$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: hXIqRrlG9xadsIJT3WyBWrHoMSyhs0ozFfDDpbylD1w= Subject key identifier: A4:29:10:DC:0D:3B:D4:19:93:C6:96:5D:2D:09:80:B3:31:7A:CB:4A Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 01C2 Signing time: Thu 26 Mar 2026 16:45:27 +0000 Manifest this update: Thu 26 Mar 2026 16:45:26 +0000 Manifest next update: Thu 02 Apr 2026 16:45:26 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: mRyGzcB0LQwJUzKG0ZWvI34nrwxh92mmwQh1sbv2n90=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Mar 26 16:45:26 2026 GMT Not After : Apr 2 16:45:26 2026 GMT Subject: CN=69c562a6-27f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:e6:4d:05:dd:05:84:c0:15:30:8a:be:2d: a8:c5:b8:a8:df:d5:c2:52:f7:fb:3f:31:7d:db:68: c9:87:5c:8c:b2:5b:b8:18:b2:6c:59:12:86:66:e1: 4f:66:d1:76:56:44:c0:01:75:4c:8b:32:d4:a0:4d: 72:0a:93:b5:4b:fd:17:b4:20:38:57:64:57:82:f3: bb:db:7e:75:c6:45:43:00:6d:d8:cc:65:30:9f:14: dc:c4:23:4c:cd:d5:fd:81:03:f6:d7:33:19:f2:1d: 5a:94:27:8b:0f:c8:87:a9:32:c6:99:4c:e4:fb:fd: 6f:10:2f:fa:fd:2f:4d:5e:35:b1:31:77:99:2d:f5: a0:a5:4f:ad:1d:ca:63:d7:9a:68:0d:8b:fc:8a:95: fe:84:df:03:e1:2c:69:10:ce:ff:6c:7e:e6:d9:9b: 46:4d:4f:df:81:5a:9c:3a:98:24:63:8d:2d:a3:02: a7:c7:df:7b:2b:dd:90:de:c3:4d:72:23:c3:d3:bf: b2:da:3d:e8:49:ff:90:ff:05:95:60:8f:33:f5:56: 21:be:3b:3c:a4:f3:b3:bd:2e:fd:be:60:ea:b5:9a: 8a:f8:9f:fd:fe:3e:a7:40:e9:c9:4b:86:31:63:a5: d3:f9:c7:7d:41:67:15:e4:a2:af:a7:f2:72:1f:88: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:10:DC:0D:3B:D4:19:93:C6:96:5D:2D:09:80:B3:31:7A:CB:4A X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:57:d8:d3:a7:2a:aa:f8:8b:bb:7c:e7:9f:d1:4e:87:b8:f3: 1c:5f:99:43:e0:62:75:39:07:17:07:73:db:0e:7f:6d:f1:56: e4:02:e4:60:c4:a5:db:87:b5:d9:3f:e9:b0:b7:2d:63:de:b9: 14:cb:1c:a2:72:79:ba:78:ce:70:72:10:14:8b:5c:9d:37:37: 1c:50:d3:28:ab:3a:cc:11:64:f7:1e:f9:7b:39:f4:8f:7f:7e: 3c:f8:e0:13:90:53:88:6d:85:48:82:78:ca:42:0d:30:42:10: c6:d0:55:ef:3a:6a:54:25:27:1f:3f:52:9c:72:03:19:0f:87: e0:3d:43:65:4e:e6:38:51:bf:2e:6c:ed:b6:a1:b4:e1:9a:fb: 9e:a7:6d:13:6d:f1:9a:59:4b:63:90:4c:00:70:37:37:e3:ed: c7:4d:94:4b:67:4b:39:3f:91:9f:53:a4:ed:b1:7c:d4:76:b1: 1e:5c:eb:a6:55:6d:7b:88:e0:61:51:db:ea:01:77:35:66:06: ea:8c:ca:4f:2b:4a:a0:02:8c:ac:2b:ba:42:c0:c0:39:76:89: 8d:ce:21:fe:99:36:45:c5:cc:19:fe:ce:d7:dd:a4:fa:64:b4: 17:a1:dc:b5:08:8f:a9:33:f7:0b:ef:39:31:25:8f:35:0f:85: 56:51:f1:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjYwMzI2MTY0NTI2WhcNMjYwNDAyMTY0NTI2WjAYMRYwFAYD VQQDEw02OWM1NjJhNi0yN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IjmTQXdBYTAFTCKvi2oxbio39XCUvf7PzF922jJh1yMslu4GLJsWRKGZuFP ZtF2VkTAAXVMizLUoE1yCpO1S/0XtCA4V2RXgvO72351xkVDAG3YzGUwnxTcxCNM zdX9gQP21zMZ8h1alCeLD8iHqTLGmUzk+/1vEC/6/S9NXjWxMXeZLfWgpU+tHcpj 15poDYv8ipX+hN8D4SxpEM7/bH7m2ZtGTU/fgVqcOpgkY40towKnx997K92Q3sNN ciPD07+y2j3oSf+Q/wWVYI8z9VYhvjs8pPOzvS79vmDqtZqK+J/9/j6nQOnJS4Yx Y6XT+cd9QWcV5KKvp/JyH4h0HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQpENwN O9QZk8aWXS0JgLMxestKMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjlfY06cqqviLu3znn9FOh7jzHF+ZQ+BidTkHFwdz2w5/bfFW5ALkYMSl24e1 2T/psLctY965FMsconJ5unjOcHIQFItcnTc3HFDTKKs6zBFk9x75ezn0j39+PPjg E5BTiG2FSIJ4ykINMEIQxtBV7zpqVCUnHz9SnHIDGQ+H4D1DZU7mOFG/LmzttqG0 4Zr7nqdtE23xmllLY5BMAHA3N+Ptx02US2dLOT+Rn1Ok7bF81HaxHlzrplVte4jg YVHb6gF3NWYG6ozKTytKoAKMrCu6QsDAOXaJjc4h/pk2RcXMGf7O192k+mS0F6Hc tQiPqTP3C+85MSWPNQ+FVlHxAg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:37 2026 by rpki-client