$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: wOsps0gNIpbKURm16nwFG9DpX8hfSNiM3fYFNAtILzk= Subject key identifier: 3B:A6:0A:D3:AB:A3:F4:51:1D:F2:72:E2:69:AF:53:31:D0:41:16:2C Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 06CE Signing time: Tue 24 Mar 2026 21:57:55 +0000 Manifest this update: Tue 24 Mar 2026 21:57:55 +0000 Manifest next update: Tue 31 Mar 2026 21:57:55 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: aIqfZCekFIWjO+QL017h03tQ2mut+myOic2XbwROj7E=) 2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) 3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Mar 24 21:57:55 2026 GMT Not After : Mar 31 21:57:55 2026 GMT Subject: CN=69c308e3-314b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:f7:25:f1:2c:cb:ce:72:c1:2d:fa:4e:02: 36:ab:ea:0d:8f:5c:33:ac:ab:86:c0:43:66:48:22: 0d:49:fc:b0:70:e4:23:92:93:d5:ee:d0:63:71:23: 35:ae:b6:8b:6b:35:9e:3e:cd:d7:41:aa:8b:b6:00: 47:35:64:48:b1:84:73:c7:a7:c2:07:b8:01:61:5e: c5:bb:c0:92:d0:c1:f4:ee:bd:15:e7:8a:4d:5b:45: 99:ce:bf:37:f8:06:7e:8e:50:2c:f2:3f:31:7b:bf: c3:32:97:cb:6e:cb:ee:d9:6b:8b:2a:cb:c1:03:aa: 99:80:22:dc:91:3d:ce:04:fb:7c:75:c4:d8:21:29: b7:fd:0a:0a:d9:9f:3f:98:0f:a4:b6:60:fc:88:f3: 5f:ba:a6:59:1a:98:a8:3f:21:a2:7c:21:28:5b:f6: 7d:46:6d:df:3c:3c:50:e6:86:54:0a:28:66:b0:29: 74:34:3c:b4:01:ab:fa:04:44:c2:ed:1e:ca:61:8f: 4c:e2:30:fe:47:ff:a3:36:3e:7c:d0:c3:22:ae:9c: f4:e0:df:49:05:19:24:3e:dd:2e:86:ca:f4:29:5e: ef:d4:1e:c7:a6:69:6c:56:43:8a:7e:a9:20:3c:13: ac:5c:b3:ba:55:c9:a7:3f:33:87:53:78:bd:7c:60: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A6:0A:D3:AB:A3:F4:51:1D:F2:72:E2:69:AF:53:31:D0:41:16:2C X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:1b:5b:70:59:47:cb:a6:ad:6e:14:52:f1:9d:ca:b8:a5: 11:30:62:7b:13:e4:a4:26:36:f2:a5:eb:46:6f:1e:a9:82:6d: 20:42:8c:99:3e:52:b5:3f:87:d0:c2:d1:02:60:8b:20:d0:4b: d0:02:9b:6f:f7:a0:b2:84:95:fc:f2:db:30:a6:a3:29:24:00: ad:03:02:b4:ad:71:90:b4:b8:65:1a:27:0a:81:0b:8f:83:fd: 55:90:b7:3d:4a:35:cf:18:7f:7f:5a:e8:93:65:49:f8:d9:d7: 24:8e:51:c5:92:83:72:9f:e2:72:22:ed:a2:6e:2e:25:47:8c: fc:7b:55:2a:a1:81:bc:c3:bb:45:7d:a7:92:41:7c:41:03:96: 83:32:c6:3f:08:93:54:fe:13:de:6a:a7:44:69:3a:c2:a9:15: 1f:ff:2e:37:0c:31:ae:00:ca:2a:d1:65:44:88:ed:b4:65:72: c0:ff:a1:1c:5b:b8:db:90:80:93:0f:6f:60:31:4b:b4:25:5b: 83:43:65:6c:b9:b9:25:60:15:5d:3c:53:28:a7:bf:71:8f:98: c9:09:d7:2b:e0:1a:c6:58:2e:03:04:89:31:bb:c6:1b:bf:05: 28:53:65:41:54:4d:4b:bd:29:33:b0:93:17:50:77:aa:e7:cd: 3b:e0:63:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwMzI0MjE1NzU1WhcNMjYwMzMxMjE1NzU1WjAYMRYwFAYD VQQDEw02OWMzMDhlMy0zMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Jf3JfEsy85ywS36TgI2q+oNj1wzrKuGwENmSCINSfywcOQjkpPV7tBjcSM1 rraLazWePs3XQaqLtgBHNWRIsYRzx6fCB7gBYV7Fu8CS0MH07r0V54pNW0WZzr83 +AZ+jlAs8j8xe7/DMpfLbsvu2WuLKsvBA6qZgCLckT3OBPt8dcTYISm3/QoK2Z8/ mA+ktmD8iPNfuqZZGpioPyGifCEoW/Z9Rm3fPDxQ5oZUCihmsCl0NDy0Aav6BETC 7R7KYY9M4jD+R/+jNj580MMirpz04N9JBRkkPt0uhsr0KV7v1B7HpmlsVkOKfqkg PBOsXLO6VcmnPzOHU3i9fGDYMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDumCtOr o/RRHfJy4mmvUzHQQRYsMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIlUbW3BZR8umrW4UUvGdyrilETBiexPkpCY28qXrRm8eqYJtIEKMmT5StT+H 0MLRAmCLINBL0AKbb/egsoSV/PLbMKajKSQArQMCtK1xkLS4ZRonCoELj4P9VZC3 PUo1zxh/f1rok2VJ+NnXJI5RxZKDcp/iciLtom4uJUeM/HtVKqGBvMO7RX2nkkF8 QQOWgzLGPwiTVP4T3mqnRGk6wqkVH/8uNwwxrgDKKtFlRIjttGVywP+hHFu425CA kw9vYDFLtCVbg0NlbLm5JWAVXTxTKKe/cY+YyQnXK+AaxlguAwSJMbvGG78FKFNl QVRNS70pM7CTF1B3qufNO+Bj0g== -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:12 2026 by rpki-client