$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: yovlSAgC7rxU4r4ywmLhVB/9QbPHMSArSGmj876RAYM= Subject key identifier: F1:35:B0:C0:65:A4:78:AF:6B:81:C6:6E:8B:C4:E8:76:E8:04:1B:9F Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 1F Signing time: Wed 25 Mar 2026 08:04:24 +0000 Manifest this update: Wed 25 Mar 2026 08:04:24 +0000 Manifest next update: Wed 01 Apr 2026 08:04:24 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: FgGnunq94CYjyXZXME+g5KSxzjPSLpLOI27/jS1zv20=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: Mar 25 08:04:24 2026 GMT Not After : Apr 1 08:04:24 2026 GMT Subject: CN=69c39708-8183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:98:a6:3e:86:98:f8:87:bb:bd:c8:3d:36: f1:4e:05:b5:1a:90:96:ea:b9:a8:f1:c7:61:c8:70: ba:05:13:00:fc:fa:12:9d:30:cf:df:a8:59:23:94: 17:7f:f2:d9:36:93:93:44:7f:3e:4c:8d:71:ae:13: 24:3a:17:98:a6:2e:e6:dd:db:c6:c5:e4:ec:d4:7b: a8:48:b5:6b:33:e3:fa:32:73:27:ee:37:a1:27:8c: 9b:f0:61:dc:f9:ac:3c:dc:85:73:dd:4b:58:5d:b2: af:77:d5:ed:1a:bf:20:43:1d:06:4d:20:b3:98:30: 40:fb:ec:d0:ed:4e:b9:46:94:29:99:c7:7b:16:52: a7:a7:74:1d:84:ed:b2:70:67:fb:4c:1d:bf:3e:52: 7c:49:58:52:60:cc:b5:42:f8:eb:f6:d0:c8:39:c6: 34:1d:7f:03:bb:2a:97:1a:9c:12:9b:57:9d:ba:8f: a7:e4:09:c3:01:b5:03:83:c8:f2:cf:11:a6:04:20: a6:1d:c4:39:9e:b5:c2:c8:ed:95:20:d6:65:d8:5a: a5:1a:85:0a:dd:90:c0:eb:37:cf:52:a7:ee:50:96: 81:4e:b1:4e:86:d4:cf:04:31:65:f9:72:16:97:02: 56:5a:e6:0c:21:51:11:e1:42:48:66:17:01:20:4e: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:35:B0:C0:65:A4:78:AF:6B:81:C6:6E:8B:C4:E8:76:E8:04:1B:9F X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:80:d7:7a:df:36:72:f0:c7:b8:ec:c5:f4:96:76:15:b6:5e: 21:fd:a7:2b:83:af:89:fe:fe:e2:f6:0b:81:47:13:86:19:ef: 3f:59:73:82:1a:7a:db:0d:66:eb:cf:92:0d:2b:e3:2f:10:09: 77:2c:39:59:30:7b:b0:9c:0d:28:bd:2c:1a:66:23:92:fa:58: c1:6c:4d:9a:0f:b2:9f:9a:09:95:75:c9:fd:00:de:3c:7c:1d: a5:f7:db:96:2c:84:fa:48:d4:3c:f3:b4:99:f1:f4:27:b5:4b: 23:b2:55:7d:5c:4b:75:79:89:e4:b3:5a:26:9d:e6:fa:99:a9: 49:db:01:e8:17:44:4e:fe:fc:e9:06:04:fa:d5:23:d4:f4:08: e4:6a:f4:04:02:38:24:fe:08:2d:9d:e9:07:d3:5f:85:33:69: 2d:a2:3b:a2:44:d7:f2:53:54:30:77:7f:e7:6e:6a:d0:ce:ec: 38:2b:7a:83:3c:b8:eb:1e:6f:33:2b:bf:b2:1e:9a:96:4f:e2: bc:c5:04:39:ee:bf:27:83:36:f5:85:21:99:8d:07:6d:dc:82: a3:e4:93:b9:75:43:a1:0c:13:32:bd:a4:db:7e:2c:dd:40:85: aa:6b:85:c4:c4:1b:e4:70:b2:93:ad:b8:11:db:36:35:33:c3: 65:85:61:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjAzMjUwODA0MjRaFw0yNjA0MDEwODA0MjRaMBgxFjAUBgNV BAMTDTY5YzM5NzA4LTgxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+oJimPoaY+Ie7vcg9NvFOBbUakJbquajxx2HIcLoFEwD8+hKdMM/fqFkjlBd/ 8tk2k5NEfz5MjXGuEyQ6F5imLubd28bF5OzUe6hItWsz4/oycyfuN6EnjJvwYdz5 rDzchXPdS1hdsq931e0avyBDHQZNILOYMED77NDtTrlGlCmZx3sWUqendB2E7bJw Z/tMHb8+UnxJWFJgzLVC+Ov20Mg5xjQdfwO7KpcanBKbV526j6fkCcMBtQODyPLP EaYEIKYdxDmetcLI7ZUg1mXYWqUahQrdkMDrN89Sp+5QloFOsU6G1M8EMWX5chaX AlZa5gwhURHhQkhmFwEgTl1rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8TWwwGWk eK9rgcZui8TodugEG58wHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmgNd63zZy8Me47MX0lnYVtl4h/acrg6+J/v7i9guBRxOGGe8/WXOCGnrbDWbr z5INK+MvEAl3LDlZMHuwnA0ovSwaZiOS+ljBbE2aD7KfmgmVdcn9AN48fB2l99uW LIT6SNQ887SZ8fQntUsjslV9XEt1eYnks1omneb6malJ2wHoF0RO/vzpBgT61SPU 9AjkavQEAjgk/ggtnekH01+FM2ktojuiRNfyU1Qwd3/nbmrQzuw4K3qDPLjrHm8z K7+yHpqWT+K8xQQ57r8ngzb1hSGZjQdt3IKj5JO5dUOhDBMyvaTbfizdQIWqa4XE xBvkcLKTrbgR2zY1M8NlhWFZ -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:09 2026 by rpki-client