$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json) Hash identifier: MDw/MoaLdAfSk3Zmo1+dXT/gWo5hAg9MuBL+jWuuvl0= Subject key identifier: 01:50:9A:33:46:42:0C:9F:86:7E:0E:98:DF:21:D2:3E:F9:85:3C:64 Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft Manifest number: 21 Signing time: Tue 03 Mar 2026 08:30:58 +0000 Manifest this update: Tue 03 Mar 2026 08:30:58 +0000 Manifest next update: Tue 10 Mar 2026 08:30:58 +0000 Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: cPGLAqhaC/7DzZNs96xxRXi0aoKw/z91wNboIXG6J9c=) 2: EE4BF2EAFB5911F0B335DD54496F56BC.roa (hash: eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=) 3: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: 8CNnaJx3H61GgnJxhNhOMmVhr6HZscFPEBcc69eMEC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Mar 3 08:30:58 2026 GMT Not After : Mar 10 08:30:58 2026 GMT Subject: CN=69a69c42-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:d4:5a:a6:3b:52:dd:de:8c:0b:39:79:a7: 9d:c7:7c:43:19:b1:d3:ea:0e:1a:cb:e3:d5:11:c4: 83:d6:ff:15:0e:34:f3:12:99:73:73:8f:48:1e:9e: e3:e6:b5:2d:f1:f4:2f:1c:a2:cd:d4:84:78:0f:a3: b1:87:2c:7a:a7:cb:5f:7c:3c:e8:b6:4e:6c:5a:b8: da:e2:72:cc:2f:a3:1d:df:84:f6:08:74:01:85:6a: 3a:41:c6:e4:f6:99:ac:57:51:b8:d4:3f:8c:33:9f: 35:2a:eb:3b:4e:c5:99:38:71:96:0e:da:1b:fd:00: 50:43:44:86:ac:b8:ff:f3:13:5c:13:53:f7:96:40: 0a:79:bc:3b:bf:4d:e7:b5:42:f3:b5:ae:f4:e1:c3: eb:39:aa:b4:77:6a:4d:7e:2f:78:34:dc:62:e0:a4: c0:c5:e7:d2:18:91:c6:f0:a3:72:4d:0a:de:5c:4a: fd:25:ca:67:73:b9:9c:21:9c:55:d8:8e:ab:19:c9: 76:06:49:e8:e4:2a:05:12:52:3a:e1:95:8d:39:33: 62:1e:76:fc:bf:39:03:db:0a:4d:07:f3:f4:e1:18: 53:5a:46:34:04:79:4e:ec:f2:fb:cc:d0:25:4d:c1: 32:cd:8d:e0:19:ee:a9:cf:25:da:64:8a:3e:10:67: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:9A:33:46:42:0C:9F:86:7E:0E:98:DF:21:D2:3E:F9:85:3C:64 X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e8:77:99:75:3b:1b:d4:c3:d7:26:68:5a:d2:2e:d3:9f:83: a4:62:81:f1:4f:41:ce:62:8d:57:8f:39:bd:9c:21:e5:3e:8c: d0:78:da:94:70:09:a4:e4:5d:b0:83:d4:66:54:f7:b6:7b:5d: 49:a7:ea:93:1b:41:28:d4:2b:2b:d2:47:28:bb:3d:f9:ac:34: 9c:57:55:d7:8b:4f:13:ad:40:93:23:88:11:9d:76:85:88:fe: e2:66:3f:0c:0d:34:41:ab:39:56:12:32:49:7e:2f:65:3a:c4: 2c:7a:7f:b4:33:68:ed:d0:52:a4:e4:a5:4a:9b:6e:cd:bd:97: 3e:2b:f9:db:79:3e:a5:80:8c:38:1c:d1:b7:93:66:1f:9c:22: c2:40:da:fe:24:bf:cb:94:12:e1:13:a0:77:a8:22:7f:5b:e8: e6:94:56:49:74:a8:c7:c9:d3:81:a1:2a:ec:27:c1:ab:71:de: 76:eb:f1:32:a9:5b:fa:05:a9:57:c9:34:40:77:d4:1a:8d:90: 45:2b:3e:f5:75:d3:e9:a7:f3:b6:40:d8:13:07:e3:20:52:82: 73:2d:ea:38:e6:59:91:76:a2:56:db:d3:7d:b0:80:fd:d7:ad: a9:91:1f:fb:ee:3b:4d:94:2a:4e:30:51:59:26:56:6d:ea:38: 07:80:1f:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5NTU0NkI3RTBD MUQxMUM1NzAeFw0yNjAzMDMwODMwNThaFw0yNjAzMTAwODMwNThaMBgxFjAUBgNV BAMTDTY5YTY5YzQyLTNiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ldRapjtS3d6MCzl5p53HfEMZsdPqDhrL49URxIPW/xUONPMSmXNzj0genuPm tS3x9C8cos3UhHgPo7GHLHqny198POi2TmxauNricswvox3fhPYIdAGFajpBxuT2 maxXUbjUP4wznzUq6ztOxZk4cZYO2hv9AFBDRIasuP/zE1wTU/eWQAp5vDu/Tee1 QvO1rvThw+s5qrR3ak1+L3g03GLgpMDF59IYkcbwo3JNCt5cSv0lymdzuZwhnFXY jqsZyXYGSejkKgUSUjrhlY05M2Iedvy/OQPbCk0H8/ThGFNaRjQEeU7s8vvM0CVN wTLNjeAZ7qnPJdpkij4QZ1njAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAVCaM0ZC DJ+Gfg6Y3yHSPvmFPGQwHwYDVR0jBBgwFoAUzq7A6H2VhStEwGE5VUa34MHRHFcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzVDMkQxMDY0RUJD OTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhG Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenE3QTZIMlZoU3RFd0dFNVZVYTM0TUhSSEZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC OTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0 RXdHRTVWVWEzNE1IUkhGYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAY6HeZdTsb1MPXJmha0i7Tn4OkYoHxT0HOYo1Xjzm9nCHlPozQeNqUcAmk5F2w g9RmVPe2e11Jp+qTG0Eo1Csr0kcouz35rDScV1XXi08TrUCTI4gRnXaFiP7iZj8M DTRBqzlWEjJJfi9lOsQsen+0M2jt0FKk5KVKm27NvZc+K/nbeT6lgIw4HNG3k2Yf nCLCQNr+JL/LlBLhE6B3qCJ/W+jmlFZJdKjHydOBoSrsJ8Grcd526/EyqVv6BalX yTRAd9QajZBFKz71ddPpp/O2QNgTB+MgUoJzLeo45lmRdqJW29N9sID9162pkR/7 7jtNlCpOMFFZJlZt6jgHgB+T -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:56 2026 by rpki-client