$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: 8gTxEMwttk6NDZmwPQNeEQD+nf69mkwMjIKfz5YeeTo= Subject key identifier: FD:B5:91:33:96:D7:B2:1B:44:A2:DC:9A:28:E6:3B:F0:65:66:5A:2C Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DF6 Signing time: Tue 24 Mar 2026 15:27:21 +0000 Manifest this update: Tue 24 Mar 2026 15:27:20 +0000 Manifest next update: Tue 31 Mar 2026 15:27:20 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: 3mKfhsCvtSjadqqxgrRjisz48iDQFUounzk7uVfD3p0=) 2: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) 3: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11804 (0x2e1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Mar 24 15:27:20 2026 GMT Not After : Mar 31 15:27:20 2026 GMT Subject: CN=69c2ad58-da64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:2b:74:ff:34:a2:85:ae:6d:19:53:6a:ea: 94:3f:c0:37:7e:b5:de:9c:80:e1:2c:38:9c:36:a0: 27:a6:96:7e:df:85:97:4b:48:80:96:cd:27:43:c3: eb:a3:f4:3a:b4:57:34:78:28:c8:20:c5:6f:72:62: 8a:1a:4c:21:58:8d:40:73:3d:fa:3c:7b:39:2e:45: bf:43:69:5a:aa:9a:7f:56:76:77:17:30:5c:75:ec: 2c:1c:cb:f8:9a:7a:d3:c3:c0:e6:07:d0:1b:71:04: fd:b3:d3:40:c0:7b:7f:90:e5:22:de:78:7c:12:72: aa:b5:fe:5b:57:4f:63:04:57:f6:ab:6e:5c:ca:1d: 75:8f:28:9a:c6:39:1a:b3:c9:c3:ec:da:76:93:e4: 16:5d:52:1c:7d:b3:7e:d6:16:92:fb:47:d5:25:d2: 7c:69:b2:7b:85:52:4e:7f:81:82:3c:86:ee:a5:2c: 3a:3d:4e:08:45:24:e4:59:ed:93:fa:e5:c5:c9:b7: 8a:b7:9f:60:c5:b3:ff:48:a9:65:72:5e:0f:b7:15: d8:44:47:9e:5c:8b:71:da:8a:cc:d7:ed:1c:22:8a: e5:da:3c:73:79:b1:24:96:fc:40:eb:89:ae:be:b2: f2:30:0c:07:dc:78:e7:ac:6b:c7:8e:a1:c4:38:7f: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B5:91:33:96:D7:B2:1B:44:A2:DC:9A:28:E6:3B:F0:65:66:5A:2C X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:21:1a:6f:cd:d6:09:07:9d:40:15:ab:f1:10:ee:94:72:71: d9:14:a8:78:62:49:cc:40:a6:51:2b:95:f5:cd:f3:15:dd:94: 35:af:39:67:8c:58:e2:8d:e7:e0:3f:3e:a0:a6:ef:85:64:51: d1:bf:71:0a:37:ca:ce:d4:22:2b:7c:50:40:95:e9:b6:31:50: ee:10:2c:74:2f:f0:0e:9a:f6:e8:7d:0f:6b:dc:39:6a:db:fa: c4:9a:a0:50:24:ee:0b:57:77:de:e5:14:5d:b5:b1:12:03:ce: 5d:0c:df:71:54:2e:83:59:d1:20:c1:1a:b3:cf:c2:20:8a:e0: 79:e4:5b:b0:41:ab:c2:18:e0:1b:44:61:a3:2d:56:85:fb:ee: 74:c6:25:2f:d1:54:ae:14:0e:3c:1e:e2:35:0a:90:be:41:9b: 38:91:80:42:21:8c:11:7e:60:57:e9:8e:75:33:e2:74:47:47: df:72:da:a3:43:21:88:0a:35:4a:6f:56:4f:45:12:a0:84:eb: a0:3c:d1:d1:5a:02:19:5f:73:63:26:69:c9:9f:c3:b2:d3:80: 24:58:40:40:fd:b5:e8:3a:32:69:1b:d2:83:74:f4:89:8c:4e: d5:9a:8b:e1:eb:69:07:28:fa:da:8e:fe:b7:97:b1:c7:85:24: ac:3b:3f:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwMzI0MTUyNzIwWhcNMjYwMzMxMTUyNzIwWjAYMRYwFAYD VQQDEw02OWMyYWQ1OC1kYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZYrdP80ooWubRlTauqUP8A3frXenIDhLDicNqAnppZ+34WXS0iAls0nQ8Pr o/Q6tFc0eCjIIMVvcmKKGkwhWI1Acz36PHs5LkW/Q2laqpp/VnZ3FzBcdewsHMv4 mnrTw8DmB9AbcQT9s9NAwHt/kOUi3nh8EnKqtf5bV09jBFf2q25cyh11jyiaxjka s8nD7Np2k+QWXVIcfbN+1haS+0fVJdJ8abJ7hVJOf4GCPIbupSw6PU4IRSTkWe2T +uXFybeKt59gxbP/SKllcl4PtxXYREeeXItx2orM1+0cIorl2jxzebEklvxA64mu vrLyMAwH3HjnrGvHjqHEOH9W2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP21kTOW 17IbRKLcmijmO/BlZlosMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABSEab83WCQedQBWr8RDulHJx2RSoeGJJzECmUSuV9c3zFd2UNa85Z4xY4o3n 4D8+oKbvhWRR0b9xCjfKztQiK3xQQJXptjFQ7hAsdC/wDpr26H0Pa9w5atv6xJqg UCTuC1d33uUUXbWxEgPOXQzfcVQug1nRIMEas8/CIIrgeeRbsEGrwhjgG0Rhoy1W hfvudMYlL9FUrhQOPB7iNQqQvkGbOJGAQiGMEX5gV+mOdTPidEdH33Lao0MhiAo1 Sm9WT0USoITroDzR0VoCGV9zYyZpyZ/DstOAJFhAQP216DoyaRvSg3T0iYxO1ZqL 4etpByj62o7+t5exx4UkrDs/4Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:49:04 2026 by rpki-client