$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: F/ofuFqoqX27h/pnGmmh2Z+XblA5TgN8pcgbPK30yXY= Subject key identifier: 2C:C1:F1:DC:68:A6:46:A8:D9:1A:29:FD:39:06:4B:05:17:81:B2:2D Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: D1 Signing time: Wed 25 Mar 2026 05:59:17 +0000 Manifest this update: Wed 25 Mar 2026 05:59:17 +0000 Manifest next update: Wed 01 Apr 2026 05:59:17 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: 5ZoZAt26LXbKC4NmjL3bp+mL5SlOQ+kWf6lxtBbLBeE=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: C0UeRmdUC5XES5gqgoPUp5FT+eSznO9ZwMgEuNb9JBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Mar 25 05:59:17 2026 GMT Not After : Apr 1 05:59:17 2026 GMT Subject: CN=69c379b5-7e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:c6:08:c9:9b:48:f6:8f:c1:b4:6a:d8:9c: cf:da:61:76:49:75:03:54:9c:1e:7e:9e:a9:59:7d: 01:fa:b9:c1:a0:ef:c0:e8:90:1c:f3:1f:c4:1a:16: 18:1a:2b:65:54:13:89:45:48:0e:38:e7:36:ce:64: 73:7e:e7:25:01:28:39:db:f8:21:60:3d:3d:1d:2b: b5:07:1d:8d:fb:88:7e:48:f6:3a:fa:b8:e9:c7:45: 88:5e:01:3a:97:aa:bc:c9:77:25:ee:49:f0:cd:54: 74:74:18:c7:e7:38:75:ba:2c:0d:5b:d3:ce:36:47: 7d:28:a7:4e:a9:05:33:b8:fe:0a:67:13:32:62:72: db:29:05:67:09:62:15:84:9e:db:c2:5d:4d:2e:03: ff:3f:4b:2f:c3:b0:9e:e9:d2:cf:de:07:fc:49:c3: 22:94:c6:f6:39:9e:b2:dc:5a:27:10:9d:df:f2:28: 23:b3:b1:69:de:ec:75:ec:46:25:43:18:51:14:9e: 9e:e9:e1:3e:20:56:f1:07:36:7e:ae:3f:b3:75:62: dd:c5:d8:e0:53:0e:55:a3:db:63:1e:c3:2a:9c:23: 10:ce:41:cb:38:47:cb:c0:68:da:0f:eb:1a:bd:65: 74:1b:1e:69:09:fc:56:03:d3:f1:7f:ec:a1:26:c9: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:F1:DC:68:A6:46:A8:D9:1A:29:FD:39:06:4B:05:17:81:B2:2D X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0c:6d:b9:ef:e3:81:97:4f:9f:25:11:3b:6a:97:89:07:c9: 28:73:9d:78:5e:08:e8:c2:2d:8c:3a:88:8e:0a:5a:b8:d2:d1: 13:fc:bf:bf:2c:f7:b6:d9:fb:6f:d6:f8:98:fe:24:a9:1f:b4: 0d:bd:f4:92:a4:2e:6b:4b:c8:07:19:a5:dd:10:e4:30:65:5f: 53:1f:3e:f8:26:14:73:6a:a3:0b:69:e4:f4:8c:23:9e:8e:e7: c9:bf:c4:2a:07:f6:c2:32:98:37:f3:d8:b8:73:44:c8:5d:7d: dc:a6:04:35:77:a5:96:21:3d:fc:86:59:99:3a:25:63:f1:bf: b6:41:64:62:65:95:12:1e:ab:e8:3c:5e:9e:56:c9:c3:df:1c: b8:6a:70:1d:71:62:db:cb:de:17:27:d9:1c:0e:54:2c:f1:f6: e6:b1:7a:25:e2:16:2c:d2:d6:78:76:7d:5f:b1:e2:de:b0:80: 4e:f2:4d:94:06:72:ac:15:ec:f2:84:0d:01:c7:9d:19:87:9d: 19:0d:ef:83:1a:28:0b:17:5d:f3:b1:7a:48:9b:ad:4a:fc:32: d1:a0:53:11:a6:06:70:7a:2a:d3:af:d7:01:43:d8:20:ef:a8: a1:b3:56:58:e3:3c:90:51:71:20:fa:5a:b6:7e:2d:02:07:95: 93:fa:7e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4 RkU3MDBCNjMwHhcNMjYwMzI1MDU1OTE3WhcNMjYwNDAxMDU1OTE3WjAYMRYwFAYD VQQDEw02OWMzNzliNS03ZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzPGCMmbSPaPwbRq2JzP2mF2SXUDVJwefp6pWX0B+rnBoO/A6JAc8x/EGhYY GitlVBOJRUgOOOc2zmRzfuclASg52/ghYD09HSu1Bx2N+4h+SPY6+rjpx0WIXgE6 l6q8yXcl7knwzVR0dBjH5zh1uiwNW9PONkd9KKdOqQUzuP4KZxMyYnLbKQVnCWIV hJ7bwl1NLgP/P0svw7Ce6dLP3gf8ScMilMb2OZ6y3FonEJ3f8igjs7Fp3ux17EYl QxhRFJ6e6eE+IFbxBzZ+rj+zdWLdxdjgUw5Vo9tjHsMqnCMQzkHLOEfLwGjaD+sa vWV0Gx5pCfxWA9Pxf+yhJskWewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzB8dxo pkao2Rop/TkGSwUXgbItMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w VkdlbEpzT0NYc09QNXdDMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASgxtue/jgZdPnyURO2qXiQfJKHOdeF4I6MItjDqIjgpauNLRE/y/vyz3ttn7 b9b4mP4kqR+0Db30kqQua0vIBxml3RDkMGVfUx8++CYUc2qjC2nk9Iwjno7nyb/E Kgf2wjKYN/PYuHNEyF193KYENXelliE9/IZZmTolY/G/tkFkYmWVEh6r6DxenlbJ w98cuGpwHXFi28veFyfZHA5ULPH25rF6JeIWLNLWeHZ9X7Hi3rCATvJNlAZyrBXs 8oQNAcedGYedGQ3vgxooCxdd87F6SJutSvwy0aBTEaYGcHoq06/XAUPYIO+oobNW WOM8kFFxIPpatn4tAgeVk/p+cA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:40:04 2026 by rpki-client