$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: qBusM9NNaMEjIJg4jqvXgQ6Miukz5u95kIrIeFQZrbU= Subject key identifier: 24:EE:C4:F6:CC:36:34:3B:F9:25:4B:95:D5:C0:57:17:18:1D:61:C1 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A55 Signing time: Tue 24 Mar 2026 19:27:32 +0000 Manifest this update: Tue 24 Mar 2026 19:27:31 +0000 Manifest next update: Tue 31 Mar 2026 19:27:31 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: 765oeKnAE/vJLC8C7bfJpQPO3N4uu0wzmnL4xvrsNLc=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Mar 24 19:27:31 2026 GMT Not After : Mar 31 19:27:31 2026 GMT Subject: CN=69c2e5a4-8f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:ea:7b:a5:49:09:09:dc:46:ac:df:9b:f7: fd:95:16:23:f1:dc:a2:60:75:2a:7f:50:c5:76:e1: 26:e1:7a:62:06:6a:a4:91:57:9e:41:78:03:c7:02: b5:2a:d2:dd:10:6f:9f:6f:a2:ab:83:01:69:61:30: 2a:e1:89:9a:41:77:64:d0:ac:58:83:cf:ab:4d:3e: 8a:d7:ac:8f:f6:21:3a:4b:be:a9:07:fb:4b:18:82: 81:68:27:ad:26:b1:c4:36:65:68:dd:30:12:00:fc: 2d:87:45:af:ff:d1:3e:f6:99:46:b9:fb:7d:76:3b: 4d:41:a3:8d:19:f5:78:61:40:7d:f5:fa:c7:ce:c5: fb:fc:74:80:80:c1:82:83:24:1d:4f:2b:69:ab:09: 7f:32:38:de:2f:14:51:4e:99:f8:85:23:51:6e:09: 93:1e:ee:48:90:e0:c4:fd:8b:30:c5:9d:0c:79:f8: b1:c1:8d:8d:e1:bd:5a:69:8d:1b:56:36:db:93:68: 79:4e:a3:51:e1:b3:72:ea:55:09:7d:54:57:ae:8e: 6d:be:b7:d5:87:cc:53:1e:af:73:f5:54:ef:98:b6: ae:14:57:42:64:fd:18:3c:a1:ab:a6:9b:92:cf:78: 0a:03:e2:67:9a:05:7c:66:79:b4:0b:36:29:3a:14: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EE:C4:F6:CC:36:34:3B:F9:25:4B:95:D5:C0:57:17:18:1D:61:C1 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c7:56:03:e6:82:0d:35:b3:a8:fa:5c:3e:a2:3b:26:cf:a2: 71:3a:29:e6:4c:2c:eb:94:a8:f2:95:c5:40:d5:e0:83:9c:11: b0:5a:4c:60:cf:e8:2d:2d:a5:a3:67:53:05:6c:08:85:0c:9b: fc:22:20:d1:1a:ad:b4:04:29:58:06:22:67:55:75:82:8d:da: 66:4d:b3:2d:cc:21:6c:0f:94:64:4a:22:88:1f:fc:bf:46:90: de:c7:0f:79:b0:65:a8:13:6e:43:0c:34:fc:60:a4:9c:24:25: b9:93:99:85:56:c4:aa:26:0d:db:89:a6:7a:1d:23:59:1e:a6: 4e:67:7c:43:b3:4b:4e:e4:0d:9c:b0:5d:73:26:70:5d:95:d7: 89:3f:a3:f3:8b:3d:1c:12:20:80:c5:5f:1c:94:29:b5:e9:f8: e5:b4:bf:2f:44:17:a0:19:01:c9:60:ab:b7:f3:ea:94:c7:a8: 3a:48:c1:a6:df:09:71:91:9c:69:9c:f2:19:8c:3a:99:ab:4d: 0c:b5:c6:59:ae:8e:72:9b:f0:78:53:d3:30:4d:2a:52:45:8b: c0:6e:3e:31:36:40:60:15:89:e9:64:de:a8:a8:aa:9a:26:55: aa:5d:79:f8:a0:45:dc:e7:6c:ed:02:a1:ad:39:f5:d1:b3:39: 9d:85:dd:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjYwMzI0MTkyNzMxWhcNMjYwMzMxMTkyNzMxWjAYMRYwFAYD VQQDEw02OWMyZTVhNC04ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6brqe6VJCQncRqzfm/f9lRYj8dyiYHUqf1DFduEm4XpiBmqkkVeeQXgDxwK1 KtLdEG+fb6KrgwFpYTAq4YmaQXdk0KxYg8+rTT6K16yP9iE6S76pB/tLGIKBaCet JrHENmVo3TASAPwth0Wv/9E+9plGuft9djtNQaONGfV4YUB99frHzsX7/HSAgMGC gyQdTytpqwl/MjjeLxRRTpn4hSNRbgmTHu5IkODE/YswxZ0MefixwY2N4b1aaY0b Vjbbk2h5TqNR4bNy6lUJfVRXro5tvrfVh8xTHq9z9VTvmLauFFdCZP0YPKGrppuS z3gKA+JnmgV8Znm0CzYpOhT1FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTuxPbM NjQ7+SVLldXAVxcYHWHBMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcdWA+aCDTWzqPpcPqI7Js+icTop5kws65So8pXFQNXgg5wRsFpMYM/oLS2l o2dTBWwIhQyb/CIg0RqttAQpWAYiZ1V1go3aZk2zLcwhbA+UZEoiiB/8v0aQ3scP ebBlqBNuQww0/GCknCQluZOZhVbEqiYN24mmeh0jWR6mTmd8Q7NLTuQNnLBdcyZw XZXXiT+j84s9HBIggMVfHJQpten45bS/L0QXoBkByWCrt/PqlMeoOkjBpt8JcZGc aZzyGYw6matNDLXGWa6OcpvweFPTME0qUkWLwG4+MTZAYBWJ6WTeqKiqmiZVql15 +KBF3Ods7QKhrTn10bM5nYXdaA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:10 2026 by rpki-client