$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: 4+37kkxV9z5/MkLoNS4wN8MbZbwjMDo+eCDqTJKnggo= Subject key identifier: 0F:89:25:28:C2:43:0A:A8:D7:F2:85:2A:92:73:83:3E:E9:63:96:C0 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 2B Signing time: Tue 03 Mar 2026 08:27:13 +0000 Manifest this update: Tue 03 Mar 2026 08:27:12 +0000 Manifest next update: Tue 10 Mar 2026 08:27:12 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: Wtnlal3NVTzTOd677AfkVd9S2jpeQbfFmTflt8To/gM=) 2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=) 4: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Mar 3 08:27:12 2026 GMT Not After : Mar 10 08:27:12 2026 GMT Subject: CN=69a69b61-bd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:eb:8e:97:d1:d6:38:2a:6a:2f:15:85:9f: a6:7f:7c:28:c4:8a:3d:18:e3:f5:41:7c:bf:f1:5d: 22:69:74:a9:44:bc:e0:51:87:e4:8c:ae:1f:36:f9: a8:f7:5d:a8:a7:d9:1c:23:55:14:44:c9:0d:ed:2f: 4e:69:28:09:6c:3d:d3:87:85:1e:16:6c:3c:05:ea: e8:87:f7:a0:37:bb:f0:c7:76:80:43:58:8c:a8:cb: 01:4f:8a:40:2c:19:31:dd:57:94:ef:30:34:0a:ca: 1d:c4:5b:1a:1f:69:ab:1b:9f:38:f7:7d:93:6d:8a: 0d:64:d7:46:e6:c8:2d:c7:bb:58:b6:49:b8:3a:32: 91:a1:61:75:66:08:ae:78:b5:8e:ed:aa:38:fc:f5: 5a:19:f3:13:b0:fb:d3:98:93:b3:76:74:ea:a1:d4: cc:e9:8f:30:f0:db:e4:7b:bd:c2:67:35:44:95:bf: a4:5d:74:0f:14:c4:1d:9c:a9:6a:9b:67:53:0f:c6: 03:71:9a:ba:4c:1f:e6:74:e2:31:d3:54:6b:1c:f0: 47:fc:15:6e:03:db:44:88:25:69:ac:04:9a:4c:2d: 24:37:41:04:3f:29:a7:e4:5c:0e:3c:26:cd:c5:44: 23:10:77:53:6c:f8:30:25:43:ea:0f:86:0b:96:9f: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:89:25:28:C2:43:0A:A8:D7:F2:85:2A:92:73:83:3E:E9:63:96:C0 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:eb:65:f5:b9:24:d6:8d:b4:93:35:83:65:82:0f:88:33:d6: b1:29:7e:f4:eb:72:56:5f:74:db:e5:0e:65:1c:26:05:03:63: 8f:93:8b:d7:c2:4e:65:89:5a:23:64:49:56:b3:fe:c6:1f:44: 27:27:c1:01:0a:48:d8:17:03:4c:88:b6:e4:1c:9d:56:d8:ef: 03:3f:7d:9c:86:ca:fa:5b:0a:d5:2c:0f:67:c6:d0:eb:b2:33: c2:01:53:a5:35:94:74:5b:08:97:10:86:9c:ea:8c:05:90:15: 5f:df:2e:15:5e:40:89:aa:63:d7:36:d3:c0:d4:74:e7:7a:09: b9:b8:b0:a2:99:ec:46:b3:0c:1d:6d:25:bf:bc:5a:6a:bc:17: b9:74:66:66:65:0f:1f:b7:b1:5d:75:0d:42:de:08:a5:51:31: 56:9c:f8:a2:09:7f:b7:54:81:3b:3d:9a:1e:26:06:71:3f:46: d4:ee:34:6a:fe:b8:56:e4:6a:ba:dd:30:d0:2a:02:5c:85:e9: 93:15:7f:88:b6:19:56:db:fa:63:81:64:c6:11:b8:05:bd:7f: e0:ed:45:c3:23:25:a1:d6:07:5b:5f:65:fa:9b:65:5f:b7:88: 66:44:9b:89:ff:03:35:0b:bb:1b:a1:42:d3:30:e5:11:1c:64: 46:4d:34:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNjAzMDMwODI3MTJaFw0yNjAzMTAwODI3MTJaMBgxFjAUBgNV BAMTDTY5YTY5YjYxLWJkOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiJeuOl9HWOCpqLxWFn6Z/fCjEij0Y4/VBfL/xXSJpdKlEvOBRh+SMrh82+aj3 Xain2RwjVRREyQ3tL05pKAlsPdOHhR4WbDwF6uiH96A3u/DHdoBDWIyoywFPikAs GTHdV5TvMDQKyh3EWxofaasbnzj3fZNtig1k10bmyC3Hu1i2Sbg6MpGhYXVmCK54 tY7tqjj89VoZ8xOw+9OYk7N2dOqh1MzpjzDw2+R7vcJnNUSVv6RddA8UxB2cqWqb Z1MPxgNxmrpMH+Z04jHTVGsc8Ef8FW4D20SIJWmsBJpMLSQ3QQQ/KafkXA48Js3F RCMQd1Ns+DAlQ+oPhguWn3BrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD4klKMJD CqjX8oUqknODPuljlsAwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0IxNzFEQjUwRTFBQTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4 TTYxd3N1UnMwMnhURDY4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAq62X1uSTWjbSTNYNlgg+IM9axKX7063JWX3Tb5Q5lHCYFA2OPk4vXwk5liVoj ZElWs/7GH0QnJ8EBCkjYFwNMiLbkHJ1W2O8DP32chsr6WwrVLA9nxtDrsjPCAVOl NZR0WwiXEIac6owFkBVf3y4VXkCJqmPXNtPA1HTnegm5uLCimexGswwdbSW/vFpq vBe5dGZmZQ8ft7FddQ1C3gilUTFWnPiiCX+3VIE7PZoeJgZxP0bU7jRq/rhW5Gq6 3TDQKgJchemTFX+IthlW2/pjgWTGEbgFvX/g7UXDIyWh1gdbX2X6m2Vft4hmRJuJ /wM1C7sboULTMOURHGRGTTQf -----END CERTIFICATE-----Generated at Wed Mar 4 08:42:50 2026 by rpki-client