$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: iLPuYQdJfCpzyJUlXQ6mcEkDkoNy7yujKM1ysiAma+k= Subject key identifier: B8:41:24:FE:1C:0E:4C:F2:43:C5:BE:B7:65:1D:07:96:7C:CB:F3:E9 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 0167 Signing time: Wed 25 Mar 2026 04:25:11 +0000 Manifest this update: Wed 25 Mar 2026 04:25:11 +0000 Manifest next update: Wed 01 Apr 2026 04:25:11 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: CCUFZpVV+jml8BnXBF0bs1sLtdyCGkKQD2+2lv041hg=) 2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 67zPveAGWACKXH5KBWrmkt2SFJ5lwQJInUFCgeAJkNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Mar 25 04:25:11 2026 GMT Not After : Apr 1 04:25:11 2026 GMT Subject: CN=69c363a7-8127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:8d:2f:38:82:91:db:3a:10:3c:af:19:2a: 12:e7:bc:d1:2b:a5:13:f3:d7:0b:68:fb:b5:e0:74: ed:28:2c:54:56:5c:82:90:f8:47:2b:83:5d:5e:83: bf:e4:40:24:f7:f5:0d:1b:2f:85:73:6a:1b:63:86: 0c:92:0e:af:ff:75:03:3b:bb:7f:ed:a8:77:0c:f5: e6:16:37:73:80:9b:e7:28:ae:3f:29:7c:9b:93:5f: 49:85:fe:e3:59:f2:d1:8f:71:e8:87:ed:73:0b:44: d8:2c:26:26:48:9e:f4:aa:94:11:ca:24:94:10:98: 9b:5f:88:11:a6:16:72:76:5f:28:ea:a6:37:98:99: 56:26:34:ed:c6:ad:a7:0d:ec:60:a5:47:e5:91:a5: 81:b9:9b:7f:fd:89:d6:69:e0:03:60:78:73:d1:ed: df:9d:08:83:a1:02:b7:b4:ea:46:ea:f0:6f:4f:49: 6b:4d:3b:22:40:4c:7e:84:ec:28:70:4a:5c:26:2e: f8:32:44:38:08:e0:1c:7a:d4:a8:d9:09:0a:aa:b0: 01:49:74:87:00:56:21:b6:04:71:13:72:aa:77:93: 00:ed:10:f2:c9:32:92:80:ef:41:6a:a3:5e:66:c8: cf:7d:2e:d1:63:74:51:bd:e8:8b:e7:b2:7f:36:0e: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:41:24:FE:1C:0E:4C:F2:43:C5:BE:B7:65:1D:07:96:7C:CB:F3:E9 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:be:96:5e:56:9e:94:bd:6e:7d:f1:3e:02:a2:1f:05:09: df:75:07:39:37:c3:2d:dd:67:ba:d9:da:ed:f4:ec:bc:16:6f: ee:a3:01:4c:91:19:66:e2:fe:55:97:e5:09:9b:64:78:98:37: 6e:3c:f0:91:32:5b:b0:5f:bb:9d:f3:63:c9:d9:3f:e0:3b:6e: 07:52:93:ca:43:c5:5c:3c:08:16:78:aa:21:0e:5e:36:45:65: 7a:d0:26:76:6a:e6:d8:22:4c:c1:11:cf:27:54:d0:4b:af:21: da:c5:8d:bc:ca:9e:f6:fb:d1:62:99:01:a7:cc:ac:97:1d:1c: d4:23:f7:93:d4:83:a1:1d:7f:62:86:ca:4b:f0:67:36:69:ac: 0f:a8:6e:60:52:2a:f2:38:05:e1:3e:01:5b:b9:e1:23:96:9f: a8:5a:18:dc:d0:b0:47:58:42:b7:b2:96:8f:bc:02:53:44:3b: 1a:09:ed:5d:9a:a3:55:49:a5:ef:cd:29:87:d5:6f:4c:93:71: 86:ae:c7:0a:fc:d8:14:c7:0e:19:4d:8a:c4:97:ae:fa:62:14: 19:ee:70:cd:a1:d0:43:1a:32:f0:49:d7:3a:3b:81:71:6e:4b: bb:df:d8:be:cb:4c:33:6f:e1:04:75:94:fa:88:96:fc:01:18: 92:1b:16:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjYwMzI1MDQyNTExWhcNMjYwNDAxMDQyNTExWjAYMRYwFAYD VQQDEw02OWMzNjNhNy04MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJKNLziCkds6EDyvGSoS57zRK6UT89cLaPu14HTtKCxUVlyCkPhHK4NdXoO/ 5EAk9/UNGy+Fc2obY4YMkg6v/3UDO7t/7ah3DPXmFjdzgJvnKK4/KXybk19Jhf7j WfLRj3Hoh+1zC0TYLCYmSJ70qpQRyiSUEJibX4gRphZydl8o6qY3mJlWJjTtxq2n DexgpUflkaWBuZt//YnWaeADYHhz0e3fnQiDoQK3tOpG6vBvT0lrTTsiQEx+hOwo cEpcJi74MkQ4COAcetSo2QkKqrABSXSHAFYhtgRxE3Kqd5MA7RDyyTKSgO9BaqNe ZsjPfS7RY3RRveiL57J/Ng5bJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhBJP4c DkzyQ8W+t2UdB5Z8y/PpMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASga+ll5WnpS9bn3xPgKiHwUJ33UHOTfDLd1nutna7fTsvBZv7qMBTJEZZuL+ VZflCZtkeJg3bjzwkTJbsF+7nfNjydk/4DtuB1KTykPFXDwIFniqIQ5eNkVletAm dmrm2CJMwRHPJ1TQS68h2sWNvMqe9vvRYpkBp8yslx0c1CP3k9SDoR1/YobKS/Bn NmmsD6huYFIq8jgF4T4BW7nhI5afqFoY3NCwR1hCt7KWj7wCU0Q7GgntXZqjVUml 780ph9VvTJNxhq7HCvzYFMcOGU2KxJeu+mIUGe5wzaHQQxoy8EnXOjuBcW5Lu9/Y vstMM2/hBHWU+oiW/AEYkhsW+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:57 2026 by rpki-client