$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: 3aLMUDK2i3tsQJ2BfoKdofHZLovH/T4V6cyKGi1lZq8= Subject key identifier: 7D:01:BE:A2:5C:C1:DF:49:4F:93:2D:7C:E5:DA:3D:93:2D:94:1B:3C Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 24E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 24C1 Signing time: Tue 24 Mar 2026 15:43:21 +0000 Manifest this update: Tue 24 Mar 2026 15:43:20 +0000 Manifest next update: Tue 31 Mar 2026 15:43:20 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: G3XBZfPnmooeTdrQDmHWO1mNRgFBYHyiKTGGTl3HpM0=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: U8OxEGjdn2Oyo4nAXHMe2uZlkKT+HU2vh2Rj/xEEZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9443 (0x24e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Mar 24 15:43:20 2026 GMT Not After : Mar 31 15:43:20 2026 GMT Subject: CN=69c2b119-0953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:ce:3c:39:4b:90:45:f0:d3:fc:b6:3b:29: 09:40:68:35:b8:27:22:c2:98:f3:50:20:37:99:59: 2b:f5:28:11:f1:25:76:ee:31:ed:15:2b:98:3a:16: 29:68:35:16:ab:aa:e5:81:fe:d0:61:5d:55:9d:fd: 70:92:04:0a:be:3e:f7:a7:28:16:6f:5b:a6:76:78: 68:73:7d:74:dd:81:35:75:d6:d5:c9:ed:1f:c4:7f: b6:5f:8c:68:77:b4:be:67:fe:95:16:58:16:95:31: 95:3a:be:57:36:9f:c2:b3:fa:24:a0:3d:35:e9:c1: 4b:15:29:2c:f4:1e:17:9d:7b:77:b4:b1:d6:99:bc: e6:bd:6d:ef:fc:e3:cb:7c:ec:5e:bd:60:0b:58:73: 20:39:05:79:fa:b6:43:55:47:c8:e5:3d:85:9f:66: 47:1b:71:71:1b:e2:34:0b:a4:36:4a:96:6d:37:87: c4:22:61:8c:0a:2a:4a:ff:db:17:dc:fc:ba:7a:c3: e9:24:e2:9e:44:82:45:55:a0:f4:4a:05:01:b2:0a: 73:2e:74:7d:31:69:0b:81:8d:5a:28:73:7c:03:85: 0d:6b:f8:52:d9:b5:9a:44:a2:58:d7:3f:a0:b6:72: a8:2c:b3:30:a1:c3:8a:f6:71:40:49:a5:e6:a4:28: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:BE:A2:5C:C1:DF:49:4F:93:2D:7C:E5:DA:3D:93:2D:94:1B:3C X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:65:e5:a0:a6:b7:2b:60:b6:73:5e:e1:c2:25:8e:71:28:4c: 46:72:19:92:eb:c1:9c:90:f6:c7:73:9e:98:68:e4:b3:f9:64: b7:16:4a:e8:a3:81:90:53:51:41:1c:f2:10:28:3d:a9:3c:ac: 80:e9:cb:a5:e5:36:bf:6c:36:f2:5d:b8:06:83:30:81:6b:f6: 8d:b1:cd:85:df:67:cc:fe:c9:2e:25:b9:c6:a7:74:e2:9a:39: 68:eb:ee:24:c3:58:fc:ba:9f:f2:f8:7f:d5:85:f0:3a:8f:ea: 65:b6:fc:69:5d:3d:92:18:b6:f2:ed:8e:69:6e:ad:c6:d4:35: 3a:2b:74:0a:a1:d3:92:93:c0:ed:54:1d:90:fe:75:24:c1:60: ed:26:c3:ee:ff:d4:92:9c:1e:cd:1d:8f:c4:4a:6e:78:d5:0c: f3:bf:c0:8a:9d:82:08:72:2b:38:99:32:23:f9:8e:9b:cd:00: ca:64:c1:9b:0a:2b:85:19:fb:35:4e:06:6b:dc:fe:2f:cd:0d: 23:68:ec:78:38:e5:76:02:e6:d4:a3:09:12:c6:3b:df:d1:92: 33:29:cb:35:31:a7:2c:60:e9:79:f5:8c:d3:bc:18:11:c6:5f: f0:32:df:91:ce:76:a8:d5:39:e7:2d:15:38:28:35:a1:15:1d: f5:3c:55:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjYwMzI0MTU0MzIwWhcNMjYwMzMxMTU0MzIwWjAYMRYwFAYD VQQDEw02OWMyYjExOS0wOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQrOPDlLkEXw0/y2OykJQGg1uCciwpjzUCA3mVkr9SgR8SV27jHtFSuYOhYp aDUWq6rlgf7QYV1Vnf1wkgQKvj73pygWb1umdnhoc3103YE1ddbVye0fxH+2X4xo d7S+Z/6VFlgWlTGVOr5XNp/Cs/okoD016cFLFSks9B4XnXt3tLHWmbzmvW3v/OPL fOxevWALWHMgOQV5+rZDVUfI5T2Fn2ZHG3FxG+I0C6Q2SpZtN4fEImGMCipK/9sX 3Py6esPpJOKeRIJFVaD0SgUBsgpzLnR9MWkLgY1aKHN8A4UNa/hS2bWaRKJY1z+g tnKoLLMwocOK9nFASaXmpCgY+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0BvqJc wd9JT5MtfOXaPZMtlBs8MB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKmXloKa3K2C2c17hwiWOcShMRnIZkuvBnJD2x3OemGjks/lktxZK6KOBkFNR QRzyECg9qTysgOnLpeU2v2w28l24BoMwgWv2jbHNhd9nzP7JLiW5xqd04po5aOvu JMNY/Lqf8vh/1YXwOo/qZbb8aV09khi28u2OaW6txtQ1Oit0CqHTkpPA7VQdkP51 JMFg7SbD7v/UkpwezR2PxEpueNUM87/Aip2CCHIrOJkyI/mOm80AymTBmworhRn7 NU4Ga9z+L80NI2jseDjldgLm1KMJEsY739GSMynLNTGnLGDpefWM07wYEcZf8DLf kc52qNU55y0VOCg1oRUd9TxVqw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:29 2026 by rpki-client