$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: NJmcz/tPR6QGTighkRsEFoPBtu1EIPjyhaVl9KI73mI= Subject key identifier: 10:2E:C6:62:2A:84:CE:09:85:30:27:EF:13:0F:B8:19:AB:54:6D:E8 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 09B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 09AE Signing time: Tue 24 Mar 2026 19:43:22 +0000 Manifest this update: Tue 24 Mar 2026 19:43:22 +0000 Manifest next update: Tue 31 Mar 2026 19:43:22 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: khNV+TphqW5DMXp5sBTonHQ03Tv9f8HhhkOgOB3cO4k=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: AjxjmwQEjXn0QHDZKCLjrPCZHZ9/Qm2oT27QUruEzk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Mar 24 19:43:22 2026 GMT Not After : Mar 31 19:43:22 2026 GMT Subject: CN=69c2e95a-8621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:78:59:62:05:e4:e2:74:72:d6:3f:98:61: 6f:09:e8:34:63:29:68:f5:03:1d:36:cb:4b:49:0c: 0b:51:26:c9:3c:7f:18:45:cf:bb:43:7d:71:67:b6: 13:4f:0f:78:49:1a:ad:0a:7b:c0:25:ac:04:ef:d8: fb:b3:8a:6b:d9:c0:d5:42:70:c5:94:ce:02:0f:ea: 15:2f:da:f3:d0:f0:7b:56:47:de:12:a8:19:ea:f2: 45:ae:14:93:97:9f:55:6d:78:8c:43:56:3c:56:27: 88:99:61:35:7f:2e:94:ef:c6:ec:06:30:d2:c4:bc: 3b:4d:d7:e4:6a:c3:f9:53:85:3f:a9:ab:1d:3c:7e: 43:68:e9:4d:fe:de:a7:df:4e:f6:8a:db:2a:60:13: b1:4a:a5:a4:e5:39:e1:bf:19:e4:a9:25:a3:fc:3d: 78:3b:98:bb:f8:84:05:25:98:1b:a5:6a:09:7e:16: b8:58:0a:c4:15:87:6a:67:67:18:a0:0d:ad:05:6a: 33:d0:45:1d:40:29:87:62:49:02:6d:53:d9:9f:f7: e4:2e:d1:7e:98:87:cc:1a:c5:ce:16:88:57:ed:88: 72:6a:16:3e:95:d5:b9:be:fa:88:73:1b:e7:c1:1a: fa:6c:d5:34:26:1e:4d:5a:7e:24:fa:68:d0:4a:c8: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:C6:62:2A:84:CE:09:85:30:27:EF:13:0F:B8:19:AB:54:6D:E8 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:9d:ff:12:29:e6:48:1a:33:e9:e5:56:25:9b:8f:9e:60: 9a:37:56:17:2d:0c:e1:b0:67:a3:2c:ac:02:ac:9f:d1:68:b0: 35:08:15:27:7f:61:7b:ee:d2:5f:cc:7d:f3:7f:c4:75:f3:d6: 45:25:1d:c9:f9:77:9b:74:b1:b0:31:66:29:60:fd:04:14:95: 54:64:67:c4:a8:70:0b:1e:d0:79:fc:b2:c0:69:67:56:8c:31: 84:f0:58:c5:58:94:de:ca:af:74:67:36:de:13:96:57:bb:2c: 0e:1c:dc:f3:73:24:fd:61:5f:1e:f3:3d:2e:e1:8f:c5:2a:b9: 63:a3:13:f5:90:d4:bc:14:d2:0f:92:37:9e:dd:18:8a:4d:06: 98:72:9d:f6:8d:ba:79:a2:ac:d3:c0:2b:e0:29:24:18:0c:e8: 6a:09:02:13:5b:3c:45:94:6e:c0:f2:ce:1e:6e:0e:b8:45:09: a1:46:e3:c1:14:6f:80:10:29:c6:d8:ad:42:19:fd:44:68:3e: bb:98:32:f0:3a:2e:b9:e1:e3:4d:66:bd:ca:7a:56:51:1e:ab: b5:6f:f4:68:19:14:6f:8e:a2:04:bf:32:8d:86:96:0a:8c:36: cc:4e:a7:9e:2b:cc:3e:f6:0d:bc:1b:ef:11:dc:96:4f:8d:f2: 02:58:a4:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjYwMzI0MTk0MzIyWhcNMjYwMzMxMTk0MzIyWjAYMRYwFAYD VQQDEw02OWMyZTk1YS04NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt54WWIF5OJ0ctY/mGFvCeg0Yylo9QMdNstLSQwLUSbJPH8YRc+7Q31xZ7YT Tw94SRqtCnvAJawE79j7s4pr2cDVQnDFlM4CD+oVL9rz0PB7VkfeEqgZ6vJFrhST l59VbXiMQ1Y8VieImWE1fy6U78bsBjDSxLw7TdfkasP5U4U/qasdPH5DaOlN/t6n 3072itsqYBOxSqWk5TnhvxnkqSWj/D14O5i7+IQFJZgbpWoJfha4WArEFYdqZ2cY oA2tBWoz0EUdQCmHYkkCbVPZn/fkLtF+mIfMGsXOFohX7YhyahY+ldW5vvqIcxvn wRr6bNU0Jh5NWn4k+mjQSshG+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAuxmIq hM4JhTAn7xMPuBmrVG3oMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACeSd/xIp5kgaM+nlViWbj55gmjdWFy0M4bBnoyysAqyf0WiwNQgVJ39he+7S X8x983/EdfPWRSUdyfl3m3SxsDFmKWD9BBSVVGRnxKhwCx7QefyywGlnVowxhPBY xViU3sqvdGc23hOWV7ssDhzc83Mk/WFfHvM9LuGPxSq5Y6MT9ZDUvBTSD5I3nt0Y ik0GmHKd9o26eaKs08Ar4CkkGAzoagkCE1s8RZRuwPLOHm4OuEUJoUbjwRRvgBAp xtitQhn9RGg+u5gy8DouueHjTWa9ynpWUR6rtW/0aBkUb46iBL8yjYaWCow2zE6n nivMPvYNvBvvEdyWT43yAlikww== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:50 2026 by rpki-client