$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: x4DWZbPyCT8/+xRwBGdgj1ZaNbNXh6dD1rBKqi8axCg= Subject key identifier: F2:00:55:13:E9:07:CC:46:7A:C4:EA:FB:0A:5A:49:9A:FA:85:1F:37 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 08AD Signing time: Tue 24 Mar 2026 20:14:54 +0000 Manifest this update: Tue 24 Mar 2026 20:14:53 +0000 Manifest next update: Tue 31 Mar 2026 20:14:53 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: jfwgUrD5bflOed0gW9cqbzGgiXtpUTMq8OWFcCUb57w=) 2: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: CZgH9sRalQIh6CRftMF2d66cWrAC6h6CJtvjvDnCQhA=) 3: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hgHBm4hp3RapLpi/uDm+lqvL2Jv07HJ2pVNo82bX6vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Mar 24 20:14:53 2026 GMT Not After : Mar 31 20:14:53 2026 GMT Subject: CN=69c2f0bd-ea05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:59:7f:2c:3d:eb:6b:e0:34:51:30:0b:6c: 04:68:5e:1d:12:c1:72:7d:ef:cd:e8:1e:14:6f:ba: 65:89:23:82:d7:61:c0:56:cd:73:2c:4f:49:17:00: 5d:c9:70:11:cf:e8:12:7d:a2:96:fe:7b:8b:bd:54: 3a:af:f7:10:81:8e:55:cc:eb:1d:99:6c:48:e0:c4: 9a:09:78:57:db:c0:39:36:06:10:3b:9f:5f:d4:fc: 07:f6:c0:32:67:3f:89:6e:bb:d2:35:7f:c5:d8:83: 6a:ec:9f:ce:37:f7:43:1d:17:42:30:14:49:77:02: 2d:6d:e4:d1:04:d0:35:c9:66:e0:e4:44:0a:56:06: 76:7c:9a:d3:09:9e:21:49:8c:85:ef:b9:30:c4:08: ac:cb:71:e8:eb:cc:f7:1c:ca:19:fd:e9:3f:4f:50: ac:dd:18:f9:0a:ff:76:9d:25:47:d2:2f:b4:c0:d7: 5d:59:88:3e:e6:d9:48:d5:a3:2b:fa:2d:e2:38:db: c7:f4:11:cc:48:a7:92:8d:a0:e6:a1:53:27:46:1e: ef:e6:ba:46:76:5e:2e:77:17:52:b5:3d:07:5d:d3: 55:2d:52:ef:cc:15:60:15:95:6d:d5:07:27:00:b3: 3f:f6:b0:9a:5e:16:35:5e:eb:37:9f:80:4f:8d:24: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:00:55:13:E9:07:CC:46:7A:C4:EA:FB:0A:5A:49:9A:FA:85:1F:37 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:3e:da:ff:51:78:81:17:4d:17:a1:63:7d:75:19:5b:4f:a7: f0:ff:8e:20:07:67:00:7e:f2:7f:26:00:30:f2:b0:cd:2f:20: 72:4d:97:33:fb:d5:14:0d:60:e5:19:79:c2:86:2c:65:9a:c7: de:bd:78:89:7c:3b:26:57:f5:c9:6d:fc:be:71:75:12:6f:cf: e4:5c:76:d7:39:40:bb:e6:12:e8:8e:3e:3f:e4:df:d1:0f:26: c8:55:d9:cb:4b:d8:d5:0d:bf:37:3b:40:13:92:6d:e4:2a:32: ac:bd:4e:ce:98:b5:bb:72:2d:fd:9a:fe:e7:8c:d0:5b:d0:30: 5a:af:be:5a:93:db:5e:67:01:21:94:46:e7:6d:f8:23:d6:8a: af:02:f8:d0:56:c3:db:fa:21:b0:fc:77:8c:06:b8:c2:dc:51: 9a:7c:be:23:11:8b:56:04:b2:ff:34:d3:a6:01:54:65:1f:83: 95:20:cc:76:dd:c5:86:90:aa:2c:c8:e8:f2:9a:8e:83:76:f7: a5:1b:9c:a9:2d:be:bc:8e:09:36:97:34:8b:ef:84:38:63:d4: f4:7a:5c:6a:cd:28:08:fa:f4:9a:dc:06:ca:7b:fb:f4:45:ae: 10:39:27:34:43:cc:8b:63:2a:42:14:9b:b8:f8:87:49:c1:18: e5:a2:ac:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjYwMzI0MjAxNDUzWhcNMjYwMzMxMjAxNDUzWjAYMRYwFAYD VQQDEw02OWMyZjBiZC1lYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxVZfyw962vgNFEwC2wEaF4dEsFyfe/N6B4Ub7pliSOC12HAVs1zLE9JFwBd yXARz+gSfaKW/nuLvVQ6r/cQgY5VzOsdmWxI4MSaCXhX28A5NgYQO59f1PwH9sAy Zz+JbrvSNX/F2INq7J/ON/dDHRdCMBRJdwItbeTRBNA1yWbg5EQKVgZ2fJrTCZ4h SYyF77kwxAisy3Ho68z3HMoZ/ek/T1Cs3Rj5Cv92nSVH0i+0wNddWYg+5tlI1aMr +i3iONvH9BHMSKeSjaDmoVMnRh7v5rpGdl4udxdStT0HXdNVLVLvzBVgFZVt1Qcn ALM/9rCaXhY1Xus3n4BPjSQ3SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIAVRPp B8xGesTq+wpaSZr6hR83MB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzz7a/1F4gRdNF6FjfXUZW0+n8P+OIAdnAH7yfyYAMPKwzS8gck2XM/vVFA1g 5Rl5woYsZZrH3r14iXw7Jlf1yW38vnF1Em/P5Fx21zlAu+YS6I4+P+Tf0Q8myFXZ y0vY1Q2/NztAE5Jt5CoyrL1Ozpi1u3It/Zr+54zQW9AwWq++WpPbXmcBIZRG5234 I9aKrwL40FbD2/ohsPx3jAa4wtxRmny+IxGLVgSy/zTTpgFUZR+DlSDMdt3FhpCq LMjo8pqOg3b3pRucqS2+vI4JNpc0i++EOGPU9Hpcas0oCPr0mtwGynv79EWuEDkn NEPMi2MqQhSbuPiHScEY5aKsRg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:31 2026 by rpki-client