$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: UIYFuED1z79hDPORt2/0A8y5hJrfJiqkw6Pu32v892s= Subject key identifier: 7F:6F:B4:C1:CF:90:5D:78:C7:E0:34:29:00:95:D2:FB:B6:F2:C9:30 Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 0709 Signing time: Tue 24 Mar 2026 21:44:35 +0000 Manifest this update: Tue 24 Mar 2026 21:44:35 +0000 Manifest next update: Tue 31 Mar 2026 21:44:35 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: qoOKyzY4yXf2HEG+cNM6U5HXr0VOx9WwkHTWVT6av+I=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: kfNHjmM4llhwfmGMMRHrrJHm+acq8kgyjCe1MOK7NGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: Mar 24 21:44:35 2026 GMT Not After : Mar 31 21:44:35 2026 GMT Subject: CN=69c305c3-59b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:29:81:5f:92:24:18:87:d3:8d:6a:a8:fd: 36:20:95:ed:ae:31:54:85:ea:90:40:eb:be:d0:d6: 08:cb:9f:18:3a:a3:fb:ab:ec:ed:7b:5b:b7:57:10: b1:71:de:e5:e2:b9:d1:df:19:81:31:8a:6f:73:70: 6e:d6:76:03:6e:13:e9:f7:5b:93:96:63:fe:2f:c7: 02:4a:c3:36:49:ef:28:58:f5:8e:d0:bb:0f:c3:ea: 55:1a:68:8c:de:8f:a6:2e:3e:35:c7:c8:15:ff:49: 68:e3:a5:df:32:d7:03:cd:d9:b6:b4:29:90:1e:a7: 5a:2e:71:ad:80:3b:4c:2a:8c:45:d3:99:e1:e1:4c: b3:41:fd:b7:7a:75:af:3f:08:9e:1f:fc:10:ca:b5: 35:e4:55:83:c1:ac:e9:9d:51:31:17:2e:f4:5e:21: 69:59:97:a7:24:17:86:23:1b:c0:67:c7:eb:27:2f: 5c:18:c7:76:48:3e:68:04:0a:a3:fa:97:17:6f:7f: 51:5e:1b:e2:01:f0:2c:51:0d:5c:0c:e8:13:75:88: 68:20:29:ab:e8:1b:12:10:e3:6f:85:73:ac:04:bd: 8b:12:07:6e:b7:4d:10:3f:ba:24:53:52:36:77:d5: 56:70:1c:57:50:c8:fd:a4:bd:7f:95:ff:33:73:e2: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6F:B4:C1:CF:90:5D:78:C7:E0:34:29:00:95:D2:FB:B6:F2:C9:30 X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a1:72:cb:25:28:c9:49:b0:f7:79:89:97:de:7a:d1:d2:11: c3:4e:28:e1:c0:a1:9f:ef:6a:29:9d:2d:f6:fd:d6:74:68:b1: 6d:00:42:3f:39:4c:30:1d:be:94:62:56:4f:e6:31:79:ae:d7: 51:c1:da:de:28:cc:f5:5c:03:38:f0:03:7a:3a:47:08:e2:51: 43:89:07:9e:bf:97:4f:fc:4e:14:4f:6a:b1:07:34:51:e3:10: 50:04:27:20:1d:c9:0c:6b:94:37:58:89:85:5b:9a:79:e4:d4: 20:b2:d7:fa:1b:5b:57:06:49:1f:30:14:e6:79:b5:b3:aa:15: 4f:b9:bb:a5:bf:a9:31:48:ca:85:e4:1d:fe:ab:10:4c:2c:d9: e4:ee:a9:5c:82:d8:d9:21:fb:14:36:06:af:4f:7e:52:2b:c9: ea:8f:a6:b9:23:71:1a:b7:08:c0:cb:ca:dd:24:8d:b1:b4:d8: fa:75:df:9f:93:63:df:0a:b9:07:55:63:8d:d4:3f:d9:c2:12: 8b:3e:60:8a:27:88:2b:31:ea:f0:e4:79:14:29:a4:38:04:21: e1:1e:0c:7b:bc:ab:79:1e:c4:79:7c:ba:f5:b0:e8:db:32:45: 9e:b1:13:c0:1f:fd:b8:34:69:40:c9:58:9d:af:79:73:91:34: 4c:6b:3c:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjYwMzI0MjE0NDM1WhcNMjYwMzMxMjE0NDM1WjAYMRYwFAYD VQQDEw02OWMzMDVjMy01OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRgpgV+SJBiH041qqP02IJXtrjFUheqQQOu+0NYIy58YOqP7q+zte1u3VxCx cd7l4rnR3xmBMYpvc3Bu1nYDbhPp91uTlmP+L8cCSsM2Se8oWPWO0LsPw+pVGmiM 3o+mLj41x8gV/0lo46XfMtcDzdm2tCmQHqdaLnGtgDtMKoxF05nh4UyzQf23enWv PwieH/wQyrU15FWDwazpnVExFy70XiFpWZenJBeGIxvAZ8frJy9cGMd2SD5oBAqj +pcXb39RXhviAfAsUQ1cDOgTdYhoICmr6BsSEONvhXOsBL2LEgdut00QP7okU1I2 d9VWcBxXUMj9pL1/lf8zc+KMsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9vtMHP kF14x+A0KQCV0vu28skwMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6FyyyUoyUmw93mJl9560dIRw04o4cChn+9qKZ0t9v3WdGixbQBCPzlMMB2+ lGJWT+Yxea7XUcHa3ijM9VwDOPADejpHCOJRQ4kHnr+XT/xOFE9qsQc0UeMQUAQn IB3JDGuUN1iJhVuaeeTUILLX+htbVwZJHzAU5nm1s6oVT7m7pb+pMUjKheQd/qsQ TCzZ5O6pXILY2SH7FDYGr09+UivJ6o+muSNxGrcIwMvK3SSNsbTY+nXfn5Nj3wq5 B1VjjdQ/2cISiz5giieIKzHq8OR5FCmkOAQh4R4Me7yreR7EeXy69bDo2zJFnrET wB/9uDRpQMlYna95c5E0TGs8yQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:02 2026 by rpki-client