$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: fSISqmYnX+As08ZjthEhcTLY14isES/RqI+PzAntimk= Subject key identifier: 42:D5:70:BA:55:EB:66:BD:BF:F4:68:3C:A4:BF:C5:6A:37:DA:ED:89 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 0757 Signing time: Tue 24 Mar 2026 21:48:31 +0000 Manifest this update: Tue 24 Mar 2026 21:48:31 +0000 Manifest next update: Tue 31 Mar 2026 21:48:31 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: tNzpBI53WUnM0MXIsm1Xms4ki9C+9DgZYSna0z59s7A=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: mEYGjaNN5jDYnCeSiBe6hdOluvdI6s67MbAh10UyMUA=) 3: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: dqu+IGrDwQGnaCXjrPhpRpLVWhrg7vjaTG4OX0l2hO4=) 4: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: Mgc4frtsf2+Mk4kqhvP9ShsUUEAvGd8n3hXxY5uC1m4=) 5: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: Z5HvLfJRCWWPtpANNACtMj7b18F6vbfNbpJjSdS2KbM=) 6: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: gDwp6KKgBGoLeRcHe+lBeS3zF2+f120cEyNPP+dhw54=) 7: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: JTfIQDzlma+BMDLHgBpGIyVgGKJ2u7QeJy1k4YDsRZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Mar 24 21:48:31 2026 GMT Not After : Mar 31 21:48:31 2026 GMT Subject: CN=69c306af-2370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:f5:bb:fe:21:bd:68:b8:0d:e9:da:00:e6: dc:2c:3d:b9:1f:c6:9f:c4:28:21:f8:91:97:01:7d: 0b:39:d8:81:e6:00:fb:15:f6:ac:48:25:15:f3:17: 83:9c:bc:28:d1:88:fb:67:49:c5:43:3a:f8:3a:06: 22:3d:c3:e6:cf:af:e1:84:a0:73:a6:14:f8:88:94: 46:43:70:82:22:b5:46:37:3c:a4:dd:69:73:a5:4b: bb:85:c7:36:0c:b9:a6:b8:57:8e:5d:a5:c8:4a:a7: 12:62:fb:6e:f7:44:4b:df:c6:ff:e8:72:29:ae:3f: 48:3a:43:78:6a:cc:ab:e3:39:9c:d2:3a:2b:53:a3: 91:29:eb:4b:0c:12:b6:c7:5c:2c:15:4f:11:c9:eb: eb:9c:ae:5d:26:ba:7f:10:91:30:74:8d:6c:0e:9c: af:27:8f:92:9b:ef:ff:34:a4:8c:0d:38:54:96:21: dd:9f:18:b8:a6:b6:7b:36:fd:91:fc:57:bb:32:05: 90:50:f9:b6:04:63:8b:47:5d:d6:3f:c6:fc:1e:1e: ef:4f:df:10:e0:4c:2f:45:c2:09:67:cc:29:0c:83: c7:46:db:d3:b2:9c:db:6f:41:7c:a0:5b:1f:30:a0: cc:6d:da:40:da:79:3c:62:62:c3:70:e4:1e:bd:eb: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:70:BA:55:EB:66:BD:BF:F4:68:3C:A4:BF:C5:6A:37:DA:ED:89 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a8:68:fb:df:2d:cb:0c:09:ba:9f:e3:9d:c0:70:25:27:66: da:e4:da:1c:f7:0c:a6:df:72:ae:c0:28:95:09:3a:8f:96:95: 0a:d6:84:29:7c:60:90:42:8a:97:89:49:6e:67:72:66:e2:6d: 08:da:e8:86:fa:85:1b:37:2d:03:a9:3a:fa:28:a0:25:c3:ff: 1c:77:37:06:06:ab:ec:f4:18:a1:79:39:7d:e3:4f:3e:36:96: e4:25:eb:40:70:b3:aa:61:5c:52:c2:a1:61:4a:af:33:d8:18: 4c:ab:f7:60:ab:65:86:fb:9c:ab:2e:ef:3b:37:53:a9:55:30: 4c:e6:d8:d3:82:46:09:fa:d6:4d:1c:b4:3d:c6:bb:90:e5:ad: b9:03:39:bd:d0:cb:e6:b1:92:9e:1f:a8:f6:70:4c:4c:bf:4f: 83:cb:88:a2:e7:6f:1c:bb:4e:a0:db:12:a7:7a:dc:08:0f:51: 11:28:b4:65:f4:68:1c:39:e9:85:10:56:10:f1:b2:37:f9:01: a0:3a:ab:56:d6:75:49:97:79:e7:b6:3d:11:9f:25:e5:a4:42: c9:30:5a:fe:c6:f1:e9:ba:02:ae:56:2a:f6:5c:33:81:b4:71: 0b:1c:92:a2:ae:36:5e:b3:0d:37:73:85:b8:28:21:01:8b:7d: b2:d5:84:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwMzI0MjE0ODMxWhcNMjYwMzMxMjE0ODMxWjAYMRYwFAYD VQQDEw02OWMzMDZhZi0yMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJr1u/4hvWi4DenaAObcLD25H8afxCgh+JGXAX0LOdiB5gD7FfasSCUV8xeD nLwo0Yj7Z0nFQzr4OgYiPcPmz6/hhKBzphT4iJRGQ3CCIrVGNzyk3WlzpUu7hcc2 DLmmuFeOXaXISqcSYvtu90RL38b/6HIprj9IOkN4asyr4zmc0jorU6ORKetLDBK2 x1wsFU8RyevrnK5dJrp/EJEwdI1sDpyvJ4+Sm+//NKSMDThUliHdnxi4prZ7Nv2R /Fe7MgWQUPm2BGOLR13WP8b8Hh7vT98Q4EwvRcIJZ8wpDIPHRtvTspzbb0F8oFsf MKDMbdpA2nk8YmLDcOQevesKMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELVcLpV 62a9v/RoPKS/xWo32u2JMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR6ho+98tywwJup/jncBwJSdm2uTaHPcMpt9yrsAolQk6j5aVCtaEKXxgkEKK l4lJbmdyZuJtCNrohvqFGzctA6k6+iigJcP/HHc3Bgar7PQYoXk5feNPPjaW5CXr QHCzqmFcUsKhYUqvM9gYTKv3YKtlhvucqy7vOzdTqVUwTObY04JGCfrWTRy0Pca7 kOWtuQM5vdDL5rGSnh+o9nBMTL9Pg8uIoudvHLtOoNsSp3rcCA9RESi0ZfRoHDnp hRBWEPGyN/kBoDqrVtZ1SZd557Y9EZ8l5aRCyTBa/sbx6boCrlYq9lwzgbRxCxyS oq42XrMNN3OFuCghAYt9stWE9A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:37 2026 by rpki-client