$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: df19YfQXrwRIWT0iO/KTZAfaJGhCAhnMCvyZx1ckdu4= Subject key identifier: ED:DA:BA:45:A4:A5:2A:2E:24:4E:E0:3E:ED:53:F5:0A:C9:B0:0C:18 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 155D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1536 Signing time: Tue 24 Mar 2026 16:43:04 +0000 Manifest this update: Tue 24 Mar 2026 16:43:03 +0000 Manifest next update: Tue 31 Mar 2026 16:43:03 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: 77FEgCyx7/54zsxQOMuZZRSJf5YvIrcI5hJF1t+/fYY=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=) 4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5469 (0x155d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Mar 24 16:43:03 2026 GMT Not After : Mar 31 16:43:03 2026 GMT Subject: CN=69c2bf17-69a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:e2:e6:36:d9:7d:4a:df:8a:40:f4:68:fd: 5b:3f:91:60:7a:7e:99:d3:57:72:54:cd:e3:98:df: fe:85:f2:d4:41:20:fb:b7:43:a3:e8:e7:1f:d9:b8: 83:90:4c:e9:5b:64:f3:1b:67:91:2e:d3:9b:b3:b9: 62:73:59:07:32:1a:74:df:78:e7:a6:f7:05:76:ec: 13:4a:0a:72:38:3d:3c:7c:70:6b:9e:70:4b:fb:98: 76:ac:3e:cf:97:71:a0:c3:e5:4b:c9:85:53:7d:2e: 3e:37:ab:d3:2b:a5:ab:b3:82:f1:e2:e4:a9:8b:d6: 62:58:2f:34:d7:5f:f8:8e:5d:77:6a:81:80:1e:ec: 2b:ce:19:d1:30:6c:a0:21:1d:18:c8:18:9d:e5:d4: 9e:60:7c:56:4a:34:60:c6:a7:ab:37:6b:2b:dc:45: 62:e7:f9:be:48:11:e2:5e:66:d7:46:ba:24:f8:f5: be:cd:2d:7a:25:48:1a:04:b8:5a:3a:3d:f3:be:da: a2:80:f4:04:8a:32:d0:42:36:1f:6a:71:2a:36:2b: 1b:09:71:68:0f:7c:67:2d:32:64:18:41:18:e7:3f: 92:2a:2d:e2:92:41:0e:ff:08:3a:9e:ea:1f:14:84: 2f:cd:d6:b3:8d:3a:32:0a:b8:1f:a7:ff:a7:de:70: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DA:BA:45:A4:A5:2A:2E:24:4E:E0:3E:ED:53:F5:0A:C9:B0:0C:18 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:eb:7a:da:5f:43:e3:cd:df:02:89:2a:48:9d:75:0a:a4:36: bd:e1:88:2a:43:27:c7:a1:63:d0:e6:e2:8c:19:8a:55:c7:43: 1e:63:89:41:1b:49:db:3c:05:5d:68:35:a0:c5:db:45:65:b5: ae:d2:3d:1d:df:4a:37:e9:3a:fc:56:2f:42:6f:38:3c:31:c7: ed:16:f6:70:e8:06:97:cb:c6:01:97:8d:15:fa:45:5c:63:77: dd:0a:c4:64:2b:dc:4f:b6:be:d2:6c:0e:4a:c5:1b:d4:ac:c0: e2:26:b7:d1:83:1c:65:69:31:3e:ff:6b:66:e8:f7:50:92:14: 93:6c:d2:2e:b7:ef:18:ea:42:f4:5e:33:f3:25:1b:6b:1f:a5: a8:7d:97:64:60:5f:54:28:9e:05:02:f4:b4:ad:d7:33:7a:1b: 7b:16:d2:0a:39:0a:f5:4a:4a:77:6c:89:02:8b:9b:21:12:7a: 72:34:30:21:be:28:4f:bc:58:56:02:c0:f7:1a:0f:d8:7e:df: cf:17:b2:fd:0d:03:ee:55:ee:53:76:dd:b6:87:ab:62:a5:78: 41:d2:78:0e:c2:ce:72:b8:86:b8:be:f4:04:49:c2:92:82:9e: 15:a0:5e:2c:13:7f:86:c3:92:8d:7c:41:a6:47:23:e6:a5:07: da:1b:8b:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYwMzI0MTY0MzAzWhcNMjYwMzMxMTY0MzAzWjAYMRYwFAYD VQQDEw02OWMyYmYxNy02OWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+zi5jbZfUrfikD0aP1bP5Fgen6Z01dyVM3jmN/+hfLUQSD7t0Oj6Ocf2biD kEzpW2TzG2eRLtObs7lic1kHMhp033jnpvcFduwTSgpyOD08fHBrnnBL+5h2rD7P l3Ggw+VLyYVTfS4+N6vTK6Wrs4Lx4uSpi9ZiWC8011/4jl13aoGAHuwrzhnRMGyg IR0YyBid5dSeYHxWSjRgxqerN2sr3EVi5/m+SBHiXmbXRrok+PW+zS16JUgaBLha Oj3zvtqigPQEijLQQjYfanEqNisbCXFoD3xnLTJkGEEY5z+SKi3ikkEO/wg6nuof FIQvzdazjToyCrgfp/+n3nA1mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3aukWk pSouJE7gPu1T9QrJsAwYMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOt62l9D483fAokqSJ11CqQ2veGIKkMnx6Fj0ObijBmKVcdDHmOJQRtJ2zwF XWg1oMXbRWW1rtI9Hd9KN+k6/FYvQm84PDHH7Rb2cOgGl8vGAZeNFfpFXGN33QrE ZCvcT7a+0mwOSsUb1KzA4ia30YMcZWkxPv9rZuj3UJIUk2zSLrfvGOpC9F4z8yUb ax+lqH2XZGBfVCieBQL0tK3XM3obexbSCjkK9UpKd2yJAoubIRJ6cjQwIb4oT7xY VgLA9xoP2H7fzxey/Q0D7lXuU3bdtoerYqV4QdJ4DsLOcriGuL70BEnCkoKeFaBe LBN/hsOSjXxBpkcj5qUH2huLPQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:01 2026 by rpki-client