$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: /AKlMqV8Myd1gbaJMfVYa5Waqy5+SG5B2gC01ILQYzg= Subject key identifier: F3:57:A2:56:3C:19:2B:55:02:1E:A9:62:9C:39:8D:74:6A:A4:D0:1E Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 0123 Signing time: Wed 25 Mar 2026 05:06:00 +0000 Manifest this update: Wed 25 Mar 2026 05:06:00 +0000 Manifest next update: Wed 01 Apr 2026 05:06:00 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: zIjDgtsJCY8r/KRMmELiEJhiGiOZPKSXoLQ5kHrFHRM=) 2: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: 22jIW/Ccl08J4PaXTvjG86262j5seRrjTm5Q9000LDk=) 3: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: yRKa0de5+xQBRye8B1ut3RljdvtzhwWjWUt+b8C1TkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: Mar 25 05:06:00 2026 GMT Not After : Apr 1 05:06:00 2026 GMT Subject: CN=69c36d38-0167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:36:1b:61:f2:c3:ac:f2:4b:d7:3a:3c:a9: f8:20:03:19:48:f7:d6:95:45:83:50:79:c5:0b:04: 31:27:8d:a0:df:1b:d8:c6:33:36:d4:4f:5d:48:1d: 9c:9f:83:5e:c6:13:5d:ac:f9:8c:84:36:d8:c5:23: 73:8e:5a:2f:9e:77:44:2b:ce:03:ac:27:6e:7e:6c: ad:2a:4c:ae:ba:03:6f:ee:f2:7a:65:13:80:54:40: ca:ed:7c:e1:17:45:fe:4b:0f:0d:1f:5c:de:d7:91: b8:ca:95:c2:1e:ae:8b:8e:75:78:b0:13:1e:fd:c4: c6:eb:b1:83:09:94:1e:41:10:f3:18:e5:ed:a2:fe: ab:27:af:56:08:2d:4c:1e:09:28:84:a4:15:7f:87: 4b:5a:a7:07:c2:bd:c7:0b:97:ad:b7:43:51:2a:b7: 3f:6c:1f:b6:b5:d2:9a:4c:f8:a1:1e:ad:5f:1e:05: a2:70:13:07:0d:20:17:4b:60:3c:ba:3d:36:9d:62: 5f:3f:84:11:d9:d0:45:5d:58:f4:42:b9:bc:a4:3f: ea:18:49:8f:6c:b4:49:92:82:e4:b2:89:8b:1e:b3: e1:a6:90:2e:8b:8a:f5:ec:6f:51:18:ed:31:4b:9d: 84:b9:7e:ef:2c:30:5a:a9:05:36:39:42:94:31:2e: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:A2:56:3C:19:2B:55:02:1E:A9:62:9C:39:8D:74:6A:A4:D0:1E X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ad:51:1a:7a:fd:b8:cf:22:18:6e:37:d0:1a:61:15:48:82: de:a6:29:2b:ff:8f:88:8f:6a:90:f3:0b:04:d4:83:85:df:5a: d9:73:5e:c8:1d:07:6a:75:1b:4a:25:f5:82:92:e8:3e:33:d5: 58:30:27:ef:90:ee:2f:7b:46:ad:3b:9e:4d:3a:23:a9:28:2f: 3d:5e:1c:bc:e3:bc:8c:80:e9:9a:60:e7:be:87:df:a6:c2:e1: 47:2e:a6:a1:7f:e5:b8:fa:a7:48:4a:43:32:da:64:aa:cb:ec: 35:16:60:fa:57:88:92:df:a5:19:e2:b4:68:ac:c9:91:85:e5: fa:ff:a2:b0:18:81:a4:67:9a:1b:e5:61:68:5e:2f:b9:ae:65: 26:71:ad:74:01:68:2a:bd:54:49:65:b7:d0:9b:54:f3:f9:78: 5c:b6:eb:fa:b3:09:c7:5e:a7:5f:bd:a5:a0:14:64:79:ec:64: e4:76:d1:02:c9:bf:6a:88:06:0d:74:5e:ef:8a:b8:31:84:64: e8:e3:59:8c:32:2c:90:46:6c:27:9d:6d:68:4f:a0:3f:35:02: aa:81:b1:1d:2a:b3:ef:ee:47:02:fa:30:f0:9e:e1:f5:a5:cb: 4c:c7:01:2b:94:18:6f:79:73:fc:04:cb:30:b9:c8:1b:09:05: a3:97:32:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjYwMzI1MDUwNjAwWhcNMjYwNDAxMDUwNjAwWjAYMRYwFAYD VQQDEw02OWMzNmQzOC0wMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofs2G2Hyw6zyS9c6PKn4IAMZSPfWlUWDUHnFCwQxJ42g3xvYxjM21E9dSB2c n4NexhNdrPmMhDbYxSNzjlovnndEK84DrCdufmytKkyuugNv7vJ6ZROAVEDK7Xzh F0X+Sw8NH1ze15G4ypXCHq6LjnV4sBMe/cTG67GDCZQeQRDzGOXtov6rJ69WCC1M HgkohKQVf4dLWqcHwr3HC5ett0NRKrc/bB+2tdKaTPihHq1fHgWicBMHDSAXS2A8 uj02nWJfP4QR2dBFXVj0Qrm8pD/qGEmPbLRJkoLksomLHrPhppAui4r17G9RGO0x S52EuX7vLDBaqQU2OUKUMS6yhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNXolY8 GStVAh6pYpw5jXRqpNAeMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqK1RGnr9uM8iGG430BphFUiC3qYpK/+PiI9qkPMLBNSDhd9a2XNeyB0HanUb SiX1gpLoPjPVWDAn75DuL3tGrTueTTojqSgvPV4cvOO8jIDpmmDnvoffpsLhRy6m oX/luPqnSEpDMtpkqsvsNRZg+leIkt+lGeK0aKzJkYXl+v+isBiBpGeaG+VhaF4v ua5lJnGtdAFoKr1USWW30JtU8/l4XLbr+rMJx16nX72loBRkeexk5HbRAsm/aogG DXRe74q4MYRk6ONZjDIskEZsJ51taE+gPzUCqoGxHSqz7+5HAvow8J7h9aXLTMcB K5QYb3lz/ATLMLnIGwkFo5cygw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:33 2026 by rpki-client