$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: xGK2eYfkYm22VkVsaEzgt5HhiFA+n4G1r2Hl+sPIlcA= Subject key identifier: 0A:2C:55:33:F7:55:DE:1C:1A:BA:6F:A1:34:C2:A2:03:18:20:19:E0 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 23 Signing time: Tue 03 Mar 2026 08:30:11 +0000 Manifest this update: Tue 03 Mar 2026 08:30:10 +0000 Manifest next update: Tue 10 Mar 2026 08:30:10 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: HWPKidijL3XsjLW8lWM/7sJmSCvxf676NCqng2Wj8mY=) 2: 04A3F314E94211F095EE60383C6F56BC.roa (hash: E/pMPjrg0dCjAeEdBiXHBrQ/2l6q/HpNWw3HPIwPnM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Mar 3 08:30:10 2026 GMT Not After : Mar 10 08:30:10 2026 GMT Subject: CN=69a69c12-e150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c1:94:38:36:b1:96:49:5b:e2:ff:38:75:f9: 20:12:1a:ab:aa:84:62:5e:63:12:4c:9d:6a:61:ec: 66:9e:0e:29:b7:a3:68:77:21:86:96:2c:8f:47:77: 71:ad:47:d4:52:35:f0:ab:97:69:b6:0f:5f:37:f5: ef:cb:5a:0a:de:ef:39:a5:59:dd:fd:89:39:85:be: d2:0d:42:cc:01:29:d5:c7:e7:02:1f:fd:a0:0d:03: 80:4e:5a:3c:1a:87:b3:82:51:88:a1:fb:a8:d3:ba: 6e:42:ed:57:af:91:81:7d:7a:86:98:26:55:59:6a: c4:aa:a8:b1:dc:b0:66:4d:a0:b4:9b:83:a5:3f:2e: 89:9e:6e:9e:ed:d0:4f:6d:43:a8:03:30:f1:dd:07: 16:75:c8:2c:e8:09:32:ba:5e:d6:04:b5:29:3f:cc: 99:1c:4d:cb:af:dd:c8:04:dc:e9:7a:ec:d5:bb:d4: 9e:3f:eb:6a:da:90:ec:64:a2:77:a4:c2:7f:8b:e0: a4:69:72:14:65:98:41:67:3b:94:7b:5b:52:cb:ba: 5f:35:33:86:6c:b6:e3:b3:c5:b5:28:b7:a8:7b:bd: 38:2e:59:7f:50:35:34:21:30:ee:3c:43:98:51:78: ed:95:1e:63:c6:58:48:25:fc:4f:29:18:2e:68:9a: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:55:33:F7:55:DE:1C:1A:BA:6F:A1:34:C2:A2:03:18:20:19:E0 X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:24:43:96:b0:e1:16:10:f0:35:60:ad:96:44:00:2e:f3: 35:13:d1:40:db:58:97:cb:e6:84:5e:73:d4:11:4a:f8:96:5e: 23:0b:e0:d2:4d:41:28:31:98:7f:f3:ce:92:b2:d6:1a:83:fa: 59:31:ec:bc:62:06:11:bb:83:8a:5f:fe:18:98:ec:2d:a7:7d: 02:1b:cd:2f:d3:d7:d3:f1:ab:fa:b8:27:c3:48:8c:0a:0f:70: a7:3c:c9:93:bc:38:a4:cb:f1:95:5e:f6:d6:78:f5:f7:99:5f: 96:be:b8:b9:d8:3e:51:a6:3d:3b:e5:8e:b7:93:f2:79:62:b9: 95:a6:62:88:07:78:ae:34:58:32:0f:3f:d4:ca:a8:fe:46:b8: bc:9c:3f:72:99:7c:d3:c8:39:56:e2:9a:97:4e:c9:68:c8:56: f2:66:b9:9d:d9:fe:52:3f:a7:91:f3:14:ba:38:3c:2f:ed:6f: 3d:04:23:1d:b3:df:41:64:6c:57:a8:40:bb:f7:2a:83:70:0b: 5d:aa:d7:38:cc:b5:6a:65:4e:44:07:f1:f2:9c:4c:c0:69:27: 7d:5d:7e:8f:03:ed:b2:54:16:0e:17:b8:15:62:42:54:93:e7: be:a2:d7:34:da:72:42:9f:16:32:43:92:2a:bc:8a:69:d6:99: 41:13:c7:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjAzMDMwODMwMTBaFw0yNjAzMTAwODMwMTBaMBgxFjAUBgNV BAMTDTY5YTY5YzEyLWUxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2wZQ4NrGWSVvi/zh1+SASGquqhGJeYxJMnWph7GaeDim3o2h3IYaWLI9Hd3Gt R9RSNfCrl2m2D1839e/LWgre7zmlWd39iTmFvtINQswBKdXH5wIf/aANA4BOWjwa h7OCUYih+6jTum5C7VevkYF9eoaYJlVZasSqqLHcsGZNoLSbg6U/Lomebp7t0E9t Q6gDMPHdBxZ1yCzoCTK6XtYEtSk/zJkcTcuv3cgE3Ol67NW71J4/62rakOxkonek wn+L4KRpchRlmEFnO5R7W1LLul81M4ZstuOzxbUot6h7vTguWX9QNTQhMO48Q5hR eO2VHmPGWEgl/E8pGC5omt03AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCixVM/dV 3hwaum+hNMKiAxggGeAwHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8gCRDlrDhFhDwNWCtlkQALvM1E9FA21iXy+aEXnPUEUr4ll4jC+DSTUEoMZh/ 886SstYag/pZMey8YgYRu4OKX/4YmOwtp30CG80v09fT8av6uCfDSIwKD3CnPMmT vDiky/GVXvbWePX3mV+Wvri52D5Rpj075Y63k/J5YrmVpmKIB3iuNFgyDz/Uyqj+ Rri8nD9ymXzTyDlW4pqXTsloyFbyZrmd2f5SP6eR8xS6ODwv7W89BCMds99BZGxX qEC79yqDcAtdqtc4zLVqZU5EB/HynEzAaSd9XX6PA+2yVBYOF7gVYkJUk+e+otc0 2nJCnxYyQ5IqvIpp1plBE8eV -----END CERTIFICATE-----Generated at Wed Mar 4 08:20:30 2026 by rpki-client