$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: dolZnWaXAQTCvSV2xWwEkHPw5nOXC1x9bVR5pj+/ih8= Subject key identifier: D5:37:68:8B:9A:C9:84:A5:9E:7B:B4:F0:5D:80:26:36:55:70:46:AC Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0D0C Signing time: Tue 24 Mar 2026 17:57:04 +0000 Manifest this update: Tue 24 Mar 2026 17:57:04 +0000 Manifest next update: Tue 31 Mar 2026 17:57:04 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: xSnA2o+8l/hHwAi4/zWjMiQYpOePBCodVKb6QvuYi/Y=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 9dT4eXQsMPnqyEyPb3JSPU43+6WXtI9DjzMtmceqyaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Mar 24 17:57:04 2026 GMT Not After : Mar 31 17:57:04 2026 GMT Subject: CN=69c2d070-fe7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:75:a6:55:d6:31:8b:0c:b4:01:e0:49:d8: e2:3e:9e:b1:f6:2b:c0:d1:9d:12:9a:08:be:9c:0c: 20:aa:69:eb:e7:d3:94:cb:9e:2e:97:6a:ff:97:7d: d4:5b:06:13:7c:d2:b8:d2:8f:22:eb:e5:59:ba:4e: 60:94:e3:37:76:96:e7:11:d6:d0:ae:e8:1e:2e:d1: 19:0f:58:f3:90:06:54:7f:2c:6e:ac:62:6e:be:c2: ee:de:9f:a2:4a:31:c1:e4:fa:93:ba:b8:d5:07:69: 4d:7f:1e:9b:fd:8a:73:be:85:4f:2b:b2:19:f3:ac: c4:19:6b:5e:e9:43:ca:d2:e2:9b:2e:69:9c:1e:43: 2f:62:69:80:b8:a7:27:26:c1:9c:36:27:22:c5:b2: 85:82:95:d2:c4:2c:c1:6a:17:37:09:1c:0a:32:31: 65:a7:3e:80:96:f2:5d:0f:77:b8:68:bd:89:b7:76: dc:b9:81:21:9c:5b:c0:fe:b1:2c:70:79:eb:52:9d: d8:7a:95:8f:2b:3b:ff:e9:f0:0b:22:b8:14:a3:bf: 44:84:95:c4:4e:62:d9:10:e3:63:f4:68:4a:5f:e5: 63:a4:f6:fd:c4:99:92:d5:cb:5a:c3:3b:32:19:cc: a0:83:90:96:30:b4:d3:5e:10:1c:b3:c4:ba:20:d7: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:68:8B:9A:C9:84:A5:9E:7B:B4:F0:5D:80:26:36:55:70:46:AC X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:88:ed:d7:bd:1e:a4:ac:4c:59:24:a2:31:77:fd:68:ee:ea: 16:63:8d:85:f4:8f:d7:62:e3:06:38:2a:bf:90:0f:8a:4a:38: 5a:fc:2f:00:d9:5e:e9:44:05:ad:9a:b4:27:01:c6:c0:9b:3b: da:d0:da:91:ab:75:cd:6d:b2:f5:f1:2c:a8:2b:9e:23:9b:c5: 9c:0f:70:5f:bf:64:c8:e9:1c:06:fc:a2:e3:6b:b0:ec:1a:83: 29:63:44:b6:6f:a6:d6:39:45:eb:e4:5e:9b:ca:7b:48:1f:43: 35:31:c2:58:6a:30:e1:61:63:d7:ef:4b:1f:3b:e9:e0:79:30: ea:0c:fb:ec:d7:0f:2f:c4:f7:08:55:3d:94:ec:6b:0b:c0:25: 10:57:6c:66:d6:41:63:2d:be:7f:e1:a1:41:32:20:22:3b:9c: 4a:f3:7b:35:ef:20:49:7d:8f:a8:21:34:03:6a:7b:9c:88:03: 46:fe:34:49:4c:5e:46:99:ab:5f:40:4c:b6:5f:02:44:ef:37: 20:5e:9c:22:fd:c6:24:dc:04:16:71:e0:5f:dd:f3:67:87:e8: 1e:69:a9:db:60:18:fd:ec:bd:37:73:e6:94:aa:c9:09:ea:90: 91:ae:80:c8:f6:7a:6b:ef:08:59:03:4f:b3:27:8f:0c:84:d2: d0:e0:00:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjYwMzI0MTc1NzA0WhcNMjYwMzMxMTc1NzA0WjAYMRYwFAYD VQQDEw02OWMyZDA3MC1mZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCJ1plXWMYsMtAHgSdjiPp6x9ivA0Z0Smgi+nAwgqmnr59OUy54ul2r/l33U WwYTfNK40o8i6+VZuk5glOM3dpbnEdbQrugeLtEZD1jzkAZUfyxurGJuvsLu3p+i SjHB5PqTurjVB2lNfx6b/YpzvoVPK7IZ86zEGWte6UPK0uKbLmmcHkMvYmmAuKcn JsGcNicixbKFgpXSxCzBahc3CRwKMjFlpz6AlvJdD3e4aL2Jt3bcuYEhnFvA/rEs cHnrUp3YepWPKzv/6fALIrgUo79EhJXETmLZEONj9GhKX+VjpPb9xJmS1ctawzsy Gcygg5CWMLTTXhAcs8S6INek7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNU3aIua yYSlnnu08F2AJjZVcEasMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgYjt170epKxMWSSiMXf9aO7qFmONhfSP12LjBjgqv5APiko4WvwvANle6UQF rZq0JwHGwJs72tDakat1zW2y9fEsqCueI5vFnA9wX79kyOkcBvyi42uw7BqDKWNE tm+m1jlF6+Rem8p7SB9DNTHCWGow4WFj1+9LHzvp4Hkw6gz77NcPL8T3CFU9lOxr C8AlEFdsZtZBYy2+f+GhQTIgIjucSvN7Ne8gSX2PqCE0A2p7nIgDRv40SUxeRpmr X0BMtl8CRO83IF6cIv3GJNwEFnHgX93zZ4foHmmp22AY/ey9N3PmlKrJCeqQka6A yPZ6a+8IWQNPsyePDITS0OAAmw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:25 2026 by rpki-client