$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: Z5jRWGqq3y1uT7FUzhqVfivHGRV4kinHU6oMnwuVM5c= Subject key identifier: B5:FC:38:0D:F5:C2:E0:79:07:0B:A4:E3:19:2D:8E:E6:E5:25:A4:31 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0CE4 Signing time: Tue 24 Mar 2026 18:04:42 +0000 Manifest this update: Tue 24 Mar 2026 18:04:42 +0000 Manifest next update: Tue 31 Mar 2026 18:04:42 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: KHR6aTYcAYQ9Ygt6LXe0i3Hyi68/1xP+Wb0gGVZkP6U=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: Q8Oy4wo2YJgEZIjyNWkq80rcuQvvGozUBEBODPVmJ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Mar 24 18:04:42 2026 GMT Not After : Mar 31 18:04:42 2026 GMT Subject: CN=69c2d23a-89b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:de:23:6a:8e:86:db:be:b2:a6:4c:88:37: 9f:33:91:c1:d3:6f:5d:a5:dc:2a:c2:25:47:28:a4: 7c:5f:60:76:da:b3:64:9a:76:ba:93:fe:18:8b:46: 73:3f:78:ac:a2:b7:bd:2c:40:ec:53:6e:00:4c:45: e8:7d:cf:01:4d:6d:b4:d8:9e:36:bd:9c:8c:20:4f: 0b:cc:8b:4b:32:87:96:df:77:9c:4d:79:b5:08:25: 70:15:db:ee:76:5f:51:82:3a:c6:69:ea:1e:b5:1c: 6f:54:41:1c:bb:c8:8e:25:03:9e:f1:11:70:f6:07: a7:a8:b4:1f:bc:f5:5c:4d:d9:6e:05:6c:9b:7d:59: 07:9e:48:23:b4:fc:b6:4e:e3:c3:90:fb:36:1e:36: 2b:5e:79:0b:a2:d9:48:48:77:38:eb:9f:10:40:fb: cc:3d:3a:bb:44:12:71:89:a3:5e:6e:64:7c:96:a1: 98:e3:cb:4a:09:65:fd:78:e6:e3:5c:0c:8a:03:1a: 99:63:8d:bb:52:48:11:0f:24:68:0a:7e:a2:f3:12: 1a:b8:c5:7f:49:4d:de:5b:6b:83:0a:31:5c:a6:42: a1:13:02:82:b3:e8:d0:33:65:d6:95:78:c1:7f:bf: 57:9c:09:6d:8c:3b:c1:20:1f:95:f6:5b:11:65:63: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FC:38:0D:F5:C2:E0:79:07:0B:A4:E3:19:2D:8E:E6:E5:25:A4:31 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:74:fd:1f:31:1e:4a:c0:d7:12:a9:55:53:89:7b:23:9e:c5: 5f:6e:99:d6:a5:73:25:b8:74:f6:5b:a5:aa:db:df:fd:af:31: 49:83:f5:32:3e:fe:19:93:52:79:17:6d:f6:1d:57:f7:ae:f6: 46:d2:18:a2:2b:15:b7:6d:a7:20:05:e5:73:cf:01:65:94:64: 2e:8b:ec:aa:b1:65:06:7f:8a:4d:30:ef:06:17:8a:00:43:68: b0:35:61:47:3c:d6:d2:42:43:cf:5a:b9:ed:6e:64:63:24:38: a5:ef:99:17:55:75:10:d7:dd:0a:d7:00:8c:ca:9c:21:5d:50: 9b:5e:cc:f5:26:9e:8b:78:59:1e:b4:19:50:de:a9:0b:4f:83: 8c:84:38:75:5a:ed:a1:8a:e6:77:05:d2:2f:57:dd:8b:73:50: 11:78:98:2e:50:1a:0d:76:99:25:fe:db:ec:b8:ac:4a:66:7c: 71:65:05:f9:5e:06:a7:b7:71:e8:03:ab:ea:41:02:88:82:5a: 06:2c:fb:9a:ff:e6:54:fa:96:9d:65:2d:01:65:33:4b:e9:1f: e6:02:35:21:98:c3:33:08:39:d6:2d:87:8b:47:9a:33:4d:ee: cb:b0:2f:b4:e7:ad:dc:25:82:5c:1c:11:69:6c:3b:ba:7c:96: 67:62:43:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjYwMzI0MTgwNDQyWhcNMjYwMzMxMTgwNDQyWjAYMRYwFAYD VQQDEw02OWMyZDIzYS04OWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U7eI2qOhtu+sqZMiDefM5HB029dpdwqwiVHKKR8X2B22rNkmna6k/4Yi0Zz P3isore9LEDsU24ATEXofc8BTW202J42vZyMIE8LzItLMoeW33ecTXm1CCVwFdvu dl9RgjrGaeoetRxvVEEcu8iOJQOe8RFw9genqLQfvPVcTdluBWybfVkHnkgjtPy2 TuPDkPs2HjYrXnkLotlISHc4658QQPvMPTq7RBJxiaNebmR8lqGY48tKCWX9eObj XAyKAxqZY427UkgRDyRoCn6i8xIauMV/SU3eW2uDCjFcpkKhEwKCs+jQM2XWlXjB f79XnAltjDvBIB+V9lsRZWOoBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLX8OA31 wuB5Bwuk4xktjublJaQxMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtnT9HzEeSsDXEqlVU4l7I57FX26Z1qVzJbh09lulqtvf/a8xSYP1Mj7+GZNS eRdt9h1X9672RtIYoisVt22nIAXlc88BZZRkLovsqrFlBn+KTTDvBheKAENosDVh RzzW0kJDz1q57W5kYyQ4pe+ZF1V1ENfdCtcAjMqcIV1Qm17M9Saei3hZHrQZUN6p C0+DjIQ4dVrtoYrmdwXSL1fdi3NQEXiYLlAaDXaZJf7b7LisSmZ8cWUF+V4Gp7dx 6AOr6kECiIJaBiz7mv/mVPqWnWUtAWUzS+kf5gI1IZjDMwg51i2Hi0eaM03uy7Av tOet3CWCXBwRaWw7unyWZ2JDiw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:26:41 2026 by rpki-client