$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json) Hash identifier: gQ8iRgD6uqtGk0nWFajrRFpoCqRycBA0+CAHZbL1R60= Subject key identifier: 4D:73:20:48:E6:1E:75:74:8B:15:FC:BE:FA:07:E6:0D:89:64:F5:B6 Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft Manifest number: 41 Signing time: Wed 25 Mar 2026 07:35:37 +0000 Manifest this update: Wed 25 Mar 2026 07:35:36 +0000 Manifest next update: Wed 01 Apr 2026 07:35:36 +0000 Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: SH89X+um5CYRZSr50le6XrmXGrbpn3nnNeiDjJisdEg=) 2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Validity Not Before: Mar 25 07:35:36 2026 GMT Not After : Apr 1 07:35:36 2026 GMT Subject: CN=69c39049-8048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:c1:9f:53:9b:0e:97:b1:78:68:a8:6c:45: 38:d1:3a:b6:3f:1e:a7:43:26:6f:ee:88:0f:2c:c6: 47:e3:5c:10:1f:01:fe:cd:9f:6b:cc:b9:a6:6d:62: d6:2b:f8:a3:2a:8c:62:17:27:1b:8d:0c:89:21:25: 29:fd:f3:f5:e9:bf:71:84:f3:68:15:af:d1:e9:bd: b4:04:da:8e:5e:b4:4e:5c:ca:25:55:be:f5:21:72: a8:6a:2a:1e:c4:8d:ab:7a:17:b5:af:2a:e6:f0:aa: c2:12:0c:d5:b6:9e:80:32:ff:88:49:1a:a5:55:e5: ee:28:21:cc:7f:82:16:a1:ca:91:88:c2:6e:90:72: 9a:27:67:a9:4d:af:e2:9f:b6:f8:cd:15:79:f8:9b: 20:ee:0c:3d:ed:2b:84:af:4a:99:b0:30:39:6d:7b: 14:a1:68:61:06:52:b1:cf:83:af:89:97:94:33:19: 46:23:b3:13:34:2f:7c:5f:8c:55:0a:73:29:e5:36: a1:09:93:36:76:67:d3:69:eb:86:fd:33:9b:e0:b8: de:9d:49:d0:67:94:52:3c:e8:a0:1d:ee:cf:e5:2a: ab:c2:5d:9a:88:a4:6b:cf:fb:3f:7f:2c:47:34:35: 38:2c:32:c8:67:e9:41:7f:81:f4:77:00:1c:18:df: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:20:48:E6:1E:75:74:8B:15:FC:BE:FA:07:E6:0D:89:64:F5:B6 X509v3 Authority Key Identifier: keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2e:d9:36:6d:e1:31:65:4f:17:8b:a5:2d:7f:b6:fe:d1:3e: a4:25:bd:71:a7:b6:ad:52:01:4a:55:fc:09:35:44:34:bb:38: ea:17:cd:7f:4e:68:5b:51:15:86:5c:23:d3:47:ca:7c:50:9f: 27:34:82:5b:ce:49:2d:02:cf:da:bb:70:af:93:49:9a:37:0f: 30:f2:49:3b:ae:99:e8:df:40:03:dc:22:d8:1c:88:4f:82:a0: 47:a3:05:80:f1:4c:4e:9a:26:97:87:fc:d7:39:3e:e4:eb:fb: ee:9b:51:ad:81:52:26:b1:6a:3d:85:1e:00:4b:1e:e7:bc:06: 0a:86:b1:e4:a7:09:60:24:e7:5c:ff:e0:d4:18:b4:e0:11:25: 5d:13:e5:66:49:31:04:b4:22:f0:31:80:c7:34:e9:ab:1c:8f: 77:52:ce:b6:b4:73:52:92:06:4c:41:bb:ce:d7:bd:20:57:c3: f6:58:49:c0:fa:42:7d:3f:5f:e2:91:49:91:2f:bc:98:5b:89: 0b:f5:33:66:30:81:66:7f:1c:b3:5c:55:57:c4:b9:dd:0e:fb: 0f:cb:37:76:47:3b:06:17:20:4e:3f:23:6d:c9:f7:df:44:a1: 68:cf:ae:52:03:df:b3:2c:27:89:51:68:60:c6:e6:74:8d:3b: 80:0a:c9:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5MTQ2RjlGQzU2 NDA5MTk5NzAeFw0yNjAzMjUwNzM1MzZaFw0yNjA0MDEwNzM1MzZaMBgxFjAUBgNV BAMTDTY5YzM5MDQ5LTgwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUOsGfU5sOl7F4aKhsRTjROrY/HqdDJm/uiA8sxkfjXBAfAf7Nn2vMuaZtYtYr +KMqjGIXJxuNDIkhJSn98/Xpv3GE82gVr9HpvbQE2o5etE5cyiVVvvUhcqhqKh7E jat6F7WvKubwqsISDNW2noAy/4hJGqVV5e4oIcx/ghahypGIwm6QcponZ6lNr+Kf tvjNFXn4myDuDD3tK4SvSpmwMDltexShaGEGUrHPg6+Jl5QzGUYjsxM0L3xfjFUK cynlNqEJkzZ2Z9Np64b9M5vguN6dSdBnlFI86KAd7s/lKqvCXZqIpGvP+z9/LEc0 NTgsMshn6UF/gfR3ABwY3/oRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTXMgSOYe dXSLFfy++gfmDYlk9bYwHwYDVR0jBBgwFoAUz5o/MWSDoqeUQR1ZFG+fxWQJGZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0IzNzUyQUIyQzY4 MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkda Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejVvX01XU0RvcWVVUVIxWkZHLWZ4V1FKR1pjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND RTE4L0IzNzUyQUIyQzY4MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3Fl VVFSMVpGRy1meFdRSkdaYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDLtk2beExZU8Xi6Utf7b+0T6kJb1xp7atUgFKVfwJNUQ0uzjqF81/TmhbURWG XCPTR8p8UJ8nNIJbzkktAs/au3Cvk0maNw8w8kk7rpno30AD3CLYHIhPgqBHowWA 8UxOmiaXh/zXOT7k6/vum1GtgVImsWo9hR4ASx7nvAYKhrHkpwlgJOdc/+DUGLTg ESVdE+VmSTEEtCLwMYDHNOmrHI93Us62tHNSkgZMQbvO170gV8P2WEnA+kJ9P1/i kUmRL7yYW4kL9TNmMIFmfxyzXFVXxLndDvsPyzd2RzsGFyBOPyNtyfffRKFoz65S A9+zLCeJUWhgxuZ0jTuACsnj -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:46 2026 by rpki-client