$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: MS7Aga3Miki0x7OYCuyau8HnnHwaQWVNZxL7f+GZM6s= Subject key identifier: 95:FC:39:EE:A2:9A:E2:A0:F7:53:F4:DB:9C:51:70:D1:1B:34:E6:F4 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 52 Signing time: Tue 03 Mar 2026 07:51:33 +0000 Manifest this update: Tue 03 Mar 2026 07:51:33 +0000 Manifest next update: Tue 10 Mar 2026 07:51:33 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: hS1xB9t6tKzoUTgZ4318iHeCjfF29a6XtjB8YV9i444=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Mar 3 07:51:33 2026 GMT Not After : Mar 10 07:51:33 2026 GMT Subject: CN=69a69305-cfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:c6:ce:00:a4:6b:a7:67:53:3b:48:89:5a: 19:44:ae:8c:9e:02:10:58:a2:e9:d0:65:48:89:91: 7f:82:41:6c:08:b7:cc:62:ff:40:cd:42:18:96:fd: 58:5b:b1:54:bf:d4:ba:6a:a6:0a:ae:84:ba:0c:d4: 49:f2:8d:7d:4a:b6:51:32:e6:71:25:82:ee:92:74: a4:90:dd:a4:6f:68:08:6a:5b:43:ba:a3:3e:ac:ba: 11:1b:d7:17:ed:dc:dc:5e:99:9e:25:bc:f0:29:ca: 03:5e:68:3d:57:48:57:fd:53:e5:7b:06:d3:b0:24: dd:f5:54:0f:41:70:7e:d7:75:34:d7:4a:6f:9e:b8: b3:87:c1:9e:9a:c6:78:4b:dc:83:4b:5e:05:15:92: 0e:cf:e4:b5:65:dd:09:84:b3:19:fb:5f:8a:52:6c: 16:c3:dc:76:b5:e3:18:08:c5:df:90:6f:da:33:78: f6:b1:d2:28:fa:08:91:53:e4:43:e5:48:90:bf:4a: d1:73:d8:b8:0e:3a:0f:ab:d6:ff:29:3f:19:f7:94: 80:d9:3c:5e:bc:c3:d7:50:3a:6c:1d:94:08:de:48: 1b:2f:d2:01:5a:3a:45:eb:ac:9e:23:8d:24:eb:0d: da:b3:30:0b:e9:af:f0:64:6e:fa:bd:48:db:89:1a: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FC:39:EE:A2:9A:E2:A0:F7:53:F4:DB:9C:51:70:D1:1B:34:E6:F4 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:ef:1a:c9:f9:f8:ce:4c:f7:a2:d3:aa:29:25:9b:9f:20: d1:61:b0:33:24:45:f4:af:96:60:e8:1a:bc:7d:c7:aa:07:7f: a9:8e:52:54:f2:a6:c0:22:30:c0:bd:6d:12:91:c9:df:7c:91: 82:d4:6c:cb:71:e7:2a:91:60:ec:5f:6d:31:d5:83:26:99:c9: 11:95:88:89:49:08:4f:c6:5c:8a:42:a1:df:2e:d9:a1:80:fe: a3:39:bb:93:d0:f3:96:7f:71:08:de:b9:a0:88:8f:0f:2b:7b: 8f:45:a8:38:07:7e:d3:03:a8:a5:94:34:d7:da:34:58:cc:98: d7:49:67:c8:42:8b:a9:a5:3d:36:c3:d2:73:0a:bb:b6:d8:69: af:1f:22:c0:de:d0:58:3f:1d:17:d5:ff:16:cd:d9:f6:0e:9d: 4d:b8:29:68:ab:5f:79:19:4a:42:3e:ba:4f:f7:10:04:ed:b2: be:c5:a1:d7:3a:d8:0e:cf:59:58:b0:f6:1a:90:08:0b:89:a8: 70:62:16:c1:d4:3b:64:ee:d5:b7:11:df:a2:01:8f:59:ad:5b: 67:c8:7c:86:9c:d3:67:bb:68:db:94:91:b3:d3:03:91:66:ef: 02:16:36:21:2d:c1:07:02:c9:42:30:0c:f9:7d:3a:2e:1d:79: 3b:77:e4:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNjAzMDMwNzUxMzNaFw0yNjAzMTAwNzUxMzNaMBgxFjAUBgNV BAMTDTY5YTY5MzA1LWNmYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcs8bOAKRrp2dTO0iJWhlEroyeAhBYounQZUiJkX+CQWwIt8xi/0DNQhiW/Vhb sVS/1LpqpgquhLoM1EnyjX1KtlEy5nElgu6SdKSQ3aRvaAhqW0O6oz6suhEb1xft 3NxemZ4lvPApygNeaD1XSFf9U+V7BtOwJN31VA9BcH7XdTTXSm+euLOHwZ6axnhL 3INLXgUVkg7P5LVl3QmEsxn7X4pSbBbD3Ha14xgIxd+Qb9ozePax0ij6CJFT5EPl SJC/StFz2LgOOg+r1v8pPxn3lIDZPF68w9dQOmwdlAjeSBsv0gFaOkXrrJ4jjSTr DdqzMAvpr/Bkbvq9SNuJGla9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlfw57qKa 4qD3U/TbnFFw0Rs05vQwHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA64O8ayfn4zkz3otOqKSWbnyDRYbAzJEX0r5Zg6Bq8fceqB3+pjlJU8qbAIjDA vW0SkcnffJGC1GzLcecqkWDsX20x1YMmmckRlYiJSQhPxlyKQqHfLtmhgP6jObuT 0POWf3EI3rmgiI8PK3uPRag4B37TA6illDTX2jRYzJjXSWfIQouppT02w9JzCru2 2GmvHyLA3tBYPx0X1f8Wzdn2Dp1NuCloq195GUpCPrpP9xAE7bK+xaHXOtgOz1lY sPYakAgLiahwYhbB1Dtk7tW3Ed+iAY9ZrVtnyHyGnNNnu2jblJGz0wORZu8CFjYh LcEHAslCMAz5fTouHXk7d+R6 -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:09 2026 by rpki-client