$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: ZYwvJQDdlLpOR8W4eHjuX6nFMSlFNolHHnt1dHP1QRU= Subject key identifier: 8C:93:B1:27:C8:31:18:63:3C:EA:64:CF:66:62:A5:D2:64:16:FB:5B Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 08B5 Signing time: Thu 12 Mar 2026 20:12:07 +0000 Manifest this update: Thu 12 Mar 2026 20:12:07 +0000 Manifest next update: Thu 19 Mar 2026 20:12:07 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: hp+rYoQ5MgC8vT+yFoIPUbOW8kI2UzWAafXPC6wy+VE=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: vKz2PhbUDYJZVs3/nsXYOspC2RoBm8DRbbH9FlMoAj4=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Gdkzxdpe1ELyHXB0+EiJtJauU6nSffFqCiOdocyNC80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: Mar 12 20:12:07 2026 GMT Not After : Mar 19 20:12:07 2026 GMT Subject: CN=69b31e17-958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:7b:26:7c:02:21:06:35:93:25:ef:58:ec: e9:61:9d:5a:d4:24:f3:a8:4e:b6:bb:22:66:b2:15: f2:45:bb:37:c4:09:c5:fe:b2:d8:fb:12:6e:5d:fb: bf:d9:ee:c4:2b:62:c3:c2:46:c7:8a:ef:71:98:4e: f3:6f:1b:b6:e7:e5:fa:91:b0:b7:b0:8d:4a:48:bd: d4:04:af:de:0f:01:6b:3e:3a:f3:06:dd:34:d0:4e: 33:d6:6f:2b:2c:2b:ab:df:6f:ce:70:c8:d7:e5:5a: 3d:d0:ad:ce:6c:7d:a5:0e:5c:5a:97:c1:53:2a:27: 4f:69:a4:54:21:f7:68:e5:9e:d1:a4:f7:6c:f6:0a: d7:54:1f:7f:e7:7a:78:9c:f5:e2:14:e1:3e:1d:5f: 4f:01:db:3b:21:4d:3a:40:49:9c:91:4e:4b:fb:72: 44:55:0a:39:b8:83:7d:2b:44:4b:ed:1d:8f:bc:d4: cb:9f:2c:69:86:11:03:00:f5:32:cc:f2:f4:83:b7: 58:7f:bf:c8:98:f0:64:94:e5:d1:17:2b:e0:36:88: 61:30:92:76:39:ac:a3:15:27:2d:65:82:db:72:86: 08:3e:bd:c8:70:e0:0c:ae:00:f9:9f:ea:b7:1a:7c: 17:e4:4c:07:ab:e2:b6:51:e7:34:1d:1f:ff:84:76: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:B1:27:C8:31:18:63:3C:EA:64:CF:66:62:A5:D2:64:16:FB:5B X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:85:12:0e:3d:f9:98:b6:74:4f:bf:47:05:60:3e:ff:28:80: fe:b5:7b:2f:e2:f7:cd:62:96:16:d0:1f:a8:9e:6b:4f:d3:ce: 78:2a:9d:cb:fd:8d:1b:f0:24:f5:42:cb:a2:f6:bb:83:be:50: d9:90:6d:88:7a:95:3e:2c:98:4b:24:af:4e:85:83:48:a8:96: 60:e5:a5:4c:98:49:7b:af:b6:3d:57:da:28:4b:ec:90:6c:43: 95:b0:e8:37:81:db:7f:a5:bb:7b:ec:7b:09:83:bb:a2:e3:e8: e3:ab:4f:17:a3:e3:82:fc:bd:57:d1:b3:c1:8d:0e:18:cc:00: 34:13:cd:13:94:40:72:d0:a3:66:2f:b7:4a:19:68:ee:4f:c4: 17:14:ce:6c:3a:e3:50:a6:30:a6:3e:57:1b:70:1e:9f:d2:9d: 4d:d9:ab:dc:8d:a3:07:0e:3f:a7:03:44:85:65:c5:a2:a2:b4: 59:bd:82:00:7b:1c:77:05:24:e6:f8:6a:cf:a7:33:a9:82:de: 11:05:ef:b5:38:76:25:df:bc:e4:fd:be:4b:d6:a6:b0:f9:31: 8c:3e:06:dc:14:e1:ad:f5:be:e9:25:a2:55:cd:46:99:5d:fd: 7a:e9:13:08:03:ec:99:11:aa:12:7f:d3:3f:7f:15:67:f3:02: f8:81:19:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjYwMzEyMjAxMjA3WhcNMjYwMzE5MjAxMjA3WjAYMRYwFAYD VQQDEw02OWIzMWUxNy05NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArct7JnwCIQY1kyXvWOzpYZ1a1CTzqE62uyJmshXyRbs3xAnF/rLY+xJuXfu/ 2e7EK2LDwkbHiu9xmE7zbxu25+X6kbC3sI1KSL3UBK/eDwFrPjrzBt000E4z1m8r LCur32/OcMjX5Vo90K3ObH2lDlxal8FTKidPaaRUIfdo5Z7RpPds9grXVB9/53p4 nPXiFOE+HV9PAds7IU06QEmckU5L+3JEVQo5uIN9K0RL7R2PvNTLnyxphhEDAPUy zPL0g7dYf7/ImPBklOXRFyvgNohhMJJ2OayjFSctZYLbcoYIPr3IcOAMrgD5n+q3 GnwX5EwHq+K2Uec0HR//hHYgMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyTsSfI MRhjPOpkz2ZipdJkFvtbMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhIUSDj35mLZ0T79HBWA+/yiA/rV7L+L3zWKWFtAfqJ5rT9POeCqdy/2NG/Ak 9ULLova7g75Q2ZBtiHqVPiyYSySvToWDSKiWYOWlTJhJe6+2PVfaKEvskGxDlbDo N4Hbf6W7e+x7CYO7ouPo46tPF6Pjgvy9V9GzwY0OGMwANBPNE5RActCjZi+3Shlo 7k/EFxTObDrjUKYwpj5XG3Aen9KdTdmr3I2jBw4/pwNEhWXFoqK0Wb2CAHscdwUk 5vhqz6czqYLeEQXvtTh2Jd+85P2+S9amsPkxjD4G3BThrfW+6SWiVc1GmV39eukT CAPsmRGqEn/TP38VZ/MC+IEZkA== -----END CERTIFICATE-----Generated at Fri Mar 13 20:49:58 2026 by rpki-client