$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: FKb/OR/+CIHgy5ZEWVnmRXjtz7p/Ze68HpENUF8KRiw= Subject key identifier: E7:E9:50:2E:01:AC:3A:71:C9:C2:38:5A:D3:EB:68:96:D7:9D:58:DB Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:07:05 +0000 Manifest this update: Wed 25 Mar 2026 08:07:05 +0000 Manifest next update: Wed 01 Apr 2026 08:07:05 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: 2ltuOnwOWn68/I1TqeZTNe/AGp0oa93ZNOiTXicdAq8=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Mar 25 08:07:05 2026 GMT Not After : Apr 1 08:07:05 2026 GMT Subject: CN=69c397a9-6b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:03:36:9b:84:f8:1f:49:1c:e7:19:ec:71: fc:5a:12:4f:8b:a5:dd:9a:4f:df:a8:bf:35:5f:13: aa:33:75:f1:84:23:33:cc:b6:87:9f:ab:2f:f8:6f: 89:ee:3f:8d:34:f4:22:c0:b5:9f:76:04:fa:a3:99: ed:ea:34:d7:1d:00:1a:29:85:2a:0a:27:88:35:77: a8:38:ea:cf:4d:09:44:b6:f0:b3:32:0b:7e:a8:d2: 22:4a:43:fa:c8:9c:fa:ae:b1:40:64:c7:db:28:82: 34:14:b8:b2:e7:1b:d7:19:98:1e:68:ee:28:b1:78: 6f:f7:b4:b3:ed:5c:a0:36:b2:f3:92:ad:fd:55:48: 55:a0:ba:3a:7d:a5:c2:6a:8b:91:66:e5:89:01:c7: 69:7b:d0:5a:32:1d:83:67:28:0a:84:f5:55:7e:45: 49:b4:c2:da:7c:03:65:e2:57:9e:0f:ee:35:1e:66: 69:a8:97:70:98:89:36:99:f8:02:6a:b9:97:9e:30: 9b:13:c4:f5:32:10:82:c0:db:f9:b8:37:5b:9e:f6: 5e:27:fc:e7:cf:7b:9f:d7:5d:77:51:d4:f6:0f:06: 43:01:2f:e4:93:c6:36:cc:17:22:61:21:f7:c6:68: 68:77:2e:2e:02:7d:76:14:a2:ad:31:03:87:6b:cb: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:50:2E:01:AC:3A:71:C9:C2:38:5A:D3:EB:68:96:D7:9D:58:DB X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e2:76:b3:c8:73:ce:46:ee:58:11:e4:67:1f:84:c0:12:f8: 5b:93:38:4d:12:f6:37:96:47:32:1c:4f:22:f6:55:5a:48:e5: b1:b9:77:f4:ba:82:0d:77:57:94:c0:e9:9f:a6:ff:7f:63:57: 46:15:08:1a:09:29:cf:8a:a3:9e:0b:14:68:93:09:7a:d2:8c: 4c:f2:48:09:71:9e:e6:30:f6:93:44:16:e5:f9:ca:78:61:ba: 6b:f7:68:93:0c:4f:2d:bc:4d:c1:85:e5:66:bb:2e:25:c8:02: 7b:02:11:bf:ee:6b:24:a7:a0:db:22:51:1d:e9:ce:66:29:07: b5:0f:f5:35:7d:0f:a4:25:67:41:87:19:2f:5e:b5:1c:27:82: 23:4e:f1:b2:b0:84:e5:f2:de:c4:fa:78:38:55:18:64:12:be: 90:db:77:7e:f9:a4:de:ab:17:ae:6d:18:e7:de:a5:4c:66:88: f1:94:6e:f3:b9:8f:eb:9f:c0:01:bb:aa:63:e4:fa:4a:d9:0b: 03:07:79:11:d0:15:3d:18:07:e2:a0:43:0f:e9:8d:70:a2:c4: 9d:2a:6c:6a:2e:fb:5e:61:b5:c9:9e:c1:bc:6c:cc:af:44:1f: ac:14:7f:6c:af:95:6d:67:0c:25:04:12:33:e1:5c:05:13:e3: 5b:1c:5c:1e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1 RUVCREE0RjAeFw0yNjAzMjUwODA3MDVaFw0yNjA0MDEwODA3MDVaMBgxFjAUBgNV BAMTDTY5YzM5N2E5LTZiNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYqQM2m4T4H0kc5xnscfxaEk+Lpd2aT9+ovzVfE6ozdfGEIzPMtoefqy/4b4nu P4009CLAtZ92BPqjme3qNNcdABophSoKJ4g1d6g46s9NCUS28LMyC36o0iJKQ/rI nPqusUBkx9sogjQUuLLnG9cZmB5o7iixeG/3tLPtXKA2svOSrf1VSFWgujp9pcJq i5Fm5YkBx2l70FoyHYNnKAqE9VV+RUm0wtp8A2XiV54P7jUeZmmol3CYiTaZ+AJq uZeeMJsTxPUyEILA2/m4N1ue9l4n/OfPe5/XXXdR1PYPBkMBL+STxjbMFyJhIffG aGh3Li4CfXYUoq0xA4dry8ppAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5+lQLgGs OnHJwjha0+toltedWNswHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0UxQTY2RjE4MDBERTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpY YXZ4N3pGX0ViYVY3cjJrOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+4nazyHPORu5YEeRnH4TAEvhbkzhNEvY3lkcyHE8i9lVaSOWxuXf0uoINd1eU wOmfpv9/Y1dGFQgaCSnPiqOeCxRokwl60oxM8kgJcZ7mMPaTRBbl+cp4Ybpr92iT DE8tvE3BheVmuy4lyAJ7AhG/7mskp6DbIlEd6c5mKQe1D/U1fQ+kJWdBhxkvXrUc J4IjTvGysITl8t7E+ng4VRhkEr6Q23d++aTeqxeubRjn3qVMZojxlG7zuY/rn8AB u6pj5PpK2QsDB3kR0BU9GAfioEMP6Y1wosSdKmxqLvteYbXJnsG8bMyvRB+sFH9s r5VtZwwlBBIz4VwFE+NbHFwe -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:16 2026 by rpki-client