$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json) Hash identifier: wMkjm+FvzwB1k2r8g6gZiUW/YFPmtUUSzwYBU2AHGQE= Subject key identifier: 9A:07:E1:55:AA:18:11:E6:0B:13:0B:07:3B:30:51:95:B6:FF:4E:09 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft Manifest number: 3F7D Signing time: Tue 24 Mar 2026 14:28:53 +0000 Manifest this update: Tue 24 Mar 2026 14:28:53 +0000 Manifest next update: Tue 31 Mar 2026 14:28:53 +0000 Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: NcozCvv73Jmc5SbOmeNlgVpyzxVvTZjpKQ++XvBQxzg=) 2: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=) 3: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=) 4: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=) 5: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=) 6: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=) 7: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=) 8: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=) 9: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=) 10: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=) 11: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=) 12: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=) 13: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=) 14: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=) 15: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=) 16: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: A41l4a5QeLuyAAjDqJtyo29qvmKv7EtwQyyVY7eLbxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Mar 24 14:28:53 2026 GMT Not After : Mar 31 14:28:53 2026 GMT Subject: CN=69c29fa5-eb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:13:e9:52:dd:7d:14:3a:9b:39:0f:44:f8: 01:96:42:b8:72:ec:c9:f4:e0:ad:33:0d:ab:eb:a9: bf:90:eb:ce:82:3d:2b:14:d7:28:24:33:e2:02:5a: 7a:09:0a:14:21:68:7c:de:35:54:32:71:9d:5c:5d: 56:13:68:6c:56:d1:ec:9d:69:85:4a:7c:e9:37:05: ff:10:cc:69:1b:bd:df:b7:10:08:e9:ee:be:8c:10: 81:b7:58:ae:9c:63:8e:81:16:54:e6:b9:3c:d5:5b: 23:df:f1:57:24:4d:5e:d3:e6:0f:36:cf:6f:ca:bf: b6:16:73:05:0f:37:04:72:71:8d:33:28:f6:37:c8: 05:e3:71:fe:51:e9:18:8f:e0:76:d9:2d:0f:88:2d: 39:91:0a:0b:0a:c7:f5:da:a1:fa:06:2b:b8:f5:d3: 18:51:5c:14:5d:13:cd:34:17:19:42:67:01:98:44: e0:c1:9c:6d:2d:f5:2c:ec:2e:e1:71:4a:84:8e:09: 3f:77:cd:0d:da:16:91:91:77:b3:9d:d9:56:e4:c7: 6b:2a:18:3c:72:aa:ec:dc:c2:c6:1f:6f:aa:1a:bc: e4:3e:80:8a:e1:84:be:c2:c2:bf:5a:bd:39:cd:91: 2d:b2:77:69:0e:d2:86:88:21:75:57:84:09:6f:14: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:07:E1:55:AA:18:11:E6:0B:13:0B:07:3B:30:51:95:B6:FF:4E:09 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:7c:f6:3a:b4:2c:e3:6d:f4:c1:11:ab:d2:c8:bd:d5:73: b6:ea:e8:4d:0f:05:77:9d:04:a8:33:a3:39:31:99:97:d1:82: 46:38:77:a9:d4:46:44:8f:33:77:db:76:c3:0c:db:77:aa:82: 22:7e:03:42:69:c9:b4:7e:da:83:12:2d:eb:53:de:99:90:d1: 4d:78:0d:de:13:2e:0b:3c:96:fe:a0:b7:cd:9d:63:b0:b5:b1: a3:0d:43:27:c4:46:0c:e4:dd:07:a8:62:32:af:3b:d3:77:e3: 21:7f:ea:b0:34:3c:76:59:14:03:b6:3e:61:73:91:81:e6:6d: c4:37:6d:db:44:cf:4a:44:22:60:b2:c8:f9:f9:d1:31:86:9e: b7:59:a3:1c:67:74:b0:2b:3c:0c:34:92:50:85:f6:c0:70:8e: df:90:24:a6:da:f8:38:c1:d4:49:53:1a:1f:fe:ff:8a:ed:39: 00:4c:72:bc:47:01:95:47:50:ba:67:be:ca:74:94:0a:e6:a4: fe:0a:79:17:08:25:82:48:21:e3:8f:88:08:51:5f:bd:2d:bd: c7:75:4b:cb:99:1b:45:30:32:4c:2c:3c:e6:6f:5e:63:b8:c2: 60:ab:37:56:79:ac:85:a0:7c:62:e0:49:f5:3b:32:1d:d6:02: c6:b4:23:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjYwMzI0MTQyODUzWhcNMjYwMzMxMTQyODUzWjAYMRYwFAYD VQQDEw02OWMyOWZhNS1lYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti8T6VLdfRQ6mzkPRPgBlkK4cuzJ9OCtMw2r66m/kOvOgj0rFNcoJDPiAlp6 CQoUIWh83jVUMnGdXF1WE2hsVtHsnWmFSnzpNwX/EMxpG73ftxAI6e6+jBCBt1iu nGOOgRZU5rk81Vsj3/FXJE1e0+YPNs9vyr+2FnMFDzcEcnGNMyj2N8gF43H+UekY j+B22S0PiC05kQoLCsf12qH6Biu49dMYUVwUXRPNNBcZQmcBmETgwZxtLfUs7C7h cUqEjgk/d80N2haRkXezndlW5MdrKhg8cqrs3MLGH2+qGrzkPoCK4YS+wsK/Wr05 zZEtsndpDtKGiCF1V4QJbxReeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoH4VWq GBHmCxMLBzswUZW2/04JMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0 dlRINkFXb3RXMXVHcWJQOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHF89jq0LONt9MERq9LIvdVzturoTQ8Fd50EqDOjOTGZl9GCRjh3qdRGRI8z d9t2wwzbd6qCIn4DQmnJtH7agxIt61PemZDRTXgN3hMuCzyW/qC3zZ1jsLWxow1D J8RGDOTdB6hiMq8703fjIX/qsDQ8dlkUA7Y+YXORgeZtxDdt20TPSkQiYLLI+fnR MYaet1mjHGd0sCs8DDSSUIX2wHCO35Akptr4OMHUSVMaH/7/iu05AExyvEcBlUdQ ume+ynSUCuak/gp5Fwglgkgh44+ICFFfvS29x3VLy5kbRTAyTCw85m9eY7jCYKs3 VnmshaB8YuBJ9TsyHdYCxrQjpA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:34:57 2026 by rpki-client