$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: d/CgLMbiiCjTuQUZPHlNRWdKxbP58M/V/ABZnqdRAgo= Subject key identifier: 8C:76:A4:EF:21:C6:CB:99:AF:58:E5:51:0D:6C:31:C5:CD:48:76:09 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 06:00:26 +0000 Manifest this update: Wed 25 Mar 2026 06:00:25 +0000 Manifest next update: Wed 01 Apr 2026 06:00:25 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: Q+Ly+wLh+kdUY8MD6YY5gCXexvD2ibeY9ovser+THCA=) 2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=) 3: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Mar 25 06:00:25 2026 GMT Not After : Apr 1 06:00:25 2026 GMT Subject: CN=69c379fa-61a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:6e:83:9c:3b:9f:18:93:69:40:69:ff:cc: 99:4d:04:4f:43:eb:b9:c4:e2:8a:20:12:ab:b8:d6: c5:e4:1e:c8:39:50:ee:c1:6b:b2:5f:78:80:22:b6: 47:bf:a3:d3:1f:30:f3:c5:65:bc:04:d4:59:83:6c: 7e:7a:86:db:61:f8:53:f7:93:08:96:8c:6a:78:89: 79:89:e8:27:04:85:35:fa:bb:f9:f0:cf:16:1e:a2: a8:f2:2d:3d:b9:7d:34:fd:c0:bd:76:0d:3b:8a:9d: c3:09:f8:07:e1:8a:48:af:be:80:92:6f:64:a6:8e: 39:ff:18:a5:57:39:3f:b1:a8:85:83:d2:13:91:75: b1:72:55:90:67:3e:46:22:51:b9:2d:a6:e1:59:dd: e9:3a:97:dd:df:63:1b:a2:01:d1:93:ef:5f:a7:4f: ce:c0:46:c9:11:c2:8e:d5:38:7a:9e:ec:22:8f:e3: 5e:8e:c1:83:9c:74:2a:2d:6c:1f:58:e4:d3:10:22: bb:04:00:9a:57:c3:01:6c:6e:21:19:e7:9d:c2:a6: 2f:a8:a3:55:f6:3a:3b:62:3d:45:d9:61:0a:7c:11: f1:1d:e6:8e:21:0d:cc:29:83:1a:7a:da:61:e3:6c: f2:6f:de:42:5c:60:92:60:12:d7:8f:e8:ab:ba:96: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:76:A4:EF:21:C6:CB:99:AF:58:E5:51:0D:6C:31:C5:CD:48:76:09 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:05:40:56:31:e6:e0:1f:22:dc:21:00:e1:a4:91:78:e5:88: b6:d6:72:90:71:c2:66:f2:78:4b:5a:fe:81:97:cd:ad:d8:af: b3:b4:86:b8:19:af:ae:ed:a9:ff:2d:39:cf:b3:50:78:bd:b9: 80:5e:6a:c1:68:84:a6:24:cb:e8:c9:0f:5c:c7:92:5c:cf:58: 00:d5:53:ab:68:90:bd:cc:94:6e:46:6f:43:8d:9c:fb:d4:ec: 96:3b:61:bb:87:6d:76:44:25:5e:1b:23:00:e8:c4:61:44:54: bf:08:c5:c5:88:df:47:8d:0c:61:d6:96:84:aa:53:00:f7:24: 97:d1:c2:07:1a:4f:14:59:5c:44:b5:cc:88:cf:76:28:aa:68: 97:49:6e:74:4a:15:69:7c:8c:39:a1:f8:14:2f:cb:2e:38:fb: 95:58:da:d0:91:01:b7:d8:e0:5e:03:88:f6:b6:e1:05:98:c9: 4e:2b:65:5b:26:b4:35:74:fd:52:7b:5d:89:fa:8a:f0:75:c8: 5c:8a:1d:95:95:dd:0a:55:a3:c2:4d:df:7d:1d:d0:ea:78:8e: 9f:73:08:86:f1:42:5a:af:b3:7b:cf:d6:c3:b6:9a:34:58:21: 05:43:8d:a0:5d:81:21:aa:4c:45:e4:4b:fc:61:65:6a:1c:05: b2:0a:99:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjYwMzI1MDYwMDI1WhcNMjYwNDAxMDYwMDI1WjAYMRYwFAYD VQQDEw02OWMzNzlmYS02MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeNug5w7nxiTaUBp/8yZTQRPQ+u5xOKKIBKruNbF5B7IOVDuwWuyX3iAIrZH v6PTHzDzxWW8BNRZg2x+eobbYfhT95MIloxqeIl5iegnBIU1+rv58M8WHqKo8i09 uX00/cC9dg07ip3DCfgH4YpIr76Akm9kpo45/xilVzk/saiFg9ITkXWxclWQZz5G IlG5LabhWd3pOpfd32MbogHRk+9fp0/OwEbJEcKO1Th6nuwij+NejsGDnHQqLWwf WOTTECK7BACaV8MBbG4hGeedwqYvqKNV9jo7Yj1F2WEKfBHxHeaOIQ3MKYMaetph 42zyb95CXGCSYBLXj+irupZglwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIx2pO8h xsuZr1jlUQ1sMcXNSHYJMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwVAVjHm4B8i3CEA4aSReOWIttZykHHCZvJ4S1r+gZfNrdivs7SGuBmvru2p /y05z7NQeL25gF5qwWiEpiTL6MkPXMeSXM9YANVTq2iQvcyUbkZvQ42c+9Tsljth u4dtdkQlXhsjAOjEYURUvwjFxYjfR40MYdaWhKpTAPckl9HCBxpPFFlcRLXMiM92 KKpol0ludEoVaXyMOaH4FC/LLjj7lVja0JEBt9jgXgOI9rbhBZjJTitlWya0NXT9 UntdifqK8HXIXIodlZXdClWjwk3ffR3Q6niOn3MIhvFCWq+ze8/Ww7aaNFghBUON oF2BIapMReRL/GFlahwFsgqZug== -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:02 2026 by rpki-client