$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: OHEU5bHYkVOuDq6TX+FOc1IwLaGJpBeHE7TvUGqQMqQ= Subject key identifier: F7:2D:7D:4E:7F:00:43:48:5C:31:8A:4C:56:8D:F6:E9:60:35:71:27 Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 45 Signing time: Tue 03 Mar 2026 08:02:23 +0000 Manifest this update: Tue 03 Mar 2026 08:02:22 +0000 Manifest next update: Tue 10 Mar 2026 08:02:22 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: qTgAnquzvXrW63jz0O8YL4SyCEMuJuM43TLMVBpm5h4=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Mar 3 08:02:22 2026 GMT Not After : Mar 10 08:02:22 2026 GMT Subject: CN=69a6958f-10c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:a5:1c:de:23:08:de:0f:38:5f:67:7f:ce: b0:9b:4f:ee:c6:1a:9a:83:3d:2b:47:a3:0a:ca:38: 5d:50:ca:9d:37:2c:b9:d1:d7:30:9c:a4:bf:65:22: 9d:c9:07:46:97:56:74:7d:b5:6a:f6:bc:27:99:45: e1:2a:ee:1a:5d:b7:8c:c8:ac:9f:d5:fb:c3:f0:69: b2:76:91:97:68:7e:86:6a:97:a0:5c:a5:8f:c7:36: df:c1:85:8e:d6:b5:fe:ed:e0:70:3c:a6:f2:33:64: b1:0d:bf:e1:c9:67:3d:b2:f1:87:8c:46:6c:25:a5: 30:56:26:f0:78:70:46:76:00:72:c4:59:1f:dc:de: 91:c5:05:8a:c2:45:91:65:a7:50:c4:9b:11:73:92: 8a:b2:4f:c3:3d:19:2b:1e:b8:e6:b3:66:09:ee:c4: 6b:12:4d:6b:0f:ef:20:8a:67:3b:ab:af:42:72:8a: 61:54:2a:96:2c:1a:e8:f3:95:e5:da:04:44:b2:49: f4:f6:7f:b3:e5:c2:c3:bf:22:cd:7f:6e:15:79:66: 2f:31:2e:ee:ce:67:0f:2b:03:a4:35:c3:c2:40:f5: 0e:fa:ef:e9:86:53:a1:0c:f1:e4:84:8d:08:11:1f: e8:d8:d7:30:bc:f5:9e:a1:23:88:bf:29:e7:a2:4b: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:7D:4E:7F:00:43:48:5C:31:8A:4C:56:8D:F6:E9:60:35:71:27 X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:a8:a3:4f:15:23:d0:9a:15:2f:b0:5c:44:e2:96:4f:90:e9: 53:bb:a5:43:db:7e:b4:cb:6b:e0:74:9a:6e:1c:01:8b:89:f0: 3e:83:23:26:42:17:54:7e:80:32:b9:bb:15:5e:3b:5a:15:6a: 1b:fb:e8:d5:8a:05:64:ea:8a:ec:9c:3a:43:59:b7:c5:fb:87: 7f:32:61:52:95:e7:cd:52:13:ef:39:1e:76:2d:b5:36:e3:20: 4c:03:59:bb:37:dc:e6:94:12:cb:99:a4:d5:ce:cf:4e:9b:e6: 77:9d:18:e3:5f:a4:d0:94:cd:2a:ef:cd:33:c9:7d:89:f0:ea: 52:c7:f1:82:2a:8f:7b:44:46:b4:f9:58:5c:39:7d:cc:b0:9c: 8a:cb:2a:64:ba:f4:a1:ab:a7:cd:dd:c1:73:5e:c7:f3:eb:c1: e6:c2:17:53:69:9b:75:40:37:50:4c:0a:72:ba:6c:15:17:01: 8c:26:27:e5:3e:1a:52:81:e3:41:7e:08:66:8d:bd:30:3b:93: a5:97:fc:df:b5:55:ed:b9:25:2c:e2:74:71:cb:09:5e:d0:91: 70:29:40:52:86:7d:c6:6f:3c:8b:29:83:3b:d6:7b:07:1b:97: 31:13:5b:ff:67:f1:5a:0f:d5:dd:bb:51:db:1d:7f:32:63:7f: 0c:80:b2:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNjAzMDMwODAyMjJaFw0yNjAzMTAwODAyMjJaMBgxFjAUBgNV BAMTDTY5YTY5NThmLTEwYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9OaUc3iMI3g84X2d/zrCbT+7GGpqDPStHowrKOF1Qyp03LLnR1zCcpL9lIp3J B0aXVnR9tWr2vCeZReEq7hpdt4zIrJ/V+8PwabJ2kZdofoZql6BcpY/HNt/BhY7W tf7t4HA8pvIzZLENv+HJZz2y8YeMRmwlpTBWJvB4cEZ2AHLEWR/c3pHFBYrCRZFl p1DEmxFzkoqyT8M9GSseuOazZgnuxGsSTWsP7yCKZzurr0JyimFUKpYsGujzleXa BESySfT2f7PlwsO/Is1/bhV5Zi8xLu7OZw8rA6Q1w8JA9Q767+mGU6EM8eSEjQgR H+jY1zC89Z6hI4i/KeeiS4i5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9y19Tn8A Q0hcMYpMVo326WA1cScwHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzRBM0REMUIyQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVN NzJXTFg3MFdYSExxbm9zTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAqKNPFSPQmhUvsFxE4pZPkOlTu6VD2360y2vgdJpuHAGLifA+gyMmQhdUfoAy ubsVXjtaFWob++jVigVk6orsnDpDWbfF+4d/MmFSlefNUhPvOR52LbU24yBMA1m7 N9zmlBLLmaTVzs9Om+Z3nRjjX6TQlM0q780zyX2J8OpSx/GCKo97REa0+VhcOX3M sJyKyypkuvShq6fN3cFzXsfz68HmwhdTaZt1QDdQTApyumwVFwGMJiflPhpSgeNB fghmjb0wO5Oll/zftVXtuSUs4nRxywle0JFwKUBShn3GbzyLKYM71nsHG5cxE1v/ Z/FaD9Xdu1HbHX8yY38MgLLE -----END CERTIFICATE-----Generated at Wed Mar 4 08:41:19 2026 by rpki-client