$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: yPbxGpEdSlzBUCoShXnLLchu8xZzHElygkjEktJ/G8Q= Subject key identifier: 4A:B7:FD:56:41:AB:A3:FA:B0:6E:B8:06:58:E9:31:45:75:82:AE:CF Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 45 Signing time: Wed 25 Mar 2026 07:38:48 +0000 Manifest this update: Wed 25 Mar 2026 07:38:47 +0000 Manifest next update: Wed 01 Apr 2026 07:38:47 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: 8UREKZv9s00032XdFBNlmNTDBVWZxfqyPwCyGQ1L3k0=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) 3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Mar 25 07:38:47 2026 GMT Not After : Apr 1 07:38:47 2026 GMT Subject: CN=69c39108-0132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:29:ff:21:5b:2c:c0:c9:f6:3b:51:c5:ed: 60:58:f9:cc:0c:4d:72:ce:8a:b3:9f:fa:65:76:b7: df:49:0d:dc:9c:a7:ec:7c:89:a4:44:26:c4:23:22: 6f:85:eb:36:11:56:d4:b1:2e:11:e8:78:16:27:aa: d9:b7:db:e6:e4:91:dd:af:e4:e3:35:23:75:ea:65: 97:e1:9b:67:d8:2e:62:0f:c9:5c:43:b6:b1:0a:2b: 8a:9e:81:4f:83:b1:50:b4:bb:e2:83:3b:90:5d:46: 67:c1:8a:c6:57:c9:3c:67:0c:cf:17:87:f7:22:66: e3:be:fb:d8:0e:f0:c8:2c:a4:2d:98:71:2e:d6:56: 63:3e:77:8c:8b:40:aa:74:4d:e7:68:f3:09:cc:04: 45:b4:3b:10:5f:d8:9a:04:f8:7a:ab:0e:fe:09:f6: 13:f0:b0:71:47:5d:73:07:75:68:d3:b6:b0:26:44: 77:9f:77:fd:2a:d8:af:9f:77:da:59:d5:c3:ca:51: 0d:0f:13:27:64:3a:10:d7:27:e9:7d:73:63:1f:29: 75:e5:6f:98:2c:57:55:76:cd:ef:41:01:0c:3e:a0: 96:86:c7:31:5c:e3:d7:2d:04:88:d1:9c:30:ff:09: 72:c3:81:7e:b4:15:a5:90:d6:04:ad:5a:28:7f:59: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:FD:56:41:AB:A3:FA:B0:6E:B8:06:58:E9:31:45:75:82:AE:CF X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ea:5e:6c:5e:f2:9e:50:b5:ab:f5:58:d5:96:f9:38:d0:e4: 66:b9:c9:00:df:27:79:76:43:40:40:b5:60:5f:39:51:a4:10: 37:93:f5:0b:73:5f:b9:dd:9c:05:ee:c3:9c:d9:33:44:0b:4d: c8:2d:fa:e5:73:cb:64:77:96:5e:29:6a:79:cf:80:87:8e:a2: 83:72:17:51:51:56:97:46:82:28:3b:a8:41:4e:6b:01:3f:c9: 1c:a7:03:4f:4f:26:fb:a9:8a:16:0a:8d:1e:d7:78:08:ee:63: 10:d5:3a:8c:07:3a:90:5e:71:f7:20:4c:18:54:4c:9d:36:0d: a3:c9:5f:b7:67:3a:5f:a6:7a:6c:00:f5:24:68:3f:57:35:96: 39:ff:64:16:15:ae:c4:fb:f0:f2:e1:9c:78:77:bd:ce:0a:eb: 30:13:92:da:c7:c7:a9:24:9b:b2:da:f1:ab:82:11:ef:57:e0: c8:95:f8:0e:e4:8c:62:83:bf:23:5d:47:c9:af:d5:42:67:bd: f3:83:a9:d9:71:6f:09:34:7f:75:ab:10:0c:db:c2:6a:35:12: 64:20:e3:30:b4:e3:db:04:11:3a:dd:30:47:5b:6d:a7:aa:65: 99:eb:78:45:c2:32:3e:aa:47:9d:9c:b2:a0:a6:05:76:c9:50: 7b:6e:fa:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjAzMjUwNzM4NDdaFw0yNjA0MDEwNzM4NDdaMBgxFjAUBgNV BAMTDTY5YzM5MTA4LTAxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEnin/IVsswMn2O1HF7WBY+cwMTXLOirOf+mV2t99JDdycp+x8iaREJsQjIm+F 6zYRVtSxLhHoeBYnqtm32+bkkd2v5OM1I3XqZZfhm2fYLmIPyVxDtrEKK4qegU+D sVC0u+KDO5BdRmfBisZXyTxnDM8Xh/ciZuO++9gO8MgspC2YcS7WVmM+d4yLQKp0 Tedo8wnMBEW0OxBf2JoE+HqrDv4J9hPwsHFHXXMHdWjTtrAmRHefd/0q2K+fd9pZ 1cPKUQ0PEydkOhDXJ+l9c2MfKXXlb5gsV1V2ze9BAQw+oJaGxzFc49ctBIjRnDD/ CXLDgX60FaWQ1gStWih/WWL3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSrf9VkGr o/qwbrgGWOkxRXWCrs8wHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAi6l5sXvKeULWr9VjVlvk40ORmuckA3yd5dkNAQLVgXzlRpBA3k/ULc1+53ZwF 7sOc2TNEC03ILfrlc8tkd5ZeKWp5z4CHjqKDchdRUVaXRoIoO6hBTmsBP8kcpwNP Tyb7qYoWCo0e13gI7mMQ1TqMBzqQXnH3IEwYVEydNg2jyV+3ZzpfpnpsAPUkaD9X NZY5/2QWFa7E+/Dy4Zx4d73OCuswE5Lax8epJJuy2vGrghHvV+DIlfgO5Ixig78j XUfJr9VCZ73zg6nZcW8JNH91qxAM28JqNRJkIOMwtOPbBBE63TBHW22nqmWZ63hF wjI+qkednLKgpgV2yVB7bvqw -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:13 2026 by rpki-client