$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: 3po1igVBakpgiwEhV9u473hLTL6nas+wuS4rApPWH4Q= Subject key identifier: 9B:77:AB:02:A6:BB:B6:95:44:2A:F1:DA:77:D2:F6:14:0B:8B:77:D0 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: 0149 Signing time: Wed 25 Mar 2026 04:28:32 +0000 Manifest this update: Wed 25 Mar 2026 04:28:31 +0000 Manifest next update: Wed 01 Apr 2026 04:28:31 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: iVNIhcF5JJrx2fJAtZQk0f/ZSf6LL3/lwBViPtvuOsA=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Mar 25 04:28:31 2026 GMT Not After : Apr 1 04:28:31 2026 GMT Subject: CN=69c36470-cf7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7d:5a:10:04:12:8f:ad:05:0b:f3:c2:49:8c: c3:a5:2e:49:77:fa:0a:d9:6f:bb:9a:66:97:f3:f3: e8:de:a6:10:a6:7b:21:5e:b1:7a:8c:b0:1a:c0:46: d2:3f:8f:c4:8c:7b:b7:af:a9:dd:46:34:d1:18:bc: 79:a8:a6:13:64:9f:2b:87:52:a1:e5:37:7d:d3:cc: d7:bc:35:0a:02:e4:a9:83:64:a6:f5:07:e3:1f:16: f5:95:05:e5:6f:d8:37:8f:a6:e0:b5:60:28:eb:44: b8:33:83:66:42:b6:52:e4:9d:67:f7:71:47:1f:bb: 8a:20:7c:a2:61:b4:12:6a:4c:3b:df:43:fb:93:e6: b8:1e:ac:4d:6a:9c:b2:db:65:56:3d:c1:4e:66:00: 05:75:b5:95:3b:97:a3:52:79:51:c4:75:3d:e9:ba: 54:3a:1d:87:f8:7c:8d:9d:64:76:e0:98:fe:6f:ee: 1c:23:c9:2b:22:e8:75:ad:65:8a:f3:ef:8f:26:f3: 13:d8:a8:6c:26:83:65:2c:22:e2:af:a4:fa:b0:66: 93:48:62:47:b8:e2:93:b0:df:4d:62:8b:b8:38:c0: aa:d5:f3:dc:32:c0:f3:33:59:89:d0:89:fc:cf:34: 61:c0:bc:1e:f2:3d:13:4c:07:c8:b1:39:19:89:5e: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:AB:02:A6:BB:B6:95:44:2A:F1:DA:77:D2:F6:14:0B:8B:77:D0 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:99:ff:93:29:d1:3a:d1:3d:81:16:73:13:37:56:30:ee:64: 7d:e0:7e:1f:44:22:e7:6d:21:3e:df:b7:11:27:ca:94:a6:16: 6b:40:80:ff:63:14:43:eb:d8:43:e4:fb:c3:72:83:13:ee:ca: 02:62:88:3b:b8:42:a1:54:33:ec:29:eb:66:39:c6:2c:90:41: df:87:9c:ae:3b:53:c0:bc:69:81:d9:dd:11:1f:78:5a:30:ea: 30:96:a8:0d:c3:64:a9:52:4d:e6:29:07:14:be:69:21:9f:b0: fd:ee:6f:3d:e9:7c:02:36:f2:e0:fb:cd:c1:e3:40:2b:f9:f4: d3:ef:11:77:39:9d:a7:0c:92:fd:0d:94:8d:4a:be:5d:6b:86: 29:ad:78:48:c0:28:53:cb:bd:95:f5:1e:33:60:ee:c0:b2:6c: 23:8e:b9:57:0c:54:29:88:2a:c8:ae:5b:41:12:c2:32:88:67: 88:fc:ac:a5:ea:14:92:90:1d:97:f7:b2:73:72:9e:a2:f5:5b: 7b:a3:c8:1d:4e:0f:45:e8:2a:1c:03:bb:04:7b:77:31:56:df: 29:e0:40:9a:3d:3f:a8:03:10:2e:f9:92:06:81:25:84:33:8e: 78:ad:6f:7f:91:c4:fc:31:39:6b:5e:2f:46:b1:5c:50:11:67: db:cf:e3:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjYwMzI1MDQyODMxWhcNMjYwNDAxMDQyODMxWjAYMRYwFAYD VQQDEw02OWMzNjQ3MC1jZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmn1aEAQSj60FC/PCSYzDpS5Jd/oK2W+7mmaX8/Po3qYQpnshXrF6jLAawEbS P4/EjHu3r6ndRjTRGLx5qKYTZJ8rh1Kh5Td908zXvDUKAuSpg2Sm9QfjHxb1lQXl b9g3j6bgtWAo60S4M4NmQrZS5J1n93FHH7uKIHyiYbQSakw730P7k+a4HqxNapyy 22VWPcFOZgAFdbWVO5ejUnlRxHU96bpUOh2H+HyNnWR24Jj+b+4cI8krIuh1rWWK 8++PJvMT2KhsJoNlLCLir6T6sGaTSGJHuOKTsN9NYou4OMCq1fPcMsDzM1mJ0In8 zzRhwLwe8j0TTAfIsTkZiV5kgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt3qwKm u7aVRCrx2nfS9hQLi3fQMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5n/kynROtE9gRZzEzdWMO5kfeB+H0Qi520hPt+3ESfKlKYWa0CA/2MUQ+vY Q+T7w3KDE+7KAmKIO7hCoVQz7CnrZjnGLJBB34ecrjtTwLxpgdndER94WjDqMJao DcNkqVJN5ikHFL5pIZ+w/e5vPel8Ajby4PvNweNAK/n00+8RdzmdpwyS/Q2UjUq+ XWuGKa14SMAoU8u9lfUeM2DuwLJsI465VwxUKYgqyK5bQRLCMohniPyspeoUkpAd l/eyc3KeovVbe6PIHU4PRegqHAO7BHt3MVbfKeBAmj0/qAMQLvmSBoElhDOOeK1v f5HE/DE5a14vRrFcUBFn28/jdA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:07 2026 by rpki-client