:70: a5:e3:9d:5b:a7:6e:4f:41:fc:12:a1:ed:4d:76:1a: a8:5e:14:40:50:fc:21:be:42:cf:95:72:c1:69:2f: 99:46:2f:58:4b:9e:38:7d:38:94:7e:db:49:c6:34: 4b:30:5f:17:32:42:63:16:4d:93:a9:a8:a0:d7:95: 0b:a5:b3:88:90:87:93:14:72:4f:7f:c1:df:a9:9d: 28:9b:d6:8b:e3:d5:45:4b:44:42:72:39:17:c4:b6: a4:23:f9:b1:cf:dc:ff:68:9a:ce:cf:fd:6c:e8:de: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E6:F7:C9:D8:0C:7D:D6:BD:B6:0E:11:77:82:DD:E0:A1:FC:D7:AE X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:59:5a:36:cc:9e:c6:3f:cf:d1:a6:a4:0c:b6:6c:5b:35:e4: d6:c2:4b:5c:90:ae:f3:71:2a:3e:41:16:0b:8b:4d:5c:ca:46: c7:4f:44:96:b2:7c:f3:21:68:9d:d3:be:ef:0a:5b:58:22:8d: a7:8b:b3:01:8c:a7:63:a3:27:0d:e9:e2:c1:23:fb:27:2f:f5: ad:40:64:83:9d:50:c6:12:e3:ae:66:88:d7:a1:99:5b:92:21: c9:ce:ae:fe:2a:8d:52:c5:84:a7:b6:69:41:e5:6d:16:e1:77: 14:a2:e7:a8:fa:67:b4:f9:cc:16:9c:8a:67:11:a2:a3:36:58: a8:f7:7b:7b:ac:a1:cf:bf:f9:c4:e8:cd:f4:8b:77:43:14:18: 19:6a:7d:4b:a7:92:0e:42:b9:64:6e:27:0d:dc:4a:d2:fb:bd: fa:99:54:73:4c:a0:9c:d9:bc:0a:24:fb:af:6e:b7:43:fe:e7: d1:dd:7a:bc:27:82:e9:5c:e0:fc:ea:87:29:99:e0:ee:11:b9: c9:78:d9:13:29:ad:b1:98:2c:44:b9:e7:0a:a0:66:66:a8:db: c7:50:0e:47:ec:c9:68:a5:f3:71:f3:72:cf:a6:c9:74:95:52: 74:22:c1:f3:0b:40:fd:cf:f8:e1:db:94:ab:79:cd:6d:5b:e5: 1b:6d:37:e0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNjAzMDEwOTM0MThaFw0yNjAzMDgwOTM0MThaMBgxFjAUBgNV BAMTDTY5YTQwODFhLTA0ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ic2590WFKElzHg6jd4t/EKjC2DfPKezLjOig9aVWJI0rmq4coluKBoVpYxyR 2/TW8uNKNf41ywM9kD1Z0hCfAcqxti9qGUCmj9edD6wBLMnQpJhRICycH1QNtp41 Vl8Vt1fw5PIgOpe5FffsW6js4qRiuu8pTEbcL8A2UJAkQHga2Xp2EeSl4TVAC85Z 2gdtd7l/cKXjnVunbk9B/BKh7U12GqheFEBQ/CG+Qs+VcsFpL5lGL1hLnjh9OJR+ 20nGNEswXxcyQmMWTZOpqKDXlQuls4iQh5MUck9/wd+pnSib1ovj1UVLREJyORfE tqQj+bHP3P9oms7P/Wzo3j8FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvub3ydgM fda9tg4Rd4Ld4KH8164wHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk T3haNGpnN29RLW1veF9fMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBWVo2zJ7GP8/RpqQMtmxbNeTWwktckK7zcSo+QRYLi01cykbHT0SWsnzzIWid 077vCltYIo2ni7MBjKdjoycN6eLBI/snL/WtQGSDnVDGEuOuZojXoZlbkiHJzq7+ Ko1SxYSntmlB5W0W4XcUoueo+me0+cwWnIpnEaKjNlio93t7rKHPv/nE6M30i3dD FBgZan1Lp5IOQrlkbicN3ErS+736mVRzTKCc2bwKJPuvbrdD/ufR3Xq8J4LpXOD8 6ocpmeDuEbnJeNkTKa2xmCxEuecKoGZmqNvHUA5H7MlopfNx83LPpsl0lVJ0IsHz C0D9z/jh25Srec1tW+UbbTfg -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:49 2026 by rpki-client