$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: yENSK1Ms8+k2koMAbyrJLuj9kXJlbckWn89jc2mVp00= Subject key identifier: 48:4B:F4:2C:78:47:B1:57:AF:25:DA:BC:35:09:7A:C1:90:C1:6C:93 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 022C Signing time: Wed 25 Mar 2026 02:05:42 +0000 Manifest this update: Wed 25 Mar 2026 02:05:42 +0000 Manifest next update: Wed 01 Apr 2026 02:05:42 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: pUSb8UnVWu97tsRi4a5dHONmm9HleRoKZwzx5Bh0qtU=) 2: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: jCFeHTOEaf/tAa5ix+hQ/UsUVIVpLzQ1m9SstZe2Zt0=) 3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: DS+0KFmcBE9DXzoqd+clX1iffNG/TJDheFzOy8o3k5w=) 4: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: hCwx0DM5AZe2LmvT1nwHBj2xXRoQx2u9h5+OYamek6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: Mar 25 02:05:42 2026 GMT Not After : Apr 1 02:05:42 2026 GMT Subject: CN=69c342f6-b6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:67:7a:0b:ee:7a:a3:87:38:f5:6b:06:d0: d4:d3:f3:17:e3:df:4a:79:7a:f8:84:8a:18:78:77: 2b:32:55:d6:bb:69:07:77:83:9d:8a:a1:84:88:81: 66:07:3f:f5:ae:77:59:34:df:a6:27:78:72:85:2b: dd:11:f5:72:73:a0:4c:35:48:4f:96:fd:23:19:f5: 96:af:5f:d8:48:ad:61:d4:d8:45:61:21:48:9a:9b: 42:f0:78:a8:aa:ec:c2:f4:d7:aa:5a:ea:7d:e0:f9: a4:d4:ca:18:09:f8:00:f4:7a:f7:a9:e7:cc:e8:e8: 70:ac:b0:01:20:d1:6f:f7:57:0d:ce:d4:a5:b4:99: 5a:75:3e:4f:6c:92:0c:c3:06:b3:18:92:be:8a:be: 0f:58:b4:cd:e6:d7:f5:66:3d:86:22:bf:c4:79:92: 5e:5f:ff:7a:bc:71:88:8c:9b:67:25:83:07:5c:f2: c1:26:50:38:e4:c6:b6:14:54:59:5e:54:17:9d:a4: 2f:db:6b:c1:c0:1d:f1:d9:64:e9:6e:7f:9a:40:9d: c6:73:6d:a8:cc:7f:0e:07:39:41:ad:2e:d3:91:64: ce:e4:f8:f9:d2:77:27:86:31:a5:9b:c7:3b:10:5c: 7f:8e:86:91:5e:13:50:44:f1:9d:1d:30:9c:d2:a9: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:F4:2C:78:47:B1:57:AF:25:DA:BC:35:09:7A:C1:90:C1:6C:93 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:9d:d8:3f:c4:fb:38:71:0b:40:e1:6d:53:b3:bc:80:90: 7e:09:34:a8:1a:95:0c:77:c3:43:39:1d:df:94:ce:d9:e9:26: b7:61:08:85:e4:89:d9:99:b9:0f:8a:79:e5:4c:53:10:e9:96: 64:8a:d0:06:f7:c0:ac:ee:a2:a5:d7:99:71:45:26:76:a8:b3: ca:dc:ca:21:0e:ec:7b:60:95:2f:16:21:43:85:20:b3:4b:16: 24:1a:c6:e2:da:f8:45:43:44:e9:08:80:bd:09:9a:fe:a5:88: db:1c:69:4d:7f:62:d3:2c:14:95:1b:10:fc:eb:41:32:22:cf: 5c:9a:24:a6:25:1d:2c:1c:41:fe:9e:c9:f0:5a:1b:f5:03:ce: ff:31:0c:59:d0:6c:4d:a1:20:50:70:ee:df:63:7f:fa:05:1c: e8:1b:bd:a1:1f:86:2a:da:17:a1:f5:9d:63:63:61:fa:0c:92: b3:72:54:29:e4:94:3e:e2:ab:05:c4:19:44:02:f6:7e:71:6e: 52:36:a0:b0:c3:1e:7a:8d:10:c5:9a:41:6a:fd:33:8e:14:a7: 2a:70:69:1b:d9:9f:a3:f9:e0:f3:f2:61:6a:97:8a:85:af:bf: 13:d3:db:3b:3b:68:a6:a3:3f:53:90:d0:45:11:b7:89:71:a7: 2c:8e:1d:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjYwMzI1MDIwNTQyWhcNMjYwNDAxMDIwNTQyWjAYMRYwFAYD VQQDEw02OWMzNDJmNi1iNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf5negvueqOHOPVrBtDU0/MX499KeXr4hIoYeHcrMlXWu2kHd4OdiqGEiIFm Bz/1rndZNN+mJ3hyhSvdEfVyc6BMNUhPlv0jGfWWr1/YSK1h1NhFYSFImptC8Hio quzC9NeqWup94Pmk1MoYCfgA9Hr3qefM6OhwrLABINFv91cNztSltJladT5PbJIM wwazGJK+ir4PWLTN5tf1Zj2GIr/EeZJeX/96vHGIjJtnJYMHXPLBJlA45Ma2FFRZ XlQXnaQv22vBwB3x2WTpbn+aQJ3Gc22ozH8OBzlBrS7TkWTO5Pj50ncnhjGlm8c7 EFx/joaRXhNQRPGdHTCc0qltWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhL9Cx4 R7FXryXavDUJesGQwWyTMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAALed2D/E+zhxC0DhbVOzvICQfgk0qBqVDHfDQzkd35TO2ekmt2EIheSJ2Zm5 D4p55UxTEOmWZIrQBvfArO6ipdeZcUUmdqizytzKIQ7se2CVLxYhQ4Ugs0sWJBrG 4tr4RUNE6QiAvQma/qWI2xxpTX9i0ywUlRsQ/OtBMiLPXJokpiUdLBxB/p7J8Fob 9QPO/zEMWdBsTaEgUHDu32N/+gUc6Bu9oR+GKtoXofWdY2Nh+gySs3JUKeSUPuKr BcQZRAL2fnFuUjagsMMeeo0QxZpBav0zjhSnKnBpG9mfo/ng8/JhapeKha+/E9Pb OztopqM/U5DQRRG3iXGnLI4dBw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:20 2026 by rpki-client