$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: 2KrPd7KoWLB+gD/hk3yvuB54mMXhe5GEhQXv5eRqeIM= Subject key identifier: D7:05:0B:78:36:0E:71:C2:54:6C:1F:DF:A9:7E:D3:1C:E7:D2:FD:06 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: E9 Signing time: Tue 03 Mar 2026 06:02:59 +0000 Manifest this update: Tue 03 Mar 2026 06:02:58 +0000 Manifest next update: Tue 10 Mar 2026 06:02:58 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: eSHJWyosrcQSoMgHUd9OEdT8M6T9bXpjuA/8VTOl69Y=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Mar 3 06:02:58 2026 GMT Not After : Mar 10 06:02:58 2026 GMT Subject: CN=69a67993-1601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:17:a1:03:60:77:91:9c:48:90:60:a6:dd: f0:eb:6f:15:fb:cf:ca:33:f7:08:ea:e5:06:60:7e: 4d:e2:3f:8d:b4:e8:98:50:92:1d:98:fb:82:0c:3b: 7c:75:6a:c1:f5:73:d1:60:73:d5:77:21:7e:07:62: 30:0a:07:83:ce:36:dd:f4:3b:40:9a:3b:91:a4:ed: 8a:7d:55:72:6a:c4:df:0e:ae:73:d5:36:ba:5b:6e: 1a:c7:1c:ba:3c:7f:f2:dc:e2:76:c3:c0:ed:07:01: ab:49:b7:90:13:cf:df:af:43:90:7c:9e:95:63:a5: 72:3a:37:ed:22:00:10:84:fe:fd:52:71:82:84:7a: b8:e9:14:fc:3b:e9:95:54:0c:1b:d3:83:45:9c:99: da:76:2b:28:a4:7f:df:90:14:f8:0e:92:b9:65:28: 26:73:88:7b:f8:3d:67:8e:0c:05:55:20:7c:2b:ef: 40:0c:48:ad:e6:b2:72:4a:a3:c5:24:6d:6d:1c:f9: 21:bb:c3:b6:ca:43:08:79:94:2a:c5:b5:12:df:3b: d1:d9:44:c6:ca:5f:0e:fb:dd:63:77:45:4f:99:d7: 15:b5:1d:af:fa:49:17:00:ea:46:f6:09:ca:9f:dd: 01:db:a4:ff:7c:70:c4:27:c1:62:36:24:aa:a7:32: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:05:0B:78:36:0E:71:C2:54:6C:1F:DF:A9:7E:D3:1C:E7:D2:FD:06 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:20:ae:09:1e:de:78:5a:48:96:ab:a6:c7:2d:19:f0:82:b6: 9a:8e:d4:96:b8:d2:79:8a:4b:04:6f:91:5e:5f:f3:ec:5f:f8: f0:2c:2c:04:f9:8f:68:ec:4d:6b:8d:82:ee:68:d7:7c:d6:7f: 5d:7b:a2:d3:3e:74:25:d6:74:21:a5:24:6d:7a:5d:e6:5b:8f: be:9b:69:e7:46:2a:ee:9f:30:d2:25:b3:c7:d5:6c:59:ae:55: df:05:08:e2:37:fa:b4:d9:18:29:d6:0b:a7:5b:52:b4:0b:c0: 56:2a:55:69:92:90:87:8e:db:8f:88:a4:f7:11:d7:69:bd:64: 56:61:57:37:61:db:e9:56:56:73:74:99:e6:f1:f9:2b:1b:20: d3:64:4f:47:fd:bc:94:6d:a1:e5:72:60:2b:54:4c:4e:fa:90: 47:55:b9:b6:98:be:de:0a:9c:ce:9f:f4:d8:ad:0a:f1:ce:f6: 86:15:95:07:8d:6f:08:f0:c8:7c:7e:ca:56:49:20:5f:92:6f: ca:c1:48:b5:4e:27:09:b6:ef:38:28:ff:de:00:0a:0c:1c:47: 16:e8:aa:33:29:b3:a1:09:6d:9a:01:9a:41:a6:cc:89:ca:44: fc:26:2d:18:fc:89:43:90:53:81:5f:ce:a2:7b:39:b3:83:10: be:a8:8d:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjYwMzAzMDYwMjU4WhcNMjYwMzEwMDYwMjU4WjAYMRYwFAYD VQQDEw02OWE2Nzk5My0xNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArksXoQNgd5GcSJBgpt3w628V+8/KM/cI6uUGYH5N4j+NtOiYUJIdmPuCDDt8 dWrB9XPRYHPVdyF+B2IwCgeDzjbd9DtAmjuRpO2KfVVyasTfDq5z1Ta6W24axxy6 PH/y3OJ2w8DtBwGrSbeQE8/fr0OQfJ6VY6VyOjftIgAQhP79UnGChHq46RT8O+mV VAwb04NFnJnadisopH/fkBT4DpK5ZSgmc4h7+D1njgwFVSB8K+9ADEit5rJySqPF JG1tHPkhu8O2ykMIeZQqxbUS3zvR2UTGyl8O+91jd0VPmdcVtR2v+kkXAOpG9gnK n90B26T/fHDEJ8FiNiSqpzIiHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcFC3g2 DnHCVGwf36l+0xzn0v0GMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSCuCR7eeFpIlqumxy0Z8IK2mo7UlrjSeYpLBG+RXl/z7F/48CwsBPmPaOxN a42C7mjXfNZ/XXui0z50JdZ0IaUkbXpd5luPvptp50Yq7p8w0iWzx9VsWa5V3wUI 4jf6tNkYKdYLp1tStAvAVipVaZKQh47bj4ik9xHXab1kVmFXN2Hb6VZWc3SZ5vH5 Kxsg02RPR/28lG2h5XJgK1RMTvqQR1W5tpi+3gqczp/02K0K8c72hhWVB41vCPDI fH7KVkkgX5JvysFItU4nCbbvOCj/3gAKDBxHFuiqMymzoQltmgGaQabMicpE/CYt GPyJQ5BTgV/Oons5s4MQvqiN2w== -----END CERTIFICATE-----Generated at Wed Mar 4 08:24:09 2026 by rpki-client