$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: ZqxZgdy3aAVh/qJNNwamoIyx9nNeUE3ikWBbsS5JBqE= Subject key identifier: A2:95:43:D3:07:DB:03:DE:07:F9:A1:DE:63:92:18:28:F2:B1:90:9E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 04C9 Signing time: Tue 24 Mar 2026 23:59:59 +0000 Manifest this update: Tue 24 Mar 2026 23:59:58 +0000 Manifest next update: Tue 31 Mar 2026 23:59:58 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: BT+JCKPMF7kV+96kmBNFpiRqzXMbHj04XtqHjViBj7M=) 2: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U=) 3: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: 2GDXW34y0UeqYApW2yftSPb+tT2ESSz3aUeD8fKFqqs=) 4: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: 6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=) 5: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: eFW9dgfgDhQ46WggGF+7xnQXK6hHzPnIupphxiZfKs0=) 6: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: VV9KXmgRKf+FOm7HICubh1e+YuZrynDmGju0xNgq3eg=) 7: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: GWrEAedNxq26S9u3npD3fV7eXN2tOVtJvTAoCK+jrPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Mar 24 23:59:58 2026 GMT Not After : Mar 31 23:59:58 2026 GMT Subject: CN=69c3257f-663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:c2:de:0f:d8:de:07:74:20:36:2b:f3:07: 15:62:59:f6:42:64:1b:e2:6f:d4:18:39:8e:1c:a8: 9e:3a:ee:f3:b6:d4:36:a1:5a:4d:50:c1:ec:12:35: eb:0c:45:cb:f9:cd:f5:79:3c:9d:40:c5:16:e0:43: 09:e6:68:61:a2:26:76:6a:37:58:cb:5b:28:5f:d4: 5f:26:f2:e0:35:71:0d:a6:6f:e5:63:a6:fa:db:42: 54:63:ef:12:2b:62:16:64:2f:48:fd:2a:9c:84:c2: 4b:fb:e0:ba:2b:c0:59:59:09:ef:97:20:d9:58:cf: ff:b9:f9:10:dd:02:25:3a:8a:39:83:fa:25:9a:ec: bf:48:4a:8e:02:f6:be:be:cf:8a:65:5f:ff:b2:b9: 2e:01:15:f9:51:fa:87:c3:d6:cc:0d:f1:4e:1e:30: 28:ed:e1:f0:d6:66:b1:af:4a:a1:04:10:42:6e:93: 02:6e:e1:ca:a1:4d:43:74:5f:3c:ac:ea:5c:ae:e8: aa:0a:76:60:b7:2b:d1:60:b5:e0:90:f8:91:86:21: a4:06:85:a7:02:d5:e1:94:b1:99:2e:c4:82:77:4f: 76:21:84:8e:6a:71:74:29:a9:97:d5:9f:ad:c2:ee: 90:18:fd:47:f2:69:a9:dd:49:af:39:29:bd:a9:ff: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:43:D3:07:DB:03:DE:07:F9:A1:DE:63:92:18:28:F2:B1:90:9E X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3f:6d:33:96:a2:61:de:82:7c:80:a8:d0:12:08:7a:9f:b7: 5d:f6:dc:b9:82:da:89:e3:ad:2f:d9:f6:c9:74:21:ba:eb:72: 14:dd:7d:14:81:5d:74:8a:40:85:56:5c:42:bc:7c:dc:4e:ec: b5:c9:c6:30:02:30:48:92:52:3e:39:74:b7:68:8f:56:cf:f5: a1:f5:ba:88:40:73:47:3b:ce:14:ea:a7:d3:20:13:d7:ed:c4: d6:cf:5e:d0:ec:81:d7:a8:dd:c5:e6:6c:1b:11:49:03:d1:e2: 08:7e:54:b6:00:b0:da:de:fc:cf:f1:35:bb:04:30:1a:d4:c0: 40:fd:8f:49:a8:00:f3:d7:87:de:e3:30:d4:8f:c8:1d:db:0f: 0d:f7:17:5f:29:17:48:8b:50:63:dc:19:ea:0d:a7:84:49:00: 8d:6e:df:c7:1c:ce:9a:10:69:42:5d:74:a2:bb:34:18:b2:89: 3f:0b:5a:2b:21:55:58:07:c3:b6:aa:8d:eb:a1:c3:f5:ec:c0: b8:9e:1f:31:83:7a:b5:2a:02:2c:89:6a:53:10:38:ab:cc:42: 0e:4a:ec:d4:b6:83:ac:fb:87:e5:31:2b:58:73:9a:cb:aa:61: 86:64:6d:e4:0e:24:9e:18:00:53:43:d9:85:7e:08:5f:27:7e: f9:45:75:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYwMzI0MjM1OTU4WhcNMjYwMzMxMjM1OTU4WjAYMRYwFAYD VQQDEw02OWMzMjU3Zi02NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnTC3g/Y3gd0IDYr8wcVYln2QmQb4m/UGDmOHKieOu7zttQ2oVpNUMHsEjXr DEXL+c31eTydQMUW4EMJ5mhhoiZ2ajdYy1soX9RfJvLgNXENpm/lY6b620JUY+8S K2IWZC9I/SqchMJL++C6K8BZWQnvlyDZWM//ufkQ3QIlOoo5g/olmuy/SEqOAva+ vs+KZV//srkuARX5UfqHw9bMDfFOHjAo7eHw1maxr0qhBBBCbpMCbuHKoU1DdF88 rOpcruiqCnZgtyvRYLXgkPiRhiGkBoWnAtXhlLGZLsSCd092IYSOanF0KamX1Z+t wu6QGP1H8mmp3UmvOSm9qf9GUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKVQ9MH 2wPeB/mh3mOSGCjysZCeMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtj9tM5aiYd6CfICo0BIIep+3XfbcuYLaieOtL9n2yXQhuutyFN19FIFddIpA hVZcQrx83E7stcnGMAIwSJJSPjl0t2iPVs/1ofW6iEBzRzvOFOqn0yAT1+3E1s9e 0OyB16jdxeZsGxFJA9HiCH5UtgCw2t78z/E1uwQwGtTAQP2PSagA89eH3uMw1I/I HdsPDfcXXykXSItQY9wZ6g2nhEkAjW7fxxzOmhBpQl10ors0GLKJPwtaKyFVWAfD tqqN66HD9ezAuJ4fMYN6tSoCLIlqUxA4q8xCDkrs1LaDrPuH5TErWHOay6phhmRt 5A4knhgAU0PZhX4IXyd++UV1Xw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:21 2026 by rpki-client