$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: AqfUaXyxpr5eHJhMtihECmGD8LThGIrI+S98RJffz0U= Subject key identifier: 30:D4:27:54:FF:F5:58:2E:FB:B3:72:D1:9E:BF:43:98:7E:1B:6A:C7 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E6D Signing time: Tue 24 Mar 2026 17:38:03 +0000 Manifest this update: Tue 24 Mar 2026 17:38:03 +0000 Manifest next update: Tue 31 Mar 2026 17:38:03 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: cAkqM/HIjpDRrOx+d3VbuLah/TvP/ztucT+Pdn6+Q2M=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: NpwlTwI8Xm9ihx5f2AI8RzaFuXlf3KaqQ3R0nM1i1CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3702 (0xe76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Mar 24 17:38:03 2026 GMT Not After : Mar 31 17:38:03 2026 GMT Subject: CN=69c2cbfb-bd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e8:19:34:4e:69:81:25:16:0f:bd:16:4e:2d: ec:14:6e:78:6b:bb:02:19:82:60:0f:1a:59:68:da: 63:d6:4f:42:70:c6:7c:53:52:ae:9e:19:3d:d7:94: 3b:47:a1:8d:f3:81:d3:a2:fe:a6:3c:4d:8e:59:2c: f5:84:db:a7:36:04:4e:2c:90:13:40:32:92:10:8c: 1e:e7:13:1e:b8:23:3e:63:a6:b3:98:6c:ce:bf:08: 51:c4:3c:4e:0c:48:6a:90:9f:40:52:46:3a:02:83: c6:37:7f:1a:2e:58:e5:df:96:da:ff:02:11:3e:1e: 19:60:c2:ad:43:e4:56:91:0f:f1:a7:d8:45:d5:39: ae:d9:e1:20:50:12:a0:02:ec:00:5d:ae:a9:76:d6: 1a:e1:9e:11:d0:2a:96:0f:1e:f7:90:93:eb:ba:b8: 84:c9:b0:1d:e5:50:a6:43:08:6e:a7:5c:eb:ff:ea: ed:c7:a1:c4:6c:f2:6f:91:ed:e8:6d:f7:bb:19:0d: 43:4e:ac:d2:a1:42:6a:21:99:3b:3f:10:be:f9:71: c7:1f:62:8f:4c:12:59:24:89:fc:fb:ab:5c:45:3f: e5:99:bc:62:8d:8a:02:0d:82:bb:95:22:bb:fb:7c: 48:f8:d5:5d:31:d4:a2:48:6c:f7:f4:8f:78:ac:34: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:27:54:FF:F5:58:2E:FB:B3:72:D1:9E:BF:43:98:7E:1B:6A:C7 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:95:e6:56:0b:39:37:2b:09:b0:f6:c7:2b:b5:b4:96:29:70: 34:a8:16:80:23:10:d2:ec:48:2e:d4:f0:27:a2:7b:6a:c9:8e: 75:89:11:9f:89:7f:04:00:a3:ea:a8:cd:d1:68:14:be:be:de: 43:a9:1e:eb:9c:c7:a7:2a:4a:78:3d:cb:2a:63:c9:e1:94:0e: 4c:2a:ff:c5:0d:72:d6:3a:48:2c:fa:73:08:69:87:11:0c:94: 99:d7:88:97:3c:96:31:1a:9e:85:db:12:ad:8b:25:7e:30:79: 72:77:85:f6:99:02:39:cb:f3:9d:f3:07:42:2b:eb:4f:08:af: 1a:fb:98:fb:54:ae:36:84:95:f4:72:90:7f:2b:c7:76:30:7d: c8:3c:46:8c:31:f7:b8:fb:87:cf:ed:fe:7d:47:bd:fa:cf:80: 92:d1:59:91:ea:f3:5f:e0:e6:4f:6b:95:c7:5f:30:67:d9:87: 76:b8:6f:21:b0:2d:77:2d:92:14:32:b0:b1:cf:cb:82:4b:61: cc:ce:ae:6c:94:20:a1:85:eb:3e:5e:85:01:8f:e8:7e:3b:43: e0:71:6c:4f:84:1a:7d:33:54:0b:f0:70:30:a8:f7:33:33:ae: f5:eb:1d:b9:d7:42:ee:41:04:45:5a:3d:22:86:a5:27:88:d3: 15:87:7b:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjYwMzI0MTczODAzWhcNMjYwMzMxMTczODAzWjAYMRYwFAYD VQQDEw02OWMyY2JmYi1iZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OgZNE5pgSUWD70WTi3sFG54a7sCGYJgDxpZaNpj1k9CcMZ8U1Kunhk915Q7 R6GN84HTov6mPE2OWSz1hNunNgROLJATQDKSEIwe5xMeuCM+Y6azmGzOvwhRxDxO DEhqkJ9AUkY6AoPGN38aLljl35ba/wIRPh4ZYMKtQ+RWkQ/xp9hF1Tmu2eEgUBKg AuwAXa6pdtYa4Z4R0CqWDx73kJPruriEybAd5VCmQwhup1zr/+rtx6HEbPJvke3o bfe7GQ1DTqzSoUJqIZk7PxC++XHHH2KPTBJZJIn8+6tcRT/lmbxijYoCDYK7lSK7 +3xI+NVdMdSiSGz39I94rDSmFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDUJ1T/ 9Vgu+7Ny0Z6/Q5h+G2rHMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJXmVgs5NysJsPbHK7W0lilwNKgWgCMQ0uxILtTwJ6J7asmOdYkRn4l/BACj 6qjN0WgUvr7eQ6ke65zHpypKeD3LKmPJ4ZQOTCr/xQ1y1jpILPpzCGmHEQyUmdeI lzyWMRqehdsSrYslfjB5cneF9pkCOcvznfMHQivrTwivGvuY+1SuNoSV9HKQfyvH djB9yDxGjDH3uPuHz+3+fUe9+s+AktFZkerzX+DmT2uVx18wZ9mHdrhvIbAtdy2S FDKwsc/LgkthzM6ubJQgoYXrPl6FAY/ofjtD4HFsT4QafTNUC/BwMKj3MzOu9esd uddC7kEERVo9IoalJ4jTFYd7+w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:01 2026 by rpki-client