$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: akJpJILF1QAJnnHhsNJd6T0zRLEnHlul1GZZAk1Nih0= Subject key identifier: 10:27:08:10:2D:9A:3F:73:1F:E8:78:B1:8D:4E:3F:F3:36:9E:C5:BD Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 251C Signing time: Fri 06 Mar 2026 15:40:14 +0000 Manifest this update: Fri 06 Mar 2026 15:40:14 +0000 Manifest next update: Fri 13 Mar 2026 15:40:14 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: xc974iCf6llBUVKZzP7ZR1s+OJe/y+2HcO7Z10RZdtY=) 2: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: cElICATR0lwG51iK+/dfA9tn8Dsne03XwCHtnpMdsVc=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: oAPFqh7JlYzzoOFTZFjvYHDih/9V54IJj2eqz87eTwA=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: i5b2+LERDCQarikCUvYju79lG476god+IalkVg/Oozo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9529 (0x2539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Mar 6 15:40:14 2026 GMT Not After : Mar 13 15:40:14 2026 GMT Subject: CN=69aaf55e-e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:7a:bc:79:d6:10:30:32:41:b6:2a:8b:d1: 39:ec:44:0d:c3:b9:e4:4a:84:a4:0c:3a:be:e5:eb: 6a:eb:b1:b1:7a:3a:fb:0b:84:73:cb:64:79:d2:e1: c2:8e:49:76:f2:ab:52:6f:0c:50:e1:25:52:e1:7b: 48:39:c5:bb:39:83:22:eb:a2:b6:bd:0f:07:09:35: bc:e8:06:0e:a0:80:51:49:e2:39:b4:b5:e3:c7:f1: 97:d9:37:eb:df:c9:a5:88:b9:58:2c:c6:ab:72:83: 04:65:18:bb:76:fd:36:fa:32:11:ba:58:8e:db:16: 42:15:40:18:18:6b:15:5d:10:0d:01:81:6e:2a:7e: 9e:f6:57:3f:b4:5c:19:26:3d:ce:87:0c:8b:65:b2: 63:34:0c:5a:2c:62:ce:c4:b8:7b:9b:e1:dd:bc:c9: 46:57:3b:43:7a:29:50:9b:cc:ec:4a:da:09:f1:0f: f7:c0:7f:f7:3e:57:47:e7:1e:f9:98:33:93:34:7d: 43:a1:c0:3a:7d:6c:7c:3a:d0:14:22:52:65:a9:99: 43:5c:56:5c:84:d7:3b:cd:b6:2b:e4:96:b7:7d:1d: fa:8a:fe:4e:d3:5e:c4:48:17:af:67:0b:2a:36:0b: 98:5d:0c:5c:d4:6c:1a:b1:6b:32:ca:ee:ae:02:c9: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:27:08:10:2D:9A:3F:73:1F:E8:78:B1:8D:4E:3F:F3:36:9E:C5:BD X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9b:14:49:d5:33:3f:5a:5b:ef:9e:df:85:77:a7:ad:fd:87: 14:1f:6c:55:36:b7:e6:9a:ce:9f:ca:a8:3f:d3:8b:a8:91:ce: 47:84:8b:67:f7:a7:c7:7b:40:94:e0:9b:3a:b0:61:e2:07:7f: 6d:bb:29:ad:37:19:c8:df:a8:09:a9:3b:c4:e6:de:9e:55:0f: f2:41:b3:8a:34:66:83:62:4d:dd:cd:c6:0c:e7:3a:7d:81:c9: 0b:62:b8:86:9f:32:3b:29:23:e2:06:e9:03:34:3b:5b:ab:82: 80:0e:00:b1:88:33:0e:30:bb:8a:7e:a1:54:99:58:c1:2e:57: 97:18:ac:6d:81:39:fa:70:6b:d9:c3:6b:c3:99:35:24:8d:62: 7b:7d:7e:21:a7:2e:98:e9:c7:70:2d:d6:84:eb:cb:64:3b:ab: 18:b6:ce:d9:4f:9a:4b:dc:f8:e2:33:c9:0e:a4:43:ec:40:89: f7:42:e3:e4:ae:14:29:6a:e5:f7:18:ae:9e:98:55:3c:14:ea: d7:1e:e9:52:9c:14:0d:aa:a9:35:37:13:bd:1a:8a:37:17:ab: 2c:9b:87:e2:0b:72:ca:c9:0e:20:9d:e8:61:42:a8:08:ba:18: a3:22:a5:27:74:89:32:81:1c:30:17:10:b0:b3:95:f5:05:4f: 4e:32:95:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwMzA2MTU0MDE0WhcNMjYwMzEzMTU0MDE0WjAYMRYwFAYD VQQDEw02OWFhZjU1ZS1lMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JB6vHnWEDAyQbYqi9E57EQNw7nkSoSkDDq+5etq67Gxejr7C4Rzy2R50uHC jkl28qtSbwxQ4SVS4XtIOcW7OYMi66K2vQ8HCTW86AYOoIBRSeI5tLXjx/GX2Tfr 38mliLlYLMarcoMEZRi7dv02+jIRuliO2xZCFUAYGGsVXRANAYFuKn6e9lc/tFwZ Jj3OhwyLZbJjNAxaLGLOxLh7m+HdvMlGVztDeilQm8zsStoJ8Q/3wH/3PldH5x75 mDOTNH1DocA6fWx8OtAUIlJlqZlDXFZchNc7zbYr5Ja3fR36iv5O017ESBevZwsq NguYXQxc1GwasWsyyu6uAsmanwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAnCBAt mj9zH+h4sY1OP/M2nsW9MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMpsUSdUzP1pb757fhXenrf2HFB9sVTa35prOn8qoP9OLqJHOR4SLZ/enx3tA lOCbOrBh4gd/bbsprTcZyN+oCak7xObenlUP8kGzijRmg2JN3c3GDOc6fYHJC2K4 hp8yOykj4gbpAzQ7W6uCgA4AsYgzDjC7in6hVJlYwS5XlxisbYE5+nBr2cNrw5k1 JI1ie31+IacumOnHcC3WhOvLZDurGLbO2U+aS9z44jPJDqRD7ECJ90Lj5K4UKWrl 9xiunphVPBTq1x7pUpwUDaqpNTcTvRqKNxerLJuH4gtyyskOIJ3oYUKoCLoYoyKl J3SJMoEcMBcQsLOV9QVPTjKVQg== -----END CERTIFICATE-----Generated at Sat Mar 7 18:24:38 2026 by rpki-client