$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: E99FwIdO+xjOIJtkZ7Mthgll9KpMwJxKqlp8DT5Fqmw= Subject key identifier: 2F:67:FD:06:0F:10:72:71:38:74:A8:C8:0E:46:37:67:A4:9D:97:B4 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 04DD Signing time: Tue 24 Mar 2026 23:32:45 +0000 Manifest this update: Tue 24 Mar 2026 23:32:45 +0000 Manifest next update: Tue 31 Mar 2026 23:32:45 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: UrqBqCidKQm6gX0Avwjl1Tl20FvjDMEI0AG3JeiR6ZA=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Mar 24 23:32:45 2026 GMT Not After : Mar 31 23:32:45 2026 GMT Subject: CN=69c31f1d-31db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:1e:88:12:43:39:00:70:4d:34:55:95:1b: f9:1a:ec:f1:52:8e:34:c4:d5:3b:72:bb:fd:41:b4: 85:b7:91:38:7f:ee:8c:39:11:e7:8a:1f:9e:31:0c: 2d:d5:b0:99:2c:db:29:2a:09:4d:13:c0:21:d4:b9: 61:32:ca:45:83:d6:28:3b:e0:6b:e6:d6:59:5c:79: 5d:16:6f:6b:f1:9c:a3:c8:92:af:ac:d8:a9:5f:ec: 69:69:62:5e:62:76:f7:41:bd:c3:35:a7:98:c1:01: ce:db:09:ca:dc:c6:ca:ea:c5:4b:66:b8:5e:2d:05: 3e:28:5c:d4:34:47:cc:b9:9d:97:4d:5b:d6:5e:bb: 5b:4f:59:5c:49:6a:01:76:4a:2d:c6:72:26:14:54: ff:3c:17:2a:45:cf:38:c1:90:91:44:45:11:2f:5f: 4f:57:b0:ee:fe:53:6d:f4:80:11:17:9e:99:b4:ca: a8:fe:be:03:4d:cb:80:c4:a3:1d:d9:ec:b9:52:dc: d3:8f:65:31:01:f9:03:31:22:02:aa:75:de:c2:7e: f0:cb:b6:09:ea:03:bb:5b:02:5d:b1:3e:3d:72:be: 2f:fc:09:a6:f3:76:ed:d2:6c:2b:a4:4e:ae:71:49: fd:5b:8c:ab:1e:9e:2c:bb:f5:99:d8:f4:7b:a2:88: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:67:FD:06:0F:10:72:71:38:74:A8:C8:0E:46:37:67:A4:9D:97:B4 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:3c:f8:59:67:3f:09:74:f3:10:f0:8d:75:43:18:1d:1d:20: fd:07:ed:2a:81:88:9f:61:e2:b7:4c:46:72:9d:cf:93:2b:2e: 38:9d:b8:1d:c8:32:6f:b4:6c:86:9c:78:27:e2:00:b9:a3:34: d9:ea:0b:e3:9f:6d:18:f1:28:de:95:cb:2f:4f:18:b6:69:cb: 84:6a:83:ed:25:2d:c1:78:75:43:85:c0:f5:a6:13:68:22:e8: 5f:53:b4:d0:5a:0b:05:41:e7:ec:85:e1:84:7d:5b:c1:37:96: e5:64:53:25:87:18:f6:35:2d:36:6b:37:e4:3b:14:4c:16:b5: fa:d3:b1:34:94:e4:d2:4c:c8:a3:87:d9:6f:6c:a4:b6:78:06: 0f:e0:ce:c5:d4:2a:1a:7d:8f:7c:e2:4a:a8:e7:ed:e6:57:c1: 08:d6:f5:93:7d:68:a4:84:d4:b2:f8:8c:9a:05:a3:32:f5:07: 34:8b:96:3d:6b:9d:08:2f:23:97:1f:c2:bf:ca:6d:e1:31:c4: da:d9:58:80:4f:b9:74:28:40:71:45:a6:9c:91:4b:8e:db:37: 27:17:bf:02:c4:f5:3e:c1:9f:0e:03:ce:4d:02:61:c2:8c:52: 2f:cd:d3:7d:db:52:5d:3a:96:46:a5:cb:35:06:8c:f7:a8:76: dc:19:57:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjYwMzI0MjMzMjQ1WhcNMjYwMzMxMjMzMjQ1WjAYMRYwFAYD VQQDEw02OWMzMWYxZC0zMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh0eiBJDOQBwTTRVlRv5GuzxUo40xNU7crv9QbSFt5E4f+6MORHnih+eMQwt 1bCZLNspKglNE8Ah1LlhMspFg9YoO+Br5tZZXHldFm9r8ZyjyJKvrNipX+xpaWJe Ynb3Qb3DNaeYwQHO2wnK3MbK6sVLZrheLQU+KFzUNEfMuZ2XTVvWXrtbT1lcSWoB dkotxnImFFT/PBcqRc84wZCRREURL19PV7Du/lNt9IARF56ZtMqo/r4DTcuAxKMd 2ey5UtzTj2UxAfkDMSICqnXewn7wy7YJ6gO7WwJdsT49cr4v/Amm83bt0mwrpE6u cUn9W4yrHp4su/WZ2PR7oojEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9n/QYP EHJxOHSoyA5GN2eknZe0MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeDz4WWc/CXTzEPCNdUMYHR0g/QftKoGIn2Hit0xGcp3PkysuOJ24Hcgyb7Rs hpx4J+IAuaM02eoL459tGPEo3pXLL08YtmnLhGqD7SUtwXh1Q4XA9aYTaCLoX1O0 0FoLBUHn7IXhhH1bwTeW5WRTJYcY9jUtNms35DsUTBa1+tOxNJTk0kzIo4fZb2yk tngGD+DOxdQqGn2PfOJKqOft5lfBCNb1k31opITUsviMmgWjMvUHNIuWPWudCC8j lx/Cv8pt4THE2tlYgE+5dChAcUWmnJFLjts3Jxe/AsT1PsGfDgPOTQJhwoxSL83T fdtSXTqWRqXLNQaM96h23BlX+A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:57 2026 by rpki-client