$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: KNLQUmhDc1h5XaOraoPNkA93zeRV+IZhd1YnCaRqKj4= Subject key identifier: DF:3E:43:D3:F0:68:BF:8C:BA:FC:9C:4C:0D:41:DE:F5:6C:A2:16:7B Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0C77 Signing time: Tue 24 Mar 2026 18:25:59 +0000 Manifest this update: Tue 24 Mar 2026 18:25:59 +0000 Manifest next update: Tue 31 Mar 2026 18:25:59 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: jq+eN8aMPIS8eECUaCqVU+J2+dfuQT7qmI+vwbrZdpo=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: Mar 24 18:25:59 2026 GMT Not After : Mar 31 18:25:59 2026 GMT Subject: CN=69c2d737-bdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:97:7c:8d:eb:24:20:9f:a8:9d:4f:02:41: 16:16:07:85:f8:d9:45:e1:ce:f4:7e:13:70:3a:9f: 39:d2:ad:76:86:d2:14:cf:37:0b:cd:52:b5:72:85: eb:fe:ad:24:b3:ca:be:ca:39:8d:be:58:b1:83:0c: 78:d5:39:3f:d2:46:dd:fb:e7:6f:96:66:03:4c:5c: 40:e5:91:12:d7:97:ac:3a:8a:d7:9b:2e:cc:67:45: 50:82:af:a6:75:83:6d:1a:29:df:61:4f:5f:54:eb: 09:03:6e:33:52:04:ae:45:5a:c2:74:13:bf:12:80: e0:0f:9a:d1:ca:23:c7:2d:69:2f:87:48:33:63:26: 1f:52:b5:70:00:57:9e:90:48:76:80:0e:bb:5a:78: ca:be:3f:40:79:69:cc:ef:49:80:02:6f:db:f0:27: 35:3b:9d:2f:7a:d1:4e:6f:cc:a3:3c:8c:7b:19:63: 1b:e1:8d:0a:1f:fc:72:6d:1f:6a:f6:00:59:7b:6e: 1d:48:f0:76:12:3b:17:46:49:05:4b:7e:d3:5d:6f: 40:fc:70:27:64:ea:72:14:33:79:21:76:3c:d2:70: 50:83:49:3c:e7:13:16:cb:92:01:84:6c:59:61:d8: 7f:0b:03:ef:2b:73:60:8a:75:1f:7f:23:c3:0e:f2: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:43:D3:F0:68:BF:8C:BA:FC:9C:4C:0D:41:DE:F5:6C:A2:16:7B X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:75:3c:da:4f:f9:10:7e:d3:0d:62:99:04:cc:82:be:ed:20: 76:f0:cf:6b:68:53:a1:52:05:b3:31:92:b4:98:33:5a:f5:b9: b5:77:6f:31:47:59:b2:3f:19:79:75:58:7d:32:14:2d:97:d7: 1f:1f:3c:e4:55:9e:dc:a8:8f:e6:d7:05:bf:06:63:45:c4:02: 6e:53:3b:94:3d:d2:88:91:db:75:fe:3b:21:d5:43:44:aa:57: 91:f3:2c:a3:a2:6f:83:eb:57:03:84:fd:4a:1d:00:2f:42:48: 70:d1:a3:29:ea:f0:93:b1:bd:28:14:3d:d0:f9:ae:2c:76:c1: a1:e9:49:2b:c0:1a:c0:0b:42:99:27:f8:4d:26:d4:57:7a:67: 7b:6a:9b:f2:f3:59:cb:2f:2f:13:50:73:d8:36:d7:0e:f7:3a: 00:b9:d4:a5:11:6c:53:73:62:e0:dd:42:49:ca:1f:23:31:df: 2f:40:df:d3:67:54:5e:d7:d7:b2:c2:a9:17:e9:dc:5e:59:dd: 7b:9e:4e:94:ae:a2:dc:c5:00:59:01:f7:33:81:9c:9b:35:0a: 6a:3e:c1:38:8c:95:92:50:5f:00:ed:4e:05:16:88:5c:43:da: 9e:37:97:25:1e:50:2f:4b:b2:1b:93:74:7d:0c:de:d8:14:7c: 79:a4:00:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjYwMzI0MTgyNTU5WhcNMjYwMzMxMTgyNTU5WjAYMRYwFAYD VQQDEw02OWMyZDczNy1iZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm92XfI3rJCCfqJ1PAkEWFgeF+NlF4c70fhNwOp850q12htIUzzcLzVK1coXr /q0ks8q+yjmNvlixgwx41Tk/0kbd++dvlmYDTFxA5ZES15esOorXmy7MZ0VQgq+m dYNtGinfYU9fVOsJA24zUgSuRVrCdBO/EoDgD5rRyiPHLWkvh0gzYyYfUrVwAFee kEh2gA67WnjKvj9AeWnM70mAAm/b8Cc1O50vetFOb8yjPIx7GWMb4Y0KH/xybR9q 9gBZe24dSPB2EjsXRkkFS37TXW9A/HAnZOpyFDN5IXY80nBQg0k85xMWy5IBhGxZ Ydh/CwPvK3NginUffyPDDvJo7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN8+Q9Pw aL+MuvycTA1B3vVsohZ7MB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGXU82k/5EH7TDWKZBMyCvu0gdvDPa2hToVIFszGStJgzWvW5tXdvMUdZsj8Z eXVYfTIULZfXHx885FWe3KiP5tcFvwZjRcQCblM7lD3SiJHbdf47IdVDRKpXkfMs o6Jvg+tXA4T9Sh0AL0JIcNGjKerwk7G9KBQ90PmuLHbBoelJK8AawAtCmSf4TSbU V3pne2qb8vNZyy8vE1Bz2DbXDvc6ALnUpRFsU3Ni4N1CScofIzHfL0Df02dUXtfX ssKpF+ncXlnde55OlK6i3MUAWQH3M4GcmzUKaj7BOIyVklBfAO1OBRaIXEPanjeX JR5QL0uyG5N0fQze2BR8eaQArw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:44 2026 by rpki-client