$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: VUICeSV5DilZThPaUKz2dn5OccndCh/bbKg11z9iJGc= Subject key identifier: EF:B6:32:1E:D4:75:81:DF:58:DF:5F:7E:DE:02:D4:B6:5D:5B:F0:89 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 0106 Signing time: Wed 25 Mar 2026 05:20:38 +0000 Manifest this update: Wed 25 Mar 2026 05:20:38 +0000 Manifest next update: Wed 01 Apr 2026 05:20:38 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: txp9zXIYnVLqqv+d/HcVsSm0CDmt/yp0XPJ3ZERw4Jk=) 2: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=) 3: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Mar 25 05:20:38 2026 GMT Not After : Apr 1 05:20:38 2026 GMT Subject: CN=69c370a6-5a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:03:e0:26:ed:b4:e3:11:f0:a9:16:3a:a9: fb:1b:a7:98:5d:58:c7:43:a7:50:e6:28:ef:6d:b8: c0:16:8e:0f:a1:6b:f6:37:14:00:a3:34:da:80:2c: 80:29:73:96:91:f7:91:24:9d:cd:b7:49:a1:5e:59: 41:85:8f:c7:aa:8e:ab:7f:6a:52:bb:12:cb:00:23: 91:8e:d5:ff:fc:b9:40:16:35:82:82:3c:f2:b3:85: f7:b9:f6:b0:93:21:2d:a4:54:03:1d:3c:b7:5b:7b: ed:df:17:63:cf:89:70:77:81:70:c8:d7:a2:9a:6e: 71:e3:d9:65:05:66:55:3d:db:61:a9:8a:a0:29:99: 4e:c9:32:f3:73:ea:89:32:a2:bf:59:e8:87:82:ca: a2:95:73:f7:86:b6:91:9e:2f:60:ba:7c:13:49:a3: 4f:f2:7e:3c:d4:4c:8f:e1:25:74:01:ef:a9:0a:57: 34:d8:0a:dc:e9:cf:71:8b:69:d9:8c:e2:b3:fa:fe: 9d:46:72:c2:11:77:3a:4a:c2:e3:b2:60:4d:01:03: e3:76:e1:26:86:e0:22:7f:93:c3:f8:f5:3b:ed:b3: 6a:ed:1c:fe:86:21:56:cb:2b:2d:07:27:e1:58:d9: 17:1a:86:a5:c9:84:ad:25:c6:27:04:66:bb:d3:d3: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:32:1E:D4:75:81:DF:58:DF:5F:7E:DE:02:D4:B6:5D:5B:F0:89 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:9b:7b:f0:46:de:f5:55:c0:1d:78:29:e8:ce:3f:61:f3:0c: 35:d7:27:55:10:d7:5e:56:91:ed:3b:95:1b:ae:78:00:d3:c1: 28:9d:f9:5f:16:f0:39:1d:0e:5e:1b:b4:62:03:80:52:8f:2d: cd:ac:af:19:8d:b3:b1:64:17:53:97:be:8f:f3:bf:24:b3:47: bf:c8:6d:6a:9a:4b:d4:e8:6b:f6:94:7b:8c:57:7a:b9:6d:54: 8d:f3:fd:46:4f:95:ea:49:08:94:4a:17:77:75:33:90:7c:6c: cf:58:b8:c5:ef:86:4e:3a:12:69:a7:6b:36:c4:d7:30:d0:df: 39:84:db:09:82:d9:81:bb:74:7d:a1:b9:72:9f:d7:59:26:a5: c7:ad:2d:6e:a0:54:22:96:97:cb:1c:4b:c9:5b:85:b0:6c:82: d2:3b:f7:01:ab:ca:16:97:f8:e9:f7:64:ae:4b:d2:e6:47:e8: a7:57:53:72:c0:e4:b9:3a:bc:44:3d:31:5d:ae:bb:67:cb:6b: 95:99:f5:23:41:0a:7a:88:25:7d:a6:7c:3c:49:35:b9:47:85: b3:47:67:bf:4c:a6:13:b7:b6:02:37:0e:93:fa:47:2e:c1:86: 33:85:0c:ad:60:5a:c7:4c:f1:49:24:74:37:08:65:39:a6:31: d9:6b:da:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYwMzI1MDUyMDM4WhcNMjYwNDAxMDUyMDM4WjAYMRYwFAYD VQQDEw02OWMzNzBhNi01YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1QD4CbttOMR8KkWOqn7G6eYXVjHQ6dQ5ijvbbjAFo4PoWv2NxQAozTagCyA KXOWkfeRJJ3Nt0mhXllBhY/Hqo6rf2pSuxLLACORjtX//LlAFjWCgjzys4X3ufaw kyEtpFQDHTy3W3vt3xdjz4lwd4FwyNeimm5x49llBWZVPdthqYqgKZlOyTLzc+qJ MqK/WeiHgsqilXP3hraRni9gunwTSaNP8n481EyP4SV0Ae+pClc02Arc6c9xi2nZ jOKz+v6dRnLCEXc6SsLjsmBNAQPjduEmhuAif5PD+PU77bNq7Rz+hiFWyystByfh WNkXGoalyYStJcYnBGa709NaEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+2Mh7U dYHfWN9fft4C1LZdW/CJMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApJt78Ebe9VXAHXgp6M4/YfMMNdcnVRDXXlaR7TuVG654ANPBKJ35XxbwOR0O Xhu0YgOAUo8tzayvGY2zsWQXU5e+j/O/JLNHv8htappL1Ohr9pR7jFd6uW1UjfP9 Rk+V6kkIlEoXd3UzkHxsz1i4xe+GTjoSaadrNsTXMNDfOYTbCYLZgbt0faG5cp/X WSalx60tbqBUIpaXyxxLyVuFsGyC0jv3AavKFpf46fdkrkvS5kfop1dTcsDkuTq8 RD0xXa67Z8trlZn1I0EKeoglfaZ8PEk1uUeFs0dnv0ymE7e2AjcOk/pHLsGGM4UM rWBax0zxSSR0NwhlOaYx2WvaCA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:29 2026 by rpki-client