$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: vPMdgm5JUfQ3iosOqcQeh6Fj+22LM4ms8BIIU1iJbp8= Subject key identifier: BC:21:51:94:E8:E4:28:06:F6:03:FC:9F:F9:C5:0E:33:04:FF:54:89 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0CDF Signing time: Tue 24 Mar 2026 18:05:19 +0000 Manifest this update: Tue 24 Mar 2026 18:05:18 +0000 Manifest next update: Tue 31 Mar 2026 18:05:18 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: G3XlwIvP5KyMMoog67w/zTRMl6LtdSAgV0P78DPzTnY=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Mar 24 18:05:18 2026 GMT Not After : Mar 31 18:05:18 2026 GMT Subject: CN=69c2d25f-f700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:7e:a6:66:9d:9f:cf:ed:87:6e:86:8c:22: c8:02:3d:82:85:8e:d9:26:aa:96:c1:6d:18:f2:f9: 4d:10:de:5d:38:74:08:55:1a:4c:d8:a0:b4:85:26: b9:07:9b:b2:fa:73:8a:d3:9f:b3:ec:e9:dd:e2:3a: b8:c2:a6:2b:47:e7:b5:7a:cb:ac:2e:56:a3:da:12: 90:59:a9:33:f6:5c:21:af:49:4e:4e:b2:53:62:1f: e6:66:1f:4f:75:76:a7:5a:bc:0d:75:01:84:05:96: ac:a2:88:48:93:d4:56:da:6b:00:ae:35:da:d8:2d: c6:70:00:10:86:ce:b3:29:24:fc:2d:7c:d3:bb:96: 50:db:84:51:f2:67:7b:92:a1:df:33:53:99:e7:e9: 01:33:2e:05:29:3a:c7:68:f8:75:99:e8:07:ce:ee: de:0d:e5:3f:45:6c:59:4d:74:81:1c:a8:87:26:97: a1:91:d1:85:c0:6b:fe:89:cc:f3:db:85:df:9c:9a: 10:a2:9a:1f:5a:ad:6b:09:5c:1b:06:83:c9:73:45: 11:e6:2f:0e:43:1f:8a:5f:28:e3:20:1e:c2:dc:65: 61:18:24:b9:0b:92:64:df:72:a0:18:11:2d:ff:64: 25:79:5f:3b:1f:95:d6:a1:7a:1d:94:55:3e:c2:5c: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:21:51:94:E8:E4:28:06:F6:03:FC:9F:F9:C5:0E:33:04:FF:54:89 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c0:98:df:b3:71:d1:8b:9b:fc:c1:ba:cd:37:c0:96:1c:d4: f4:59:3b:2c:e2:5a:4e:45:01:45:4a:e0:91:ac:13:13:df:b7: 1c:88:86:3c:64:75:e6:80:94:6d:da:dd:c1:41:60:bc:31:11: 24:c6:d6:dd:a0:99:ed:b4:b7:9e:af:11:ef:dd:18:16:4d:ae: 52:e7:28:96:ba:41:19:5a:67:76:ec:b3:1a:19:e2:04:a8:ed: 87:42:57:aa:60:5e:c4:9b:7e:6e:33:7d:9d:41:a9:b8:a3:56: 75:59:2b:9f:a2:15:bc:94:31:19:f8:38:78:60:95:70:40:49: 43:ac:ec:06:6e:1d:61:5e:9f:6d:8e:20:9e:c2:0f:f9:50:f4: c0:91:e6:b4:6a:cf:44:ac:9b:01:1b:87:fa:b1:60:1b:fb:fa: 19:fc:af:bf:86:33:d3:d0:e1:09:f6:4f:7c:83:be:74:2f:bb: c7:80:66:6e:36:55:d3:b8:a4:99:36:27:52:d5:a6:d7:67:67: b9:d1:e9:90:ec:a4:cd:a5:62:5e:77:a6:69:25:7c:be:df:35: 57:cb:43:8a:1c:a2:6c:f6:80:11:85:04:d0:e9:9d:c2:13:43: 9c:62:26:4c:65:f6:1c:f5:a8:59:2a:c4:7c:9b:ad:51:01:50: d2:14:77:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjYwMzI0MTgwNTE4WhcNMjYwMzMxMTgwNTE4WjAYMRYwFAYD VQQDEw02OWMyZDI1Zi1mNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwJ+pmadn8/th26GjCLIAj2ChY7ZJqqWwW0Y8vlNEN5dOHQIVRpM2KC0hSa5 B5uy+nOK05+z7Ond4jq4wqYrR+e1esusLlaj2hKQWakz9lwhr0lOTrJTYh/mZh9P dXanWrwNdQGEBZasoohIk9RW2msArjXa2C3GcAAQhs6zKST8LXzTu5ZQ24RR8md7 kqHfM1OZ5+kBMy4FKTrHaPh1megHzu7eDeU/RWxZTXSBHKiHJpehkdGFwGv+iczz 24XfnJoQopofWq1rCVwbBoPJc0UR5i8OQx+KXyjjIB7C3GVhGCS5C5Jk33KgGBEt /2QleV87H5XWoXodlFU+wlwcHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwhUZTo 5CgG9gP8n/nFDjME/1SJMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeMCY37Nx0Yub/MG6zTfAlhzU9Fk7LOJaTkUBRUrgkawTE9+3HIiGPGR15oCU bdrdwUFgvDERJMbW3aCZ7bS3nq8R790YFk2uUucolrpBGVpnduyzGhniBKjth0JX qmBexJt+bjN9nUGpuKNWdVkrn6IVvJQxGfg4eGCVcEBJQ6zsBm4dYV6fbY4gnsIP +VD0wJHmtGrPRKybARuH+rFgG/v6Gfyvv4Yz09DhCfZPfIO+dC+7x4BmbjZV07ik mTYnUtWm12dnudHpkOykzaViXnemaSV8vt81V8tDihyibPaAEYUE0OmdwhNDnGIm TGX2HPWoWSrEfJutUQFQ0hR3zg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:37:44 2026 by rpki-client