$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: kTW3vfRGJmRR/Ul1SoP5LlBLS8ILvJJmOFgQxCpA7zA= Subject key identifier: 8B:84:F9:0B:78:C9:2A:89:58:30:52:C4:FE:8B:C9:A3:B3:4E:8E:4E Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0BB2 Signing time: Tue 24 Mar 2026 18:49:21 +0000 Manifest this update: Tue 24 Mar 2026 18:49:21 +0000 Manifest next update: Tue 31 Mar 2026 18:49:21 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: 9mwiUTvT5bGi9uQKD/Eid9FmtrSVOpq/AszfZ0r/AzA=) 2: 4580DDDEEA0A11F09D7A92E76F6F56BC.roa (hash: dP56HqiOS0iPtAVucNZ2wR/KoNuwl+rRD4b0wwXFjDs=) 3: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=) 4: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=) 5: 450DDD84EA0A11F09D7A92E76F6F56BC.roa (hash: kJnM7EoAenCH3PCIlTPoGD0IpncArPRKG0ulKlcXT+o=) 6: 44942606EA0A11F09D7A92E76F6F56BC.roa (hash: EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=) 7: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Mar 24 18:49:21 2026 GMT Not After : Mar 31 18:49:21 2026 GMT Subject: CN=69c2dcb1-137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:fa:bb:b3:01:df:53:5d:60:8d:ae:54:6a: a9:91:73:09:27:2e:5e:45:42:89:c2:ae:73:dc:29: cc:8e:3a:be:17:4c:77:39:40:33:7c:9d:7d:e6:11: b3:e0:9e:59:b9:21:f9:24:78:ab:d7:cf:2f:ed:44: 80:3b:02:80:b8:53:3e:c0:7c:3c:93:db:73:a6:67: b6:f3:6b:8f:95:43:88:0d:15:dd:e0:70:1e:84:3b: bc:93:d6:98:a4:b2:a4:bf:96:9e:bf:a0:ac:39:9f: 5c:84:66:76:84:0d:5e:6c:bb:d0:8b:66:28:f6:ed: 7d:49:d0:a6:7d:a5:8f:7e:1c:0a:68:b5:ff:74:5d: f2:d8:69:1b:73:5c:f5:6b:31:cb:8c:68:96:45:46: ce:fd:6f:5c:28:39:d1:a3:06:bb:fd:c2:12:df:b4: 8c:a6:50:1f:44:90:28:ec:38:3d:9f:fa:3c:fd:9d: 2b:14:13:91:17:61:c5:bd:77:df:4a:f0:dd:77:fc: 17:3a:7c:ec:2c:0d:3b:74:02:3a:48:30:78:d5:18: 0e:7b:60:26:51:db:d8:5e:5d:da:71:32:59:e1:4a: 3d:b7:6a:ba:0c:b7:a4:42:50:e9:91:02:91:69:d2: 52:eb:9d:77:2e:3a:2b:fa:64:db:fd:b1:24:b4:03: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:F9:0B:78:C9:2A:89:58:30:52:C4:FE:8B:C9:A3:B3:4E:8E:4E X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:06:2e:e6:fe:8c:3c:7a:af:c5:a5:b8:e2:74:7d:86:4a:1e: 40:d6:0c:18:f3:4e:6a:d4:c2:b7:da:6c:69:65:af:51:78:8d: 8f:78:1a:52:eb:55:97:89:a6:a0:0c:b6:54:b0:81:4e:96:ea: 3e:67:3e:24:6d:d7:c0:d2:9f:ce:c6:b1:b6:70:e6:28:ac:ea: 1a:0e:5f:4d:db:42:fe:82:f9:bb:e3:67:dd:fc:ae:0e:a5:77: 93:7b:aa:8b:48:3b:b8:14:46:05:f6:33:2f:50:42:1d:bd:99: dc:f9:80:a5:72:70:b9:a6:5a:d9:2e:12:66:c6:f0:0e:56:a9: d7:1b:a6:e3:24:16:cc:7f:22:b4:b0:97:84:e7:69:8e:dc:a1: ec:9b:56:fd:b5:ca:a3:3c:85:1d:d7:a3:19:f4:65:5f:43:d4: 3b:b6:c4:fd:e1:bb:3a:55:d9:b4:6a:25:c5:42:df:3f:e3:33: 77:3e:81:df:9a:29:44:94:dd:3d:85:73:c1:5a:f7:83:18:16: 62:c7:9d:15:6d:8e:eb:34:e0:01:d1:fc:ed:33:a9:e3:ff:a0: 86:ad:5a:c3:6a:b4:d6:c1:76:b3:c9:74:83:ee:26:8d:e9:3d: d8:21:9f:55:0b:bc:cb:22:ff:a8:48:84:7a:f6:30:a7:b6:63: db:e6:1b:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjYwMzI0MTg0OTIxWhcNMjYwMzMxMTg0OTIxWjAYMRYwFAYD VQQDEw02OWMyZGNiMS0xMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqT6u7MB31NdYI2uVGqpkXMJJy5eRUKJwq5z3CnMjjq+F0x3OUAzfJ195hGz 4J5ZuSH5JHir188v7USAOwKAuFM+wHw8k9tzpme282uPlUOIDRXd4HAehDu8k9aY pLKkv5aev6CsOZ9chGZ2hA1ebLvQi2Yo9u19SdCmfaWPfhwKaLX/dF3y2Gkbc1z1 azHLjGiWRUbO/W9cKDnRowa7/cIS37SMplAfRJAo7Dg9n/o8/Z0rFBORF2HFvXff SvDdd/wXOnzsLA07dAI6SDB41RgOe2AmUdvYXl3acTJZ4Uo9t2q6DLekQlDpkQKR adJS6513Ljor+mTb/bEktAMF9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuE+Qt4 ySqJWDBSxP6LyaOzTo5OMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQYu5v6MPHqvxaW44nR9hkoeQNYMGPNOatTCt9psaWWvUXiNj3gaUutVl4mm oAy2VLCBTpbqPmc+JG3XwNKfzsaxtnDmKKzqGg5fTdtC/oL5u+Nn3fyuDqV3k3uq i0g7uBRGBfYzL1BCHb2Z3PmApXJwuaZa2S4SZsbwDlap1xum4yQWzH8itLCXhOdp jtyh7JtW/bXKozyFHdejGfRlX0PUO7bE/eG7OlXZtGolxULfP+Mzdz6B35opRJTd PYVzwVr3gxgWYsedFW2O6zTgAdH87TOp4/+ghq1aw2q01sF2s8l0g+4mjek92CGf VQu8yyL/qEiEevYwp7Zj2+YbuA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:15 2026 by rpki-client