$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: s+b+P7M9WfGXuw0bhlv5DA+Bt/HasNTNaRg8LV7pFv4= Subject key identifier: 2B:5F:8E:49:BC:CC:3B:D9:16:70:3B:D1:63:BC:4D:E2:A0:2E:7B:50 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0901 Signing time: Tue 24 Mar 2026 20:05:06 +0000 Manifest this update: Tue 24 Mar 2026 20:05:05 +0000 Manifest next update: Tue 31 Mar 2026 20:05:05 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: 4VC+oV59TL8Hu2BOLT2/Y0jh0FUt8VGlhaXo4qFZ3G0=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: okmXmHYulLyxDZHeOTwAQb95eohRY4pGXYv8eeAWmU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Mar 24 20:05:05 2026 GMT Not After : Mar 31 20:05:05 2026 GMT Subject: CN=69c2ee72-8d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:6e:ee:df:64:ee:e6:59:4e:ad:d6:17:47: c5:ab:0b:38:61:7c:6c:fc:d1:03:44:97:6f:ab:71: 0d:58:d0:7b:46:bb:a1:fe:e8:3d:f2:e1:3b:84:6d: ed:b7:11:d0:f5:33:2b:af:a2:8a:6e:b7:cc:df:41: 79:13:0c:33:a5:e4:12:67:3f:8e:80:21:65:2d:9d: f2:33:6f:82:db:df:22:07:37:13:6e:72:36:84:fd: c3:a9:78:db:f5:e2:e9:90:da:eb:0f:3c:4f:62:10: 60:8d:29:2b:57:96:83:a5:79:c4:51:9d:6d:35:5d: ae:78:fd:5e:e5:76:d5:e6:71:5d:01:6a:fb:7b:21: ce:ad:be:f6:f8:db:9e:fb:87:10:5d:1f:af:3f:d6: 9e:e5:ed:19:fc:84:dd:88:d3:1d:c0:57:d6:57:99: bd:1c:f2:48:cb:c6:b2:85:00:b8:e0:d7:4e:5d:6d: b6:37:97:3f:4a:6f:19:72:78:12:81:4d:59:fa:e5: d4:15:f6:34:4e:6b:27:cd:30:ef:0e:71:3b:b2:10: f7:c8:6a:2f:4f:38:93:fe:01:21:2f:1e:45:b7:9d: f6:42:4c:79:8d:72:ea:1b:94:dd:92:1a:8c:8c:f8: 0a:4d:33:9d:9c:bb:70:50:5b:2a:37:35:70:37:89: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5F:8E:49:BC:CC:3B:D9:16:70:3B:D1:63:BC:4D:E2:A0:2E:7B:50 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:76:a4:8b:6f:19:64:ff:c5:1b:df:25:24:55:31:57:c1:4a: 1a:61:1b:93:0c:3b:58:96:1d:8d:08:24:e7:50:32:56:4e:32: ad:10:ac:84:4e:e8:0c:37:72:24:c0:ea:77:a6:c8:d0:f2:57: eb:08:ee:b7:ab:06:fb:2d:09:00:d3:48:82:b9:c4:45:6b:01: c6:fe:09:13:7e:5b:c8:43:b8:36:2b:65:cc:0e:01:08:93:2d: 62:bc:30:7e:2c:ce:7e:06:52:86:d2:cd:c9:f6:b1:da:f5:4e: 3c:03:16:95:14:51:4a:f5:0c:6f:c1:c9:5a:d8:f4:76:d3:57: f1:24:f3:69:c2:97:17:43:d1:12:6d:ab:e3:12:4c:4b:1e:15: dc:64:27:a3:a8:17:20:06:a2:87:c0:d5:4d:76:f2:84:6a:eb: a0:e9:6b:9b:cc:87:78:a3:c2:23:24:65:e5:d9:47:cb:a6:41: fe:34:ba:85:f9:d4:aa:66:34:a1:ba:25:cb:14:30:4f:cf:6c: 8f:8a:5c:b7:80:23:db:94:80:8d:0b:15:94:6e:bf:0d:ff:01: 64:e0:04:17:6c:1f:0a:84:11:60:cd:a6:69:2b:6e:13:c0:67: 9f:f3:12:75:f8:0f:5f:ae:c0:14:0f:02:c0:bb:56:18:69:7c: d6:68:91:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwMzI0MjAwNTA1WhcNMjYwMzMxMjAwNTA1WjAYMRYwFAYD VQQDEw02OWMyZWU3Mi04ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlJu7t9k7uZZTq3WF0fFqws4YXxs/NEDRJdvq3ENWNB7Rruh/ug98uE7hG3t txHQ9TMrr6KKbrfM30F5EwwzpeQSZz+OgCFlLZ3yM2+C298iBzcTbnI2hP3DqXjb 9eLpkNrrDzxPYhBgjSkrV5aDpXnEUZ1tNV2ueP1e5XbV5nFdAWr7eyHOrb72+Nue +4cQXR+vP9ae5e0Z/ITdiNMdwFfWV5m9HPJIy8ayhQC44NdOXW22N5c/Sm8ZcngS gU1Z+uXUFfY0TmsnzTDvDnE7shD3yGovTziT/gEhLx5Ft532Qkx5jXLqG5TdkhqM jPgKTTOdnLtwUFsqNzVwN4m41wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtfjkm8 zDvZFnA70WO8TeKgLntQMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnHaki28ZZP/FG98lJFUxV8FKGmEbkww7WJYdjQgk51AyVk4yrRCshE7oDDdy JMDqd6bI0PJX6wjut6sG+y0JANNIgrnERWsBxv4JE35byEO4NitlzA4BCJMtYrww fizOfgZShtLNyfax2vVOPAMWlRRRSvUMb8HJWtj0dtNX8STzacKXF0PREm2r4xJM Sx4V3GQno6gXIAaih8DVTXbyhGrroOlrm8yHeKPCIyRl5dlHy6ZB/jS6hfnUqmY0 obolyxQwT89sj4pct4Aj25SAjQsVlG6/Df8BZOAEF2wfCoQRYM2maStuE8Bnn/MS dfgPX67AFA8CwLtWGGl81miRIg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:49 2026 by rpki-client