$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: +FRnWPjGUBlVDQB0Xre4QOOvkQayZTUJr2C9ksLuV14= Subject key identifier: 5D:FB:84:CA:EA:26:2B:2C:18:77:D2:DD:96:FF:6A:4D:59:13:7F:CE Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 0156 Signing time: Wed 25 Mar 2026 04:19:12 +0000 Manifest this update: Wed 25 Mar 2026 04:19:12 +0000 Manifest next update: Wed 01 Apr 2026 04:19:12 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: sG/CP0R9XEqaUr8KIwSOR3cEu9C5X/KjiSCm32PgorE=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: E315WW0WaEtv5nqU/xmLAkhLxUnKQm864OEvRTAgO9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Mar 25 04:19:12 2026 GMT Not After : Apr 1 04:19:12 2026 GMT Subject: CN=69c36240-144e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:33:fe:60:10:7d:ec:de:78:9e:22:63:63: 49:6b:0c:50:ae:ca:7d:5c:b7:26:e2:fe:f7:9c:85: 4e:3d:56:c2:0f:c6:bf:1d:23:1b:d8:9c:9e:0c:a8: 5e:e4:d8:c5:97:a0:15:0c:20:c4:70:e3:8a:5a:20: 55:bf:dd:b3:f2:c9:2b:18:fb:d7:c4:f5:51:32:02: ab:f8:d8:94:fd:c1:d4:bc:b3:a5:33:eb:81:54:d4: 8a:ed:1d:24:a5:ba:76:84:e2:f0:37:6a:4a:7e:f2: 04:72:7c:7f:df:3b:79:3b:b8:6d:b3:ff:d6:8a:4f: fa:1c:9d:0a:3c:33:64:89:8f:10:3f:cf:fa:2f:a9: 4f:ab:07:a0:8a:55:fc:aa:db:80:35:45:57:f8:b9: 0e:77:9e:36:b4:65:87:14:e8:bf:70:aa:b6:a2:c9: 9c:cc:98:fb:05:7f:43:c0:a1:6a:19:db:27:b8:14: f7:f7:24:79:24:35:b7:d9:9f:77:49:39:d8:0a:31: b7:89:53:39:7d:99:61:f2:dc:83:bd:d0:2d:9c:d3: c3:1c:10:46:70:34:7f:f6:f0:f4:88:4b:fe:8a:54: 2e:26:4a:95:79:1c:29:a8:8a:34:bb:e5:85:30:11: 38:bf:fb:ca:d0:6b:78:9c:e3:06:eb:4d:db:d9:ee: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:84:CA:EA:26:2B:2C:18:77:D2:DD:96:FF:6A:4D:59:13:7F:CE X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7b:d5:9e:b2:a0:f0:51:14:43:aa:20:77:21:04:9f:41:d1: dd:42:41:26:58:e7:37:b5:55:94:34:e3:28:41:e0:58:2c:62: 7e:57:46:4e:84:36:7a:61:ff:6c:d3:f1:3f:3d:ef:82:f0:f8: 76:3d:1d:95:af:83:dd:c2:9c:56:59:fe:43:8e:b1:0f:93:60: bc:e7:7b:6e:0d:b9:b7:55:a1:d6:70:50:10:2d:4c:41:2d:0e: 69:87:9c:06:10:f8:29:bb:4f:ef:ba:95:57:3c:79:4b:9f:db: 0a:66:83:d3:5c:a7:d7:99:80:44:0e:25:bb:ff:68:ec:fe:c3: 4d:8d:5e:17:13:39:c4:40:f0:07:6a:75:c8:9f:d4:3c:f8:90: c0:51:1b:f7:8e:23:96:61:56:43:dc:12:ef:b9:c1:ee:76:91: 24:1d:be:f6:c5:ad:cc:f4:94:5a:a9:d4:5d:0d:51:cd:dd:e1: 6a:86:ae:da:ef:e3:c0:ca:d5:1b:06:cb:84:12:d0:5d:6c:1e: cc:fc:6d:7c:65:6a:88:28:69:c0:ab:4a:2a:bc:91:37:b4:8e: 27:c7:ee:9b:55:98:84:c6:be:31:37:cc:a5:70:34:ea:40:c8: 5f:07:9f:52:ba:b0:68:30:c2:bd:4a:65:2b:e9:dd:91:70:82: 4c:b5:b5:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjYwMzI1MDQxOTEyWhcNMjYwNDAxMDQxOTEyWjAYMRYwFAYD VQQDEw02OWMzNjI0MC0xNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHwz/mAQfezeeJ4iY2NJawxQrsp9XLcm4v73nIVOPVbCD8a/HSMb2JyeDKhe 5NjFl6AVDCDEcOOKWiBVv92z8skrGPvXxPVRMgKr+NiU/cHUvLOlM+uBVNSK7R0k pbp2hOLwN2pKfvIEcnx/3zt5O7hts//Wik/6HJ0KPDNkiY8QP8/6L6lPqwegilX8 qtuANUVX+LkOd542tGWHFOi/cKq2osmczJj7BX9DwKFqGdsnuBT39yR5JDW32Z93 STnYCjG3iVM5fZlh8tyDvdAtnNPDHBBGcDR/9vD0iEv+ilQuJkqVeRwpqIo0u+WF MBE4v/vK0Gt4nOMG603b2e5J5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF37hMrq JissGHfS3Zb/ak1ZE3/OMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArnvVnrKg8FEUQ6ogdyEEn0HR3UJBJljnN7VVlDTjKEHgWCxifldGToQ2emH/ bNPxPz3vgvD4dj0dla+D3cKcVln+Q46xD5NgvOd7bg25t1Wh1nBQEC1MQS0OaYec BhD4KbtP77qVVzx5S5/bCmaD01yn15mARA4lu/9o7P7DTY1eFxM5xEDwB2p1yJ/U PPiQwFEb944jlmFWQ9wS77nB7naRJB2+9sWtzPSUWqnUXQ1Rzd3haoau2u/jwMrV GwbLhBLQXWwezPxtfGVqiChpwKtKKryRN7SOJ8fum1WYhMa+MTfMpXA06kDIXwef UrqwaDDCvUplK+ndkXCCTLW1zA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:04 2026 by rpki-client