$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: MlVixuutgWJLLKRCzkVWBAZp9TsnI8OyyJfia4K/7Qs= Subject key identifier: BA:FD:4E:AF:07:81:9A:0C:BB:D9:A6:CE:7C:FF:E3:3B:C1:70:05:A4 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 07FD Signing time: Tue 24 Mar 2026 20:57:54 +0000 Manifest this update: Tue 24 Mar 2026 20:57:53 +0000 Manifest next update: Tue 31 Mar 2026 20:57:53 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: bSrcus+7ivzQqvhDnTZovCbemVfHYthVjCYRaHOBErU=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: SW8NONF3BcPMwbTZ8+VDTqVbynqlWwj9uJVkA+cU2Rc=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: R5utZReIi+d6n/e9Vi1K+JdkcdHgFbnuHCwwCGe9ti0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: Mar 24 20:57:53 2026 GMT Not After : Mar 31 20:57:53 2026 GMT Subject: CN=69c2fad2-f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c9:4e:db:b3:8c:31:83:95:1e:48:27:20:5b: c9:fa:ef:87:35:5f:fc:74:0c:62:36:35:d7:24:92: 71:35:8b:5d:c1:8e:4d:f0:ae:68:fc:b1:b4:fb:58: 80:a4:26:2d:87:28:c1:80:e1:ed:3c:e4:48:b0:a7: 20:7c:f3:ab:ae:71:84:57:66:ea:c3:77:0b:1a:70: 37:0d:ba:87:35:c4:2c:6e:08:9c:f6:06:01:bb:4f: 35:91:0b:da:24:4a:1c:be:f0:c2:6c:15:81:4f:b2: a3:91:e3:ba:19:98:32:2c:b8:de:91:0e:63:79:54: 73:9c:db:b4:06:89:b9:10:12:81:43:c0:c8:53:37: 74:e6:e7:01:9c:92:aa:cb:ef:6a:98:72:49:b8:91: 5a:58:62:7d:5f:d2:b2:d4:f8:d2:a0:57:38:ea:d0: c4:4f:ae:46:bd:cc:df:ed:fd:ee:7f:7c:8b:2d:21: 5b:77:dc:99:19:b8:f3:0c:f2:e2:9e:6e:d1:3e:e1: 5f:b9:08:cb:dd:3e:ac:09:79:d9:64:cf:04:8f:d4: 9c:5d:62:4c:f7:86:45:39:83:55:1f:cd:a9:2d:5a: c1:a2:55:69:84:07:eb:dd:e4:3a:95:d9:fd:29:44: b3:ea:94:b1:af:b0:b9:f5:50:e0:fe:1e:d7:20:8b: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:4E:AF:07:81:9A:0C:BB:D9:A6:CE:7C:FF:E3:3B:C1:70:05:A4 X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:68:ff:9b:0f:5c:4e:39:85:d1:1f:ea:a8:ae:65:b3:23: 53:2e:51:09:83:72:aa:12:fb:99:b7:ad:29:95:1f:09:96:78: 39:af:94:a3:94:81:d0:12:c1:07:a9:f0:f0:3f:84:39:32:39: cc:7d:d8:db:88:80:b9:25:3f:81:8e:e9:7a:86:b6:33:53:7b: 01:ff:c7:50:2b:17:ca:d3:96:b8:ea:ed:98:da:6a:21:a3:22: 0b:21:0d:22:eb:9f:d5:96:fc:d6:33:b4:92:04:4c:94:ca:6b: 4c:11:49:18:1c:94:8e:5e:80:f3:e4:3a:d8:12:0d:43:89:12: 70:63:2b:7c:1c:f8:ff:a1:12:06:26:a0:09:c1:bb:f7:41:8d: 10:b5:0b:4a:6b:f2:01:a9:3d:9f:75:4f:6d:05:84:4d:19:1a: 63:90:8e:43:7d:3f:82:47:e5:5e:87:fc:9d:27:92:66:d0:f9: 16:90:d8:59:1c:a3:d7:9c:75:d9:d9:c4:5e:99:53:e2:11:d5: d8:32:50:85:14:ca:74:59:19:2d:4d:ea:ef:a8:06:3e:87:a9: 6e:fe:03:35:66:73:c7:30:bc:a9:d1:1a:c3:31:64:a2:d7:3e: 52:84:b6:8f:d4:6e:43:e4:7f:43:c7:42:e2:34:51:76:43:c3: 7c:23:dd:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjYwMzI0MjA1NzUzWhcNMjYwMzMxMjA1NzUzWjAYMRYwFAYD VQQDEw02OWMyZmFkMi1mOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8lO27OMMYOVHkgnIFvJ+u+HNV/8dAxiNjXXJJJxNYtdwY5N8K5o/LG0+1iA pCYthyjBgOHtPORIsKcgfPOrrnGEV2bqw3cLGnA3DbqHNcQsbgic9gYBu081kQva JEocvvDCbBWBT7KjkeO6GZgyLLjekQ5jeVRznNu0Bom5EBKBQ8DIUzd05ucBnJKq y+9qmHJJuJFaWGJ9X9Ky1PjSoFc46tDET65Gvczf7f3uf3yLLSFbd9yZGbjzDPLi nm7RPuFfuQjL3T6sCXnZZM8Ej9ScXWJM94ZFOYNVH82pLVrBolVphAfr3eQ6ldn9 KUSz6pSxr7C59VDg/h7XIIvemwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLr9Tq8H gZoMu9mmznz/4zvBcAWkMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLRo/5sPXE45hdEf6qiuZbMjUy5RCYNyqhL7mbetKZUfCZZ4Oa+Uo5SB0BLB B6nw8D+EOTI5zH3Y24iAuSU/gY7peoa2M1N7Af/HUCsXytOWuOrtmNpqIaMiCyEN Iuuf1Zb81jO0kgRMlMprTBFJGByUjl6A8+Q62BINQ4kScGMrfBz4/6ESBiagCcG7 90GNELULSmvyAak9n3VPbQWETRkaY5COQ30/gkflXof8nSeSZtD5FpDYWRyj15x1 2dnEXplT4hHV2DJQhRTKdFkZLU3q76gGPoepbv4DNWZzxzC8qdEawzFkotc+UoS2 j9RuQ+R/Q8dC4jRRdkPDfCPdKQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:45 2026 by rpki-client