$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: fzgamUKH99AgkepKSDD+Xq0w8bkZElSpcPK0IF89qRU= Subject key identifier: 53:A3:7D:8A:98:2E:D1:C3:D5:89:DE:73:8A:7F:F3:76:49:75:55:14 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 05F0 Signing time: Tue 24 Mar 2026 22:37:23 +0000 Manifest this update: Tue 24 Mar 2026 22:37:23 +0000 Manifest next update: Tue 31 Mar 2026 22:37:23 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: jS1fJ4DGtC+x25gUAQVDZif9hJTDXMmhAKugzykGr44=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Mar 24 22:37:23 2026 GMT Not After : Mar 31 22:37:23 2026 GMT Subject: CN=69c31223-c6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:48:fa:9d:40:cc:ec:e0:42:23:e4:3a:e9: e2:62:3c:60:7b:3e:24:52:71:53:d4:58:f7:0a:fd: cb:cf:ef:84:cb:da:61:88:ec:19:26:84:eb:68:dc: 95:4d:73:2d:e7:82:b4:b2:e5:08:bf:9c:aa:a5:f9: ed:c7:ce:39:b7:34:c2:98:c2:c9:4e:24:ea:16:35: d6:1a:d9:28:35:83:07:f0:f7:34:fd:2c:c8:8d:b2: ac:b0:7b:45:d6:b9:54:90:4d:32:ea:74:60:a4:97: 80:92:9e:09:2c:26:59:06:a0:a9:00:4c:99:de:0d: 2a:8c:32:1d:df:80:3c:8a:30:f9:ee:c9:68:fc:e7: 51:2c:fa:cd:79:1a:18:63:86:95:ab:e0:34:a4:46: e2:a5:c5:18:79:9e:d8:ca:c9:e8:b8:d9:40:c6:ed: 6b:c7:da:d8:c4:89:cd:0f:29:5a:e7:7f:4d:91:06: 1a:c7:ad:0f:87:26:93:ae:36:63:ea:c0:d9:7c:58: 2c:3a:40:aa:fb:38:c4:f5:b2:6a:2b:b9:cc:5f:3d: 46:c3:60:9c:4a:3e:f1:39:8d:8a:75:01:0a:d3:91: 6c:be:63:5e:83:23:33:7a:22:ea:72:b2:5e:b8:a5: 22:c4:7e:d2:19:db:e4:39:20:d8:6c:02:cb:13:87: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:7D:8A:98:2E:D1:C3:D5:89:DE:73:8A:7F:F3:76:49:75:55:14 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:ee:bf:11:24:24:d5:9d:0e:ce:ca:40:b9:94:17:57:d1:8e: 41:31:0e:8d:64:c1:5e:5b:11:a9:c9:72:15:59:f6:71:8e:53: 30:6a:34:15:17:08:e0:63:3c:84:36:aa:8b:e6:21:58:3d:c0: 2e:68:a3:02:af:f0:b3:c2:03:e8:96:e8:20:8e:a5:b3:90:64: 93:2c:dc:88:49:77:87:07:d5:e7:22:db:fd:bb:11:fd:8a:89: 7c:70:45:3a:4f:7a:0b:db:9d:9e:f7:9d:08:37:38:ef:1b:a9: 9c:fa:e2:19:5a:4c:03:9e:47:40:42:65:0f:3d:b0:6c:6c:a1: fa:2e:dd:3d:6c:01:c2:a3:ee:b4:bd:89:87:54:a6:ae:27:f5: b9:81:5c:6e:88:07:6d:9c:2a:be:e0:91:2a:eb:85:0e:19:c2: 6d:5a:bb:aa:2e:0f:c2:49:89:6a:0d:89:25:ed:84:f2:7f:94: af:46:4a:a3:e7:ef:7a:cc:4a:08:55:8b:9d:11:d2:73:1b:38: 31:e0:31:6e:0e:a8:00:dc:fd:13:22:2e:fa:e0:65:84:71:04: 08:8c:8e:07:e1:6a:ef:58:7d:dc:18:ce:23:bc:b7:42:a4:18: 0e:e7:72:4b:74:e5:0e:3d:79:49:9c:62:4e:e3:09:d6:62:7f: 33:8d:cd:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjYwMzI0MjIzNzIzWhcNMjYwMzMxMjIzNzIzWjAYMRYwFAYD VQQDEw02OWMzMTIyMy1jNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovZI+p1AzOzgQiPkOuniYjxgez4kUnFT1Fj3Cv3Lz++Ey9phiOwZJoTraNyV TXMt54K0suUIv5yqpfntx845tzTCmMLJTiTqFjXWGtkoNYMH8Pc0/SzIjbKssHtF 1rlUkE0y6nRgpJeAkp4JLCZZBqCpAEyZ3g0qjDId34A8ijD57slo/OdRLPrNeRoY Y4aVq+A0pEbipcUYeZ7YysnouNlAxu1rx9rYxInNDyla539NkQYax60PhyaTrjZj 6sDZfFgsOkCq+zjE9bJqK7nMXz1Gw2CcSj7xOY2KdQEK05FsvmNegyMzeiLqcrJe uKUixH7SGdvkOSDYbALLE4fHXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOjfYqY LtHD1Ynec4p/83ZJdVUUMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1u6/ESQk1Z0OzspAuZQXV9GOQTEOjWTBXlsRqclyFVn2cY5TMGo0FRcI4GM8 hDaqi+YhWD3ALmijAq/ws8ID6JboII6ls5BkkyzciEl3hwfV5yLb/bsR/YqJfHBF Ok96C9udnvedCDc47xupnPriGVpMA55HQEJlDz2wbGyh+i7dPWwBwqPutL2Jh1Sm rif1uYFcbogHbZwqvuCRKuuFDhnCbVq7qi4PwkmJag2JJe2E8n+Ur0ZKo+fvesxK CFWLnRHScxs4MeAxbg6oANz9EyIu+uBlhHEECIyOB+Fq71h93BjOI7y3QqQYDudy S3TlDj15SZxiTuMJ1mJ/M43Ncg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:42:45 2026 by rpki-client