$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: q7gjHeYlVjeUSs7wg8bnlo3e92a8m2rkw7r+T9GV89Q= Subject key identifier: 02:23:DD:15:C4:8E:F1:06:DD:D6:CD:83:64:83:F4:4C:31:FF:96:A3 Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 0128 Signing time: Wed 25 Mar 2026 04:53:14 +0000 Manifest this update: Wed 25 Mar 2026 04:53:14 +0000 Manifest next update: Wed 01 Apr 2026 04:53:14 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: 1uPY8a9HyjQOHj3H7gHsWucEc36F1Klk6yAoY1sgqMY=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=) 3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Mar 25 04:53:14 2026 GMT Not After : Apr 1 04:53:14 2026 GMT Subject: CN=69c36a3a-14bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:fa:9f:6a:78:4e:77:8a:0a:27:a0:7e:32: 89:fa:34:80:bf:9d:d3:03:d2:d2:c7:eb:bc:d3:f3: 69:e6:72:bf:31:5d:2a:4a:82:34:cb:fa:6c:83:4a: 92:79:39:41:df:fb:be:7e:46:19:e2:68:6c:4b:ad: 39:9b:f1:17:04:79:2c:a7:3a:16:89:4f:5e:ed:2f: 54:3f:41:7d:3d:8d:7c:a1:c5:e0:52:7d:33:d7:9f: 93:30:d3:47:ee:9c:a7:b3:10:a9:89:eb:ca:c0:20: 0a:30:dd:8d:1f:ad:dd:38:f5:d3:97:53:5f:08:5d: 28:82:d8:2c:b2:0b:c1:0e:2d:89:3b:26:40:40:93: 39:c9:05:a8:f2:36:0c:e4:38:6d:52:97:fa:f5:54: ba:05:87:ca:5e:67:0d:bc:35:8b:e0:8a:8d:a4:3b: c6:3d:2c:05:19:0a:93:81:95:a2:71:cb:c1:4c:db: 21:81:a6:01:cd:d3:78:79:34:a3:61:6d:5e:63:0b: 78:c9:35:78:2f:f3:4d:d9:d6:22:00:38:55:77:e0: c2:1c:d3:f0:a5:70:f5:b4:81:ae:d5:c1:a7:02:32: 67:5d:d6:ec:cc:e3:5a:42:66:04:db:6b:80:28:50: ff:70:16:bc:0b:c4:1c:36:13:87:0f:4a:d3:85:22: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:DD:15:C4:8E:F1:06:DD:D6:CD:83:64:83:F4:4C:31:FF:96:A3 X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0f:25:5b:43:13:37:7c:f6:d5:69:9c:33:76:3f:5e:b3:09: 12:a4:ba:06:8b:ec:0e:2c:22:28:e6:ad:91:2e:de:15:fd:8a: bf:ae:e7:ea:09:d4:8a:fa:36:a7:ca:c4:5e:7c:6d:d3:43:8e: f9:b7:6a:67:c4:c8:a3:88:9b:87:48:43:ed:65:2a:6f:e3:29: 40:95:46:b3:24:26:1c:ef:9b:47:33:8a:74:ed:25:d2:63:10: 52:a9:fd:a5:d3:57:84:eb:cb:7d:91:e9:ff:fd:10:bb:63:94: 17:ce:e2:6d:c2:6b:f7:ff:22:9a:07:85:83:60:66:69:d3:e3: 8c:51:44:9d:d5:6d:a3:3f:21:83:a9:a9:6f:a3:b8:9b:78:07: 26:41:6e:24:b2:3d:b4:b1:88:26:51:42:8d:ee:c0:ce:1f:32: 0a:ea:5e:88:cf:ac:57:f5:b8:92:2e:0c:ef:ee:01:bd:30:80: 7d:a2:ed:8b:e2:ea:cb:46:45:b6:82:9f:e1:e5:ff:35:46:a6: 94:6f:17:7e:f9:c0:84:a5:2b:8d:05:12:84:d7:31:61:52:16: af:58:f3:ed:e9:8e:4e:e6:c5:27:1f:f7:e0:af:16:be:c9:a4: 0f:5c:b0:10:0c:d4:79:60:58:6e:8c:62:89:f1:2f:17:fb:b4: 77:cb:7e:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjYwMzI1MDQ1MzE0WhcNMjYwNDAxMDQ1MzE0WjAYMRYwFAYD VQQDEw02OWMzNmEzYS0xNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhYL6n2p4TneKCiegfjKJ+jSAv53TA9LSx+u80/Np5nK/MV0qSoI0y/psg0qS eTlB3/u+fkYZ4mhsS605m/EXBHkspzoWiU9e7S9UP0F9PY18ocXgUn0z15+TMNNH 7pynsxCpievKwCAKMN2NH63dOPXTl1NfCF0ogtgssgvBDi2JOyZAQJM5yQWo8jYM 5DhtUpf69VS6BYfKXmcNvDWL4IqNpDvGPSwFGQqTgZWiccvBTNshgaYBzdN4eTSj YW1eYwt4yTV4L/NN2dYiADhVd+DCHNPwpXD1tIGu1cGnAjJnXdbszONaQmYE22uA KFD/cBa8C8QcNhOHD0rThSIRRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIj3RXE jvEG3dbNg2SD9Ewx/5ajMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGw8lW0MTN3z21WmcM3Y/XrMJEqS6BovsDiwiKOatkS7eFf2Kv67n6gnUivo2 p8rEXnxt00OO+bdqZ8TIo4ibh0hD7WUqb+MpQJVGsyQmHO+bRzOKdO0l0mMQUqn9 pdNXhOvLfZHp//0Qu2OUF87ibcJr9/8imgeFg2BmadPjjFFEndVtoz8hg6mpb6O4 m3gHJkFuJLI9tLGIJlFCje7Azh8yCupeiM+sV/W4ki4M7+4BvTCAfaLti+Lqy0ZF toKf4eX/NUamlG8XfvnAhKUrjQUShNcxYVIWr1jz7emOTubFJx/34K8WvsmkD1yw EAzUeWBYboxiifEvF/u0d8t+eg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:50 2026 by rpki-client