$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: b/beHJcdQtdoBPoOFOAEOK/6zbn6IgnsA2lmv/5Bjsg= Subject key identifier: 01:89:D2:84:66:0D:CE:1B:AF:27:4D:93:31:C4:2B:BB:70:1C:5D:9E Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 18 Signing time: Sat 07 Mar 2026 08:16:06 +0000 Manifest this update: Sat 07 Mar 2026 08:16:05 +0000 Manifest next update: Sat 14 Mar 2026 08:16:05 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: j6kZ0oIE3ltTyGFXOH4XsRrrPFg1Pitepdw7/WY34zw=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Mar 7 08:16:05 2026 GMT Not After : Mar 14 08:16:05 2026 GMT Subject: CN=69abdec6-eb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:d8:df:c5:2f:10:f6:8a:d2:b7:eb:81:c9: f8:58:76:c4:2f:99:da:54:1c:e5:10:05:13:61:1b: a9:8b:c3:7f:29:dd:97:08:9c:4e:06:8c:76:e5:d1: 21:88:6f:9d:1b:a9:0e:03:7c:54:49:3f:ca:61:09: a3:f7:c9:53:b9:bc:86:36:e7:60:cf:05:0e:0e:30: dd:d8:71:d5:6a:78:b4:65:84:3b:7c:2c:69:2d:d5: 96:4b:a2:ea:cb:0c:81:e0:04:87:83:f4:a7:32:27: 36:2d:70:48:26:9e:f3:7a:1a:34:24:5b:b5:8d:59: e2:dc:d0:a2:92:8f:e4:37:46:75:7c:0d:0d:b0:a6: 10:a4:6a:01:f5:2c:72:f1:39:9c:3c:de:55:03:67: df:33:f2:16:75:f6:ec:e2:2f:4e:d9:ee:6d:e1:28: 7e:6c:fd:25:c0:47:c0:de:50:7f:53:70:39:61:74: 37:e5:6c:e1:e9:0b:23:8c:be:22:f8:da:0d:a9:d2: 8c:b3:7e:fa:40:09:78:58:7d:ef:5d:c7:2d:70:d3: 3c:a1:63:d7:a8:c1:c2:6c:89:bc:2b:89:d8:3a:58: c5:6c:02:93:93:c7:a0:27:c0:90:73:7d:c6:b3:77: 43:4c:88:35:58:37:62:c8:b1:d1:44:1e:4e:f1:1f: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:D2:84:66:0D:CE:1B:AF:27:4D:93:31:C4:2B:BB:70:1C:5D:9E X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b2:2f:cf:42:64:26:cc:41:ac:a0:77:44:0e:a0:58:82:e2: 5f:d0:42:b6:ec:2b:76:e3:79:f5:1f:27:21:1a:f9:45:86:25: b6:27:67:4a:67:95:6e:67:ac:82:37:ea:bd:7a:b8:6a:80:47: 47:de:2a:c7:5c:88:17:57:d9:4e:ca:9d:44:84:bb:cf:f9:6f: b2:4d:36:74:b9:93:db:00:e6:3d:5b:04:0f:63:69:ba:7a:cc: a3:3a:cd:30:4d:d4:01:f4:3e:07:40:cd:bc:59:e8:70:8b:09: cf:10:e4:e5:50:2f:5f:3c:cc:ce:e1:19:b4:35:91:b7:54:40: cf:fa:88:7c:39:73:e0:82:56:43:fb:90:d5:fa:e0:33:fb:37: 2c:c7:4d:b9:6d:e1:39:3d:8e:8a:a7:63:42:5f:44:04:4d:dc: 28:84:a4:bd:22:3d:d5:b4:7f:8f:a8:62:88:9e:7f:c7:cd:b2: 7e:9b:d8:0a:7d:a5:96:00:12:6a:00:c6:33:2d:05:21:7d:7c: fd:20:68:f9:cf:af:d4:c5:f0:3b:05:a0:bd:8d:80:f4:e3:68: be:7e:92:c5:68:72:79:6a:18:f7:13:d9:70:12:b0:6a:74:7c: d7:04:17:fb:df:04:db:a8:44:4f:bd:3d:f4:64:52:69:24:72: 33:b1:d8:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1 RUVCREE0RjAeFw0yNjAzMDcwODE2MDVaFw0yNjAzMTQwODE2MDVaMBgxFjAUBgNV BAMTDTY5YWJkZWM2LWViOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdtNjfxS8Q9orSt+uByfhYdsQvmdpUHOUQBRNhG6mLw38p3ZcInE4GjHbl0SGI b50bqQ4DfFRJP8phCaP3yVO5vIY252DPBQ4OMN3YcdVqeLRlhDt8LGkt1ZZLourL DIHgBIeD9KcyJzYtcEgmnvN6GjQkW7WNWeLc0KKSj+Q3RnV8DQ2wphCkagH1LHLx OZw83lUDZ98z8hZ19uziL07Z7m3hKH5s/SXAR8DeUH9TcDlhdDflbOHpCyOMviL4 2g2p0oyzfvpACXhYfe9dxy1w0zyhY9eowcJsibwridg6WMVsApOTx6AnwJBzfcaz d0NMiDVYN2LIsdFEHk7xH0CzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAYnShGYN zhuvJ02TMcQru3AcXZ4wHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0UxQTY2RjE4MDBERTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpY YXZ4N3pGX0ViYVY3cjJrOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtsi/PQmQmzEGsoHdEDqBYguJf0EK27Ct243n1HychGvlFhiW2J2dKZ5VuZ6yC N+q9erhqgEdH3irHXIgXV9lOyp1EhLvP+W+yTTZ0uZPbAOY9WwQPY2m6esyjOs0w TdQB9D4HQM28WehwiwnPEOTlUC9fPMzO4Rm0NZG3VEDP+oh8OXPgglZD+5DV+uAz +zcsx025beE5PY6Kp2NCX0QETdwohKS9Ij3VtH+PqGKInn/HzbJ+m9gKfaWWABJq AMYzLQUhfXz9IGj5z6/UxfA7BaC9jYD042i+fpLFaHJ5ahj3E9lwErBqdHzXBBf7 3wTbqERPvT30ZFJpJHIzsdgW -----END CERTIFICATE-----Generated at Sat Mar 7 14:31:40 2026 by rpki-client