$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: RsC7NM1omI986eU9Nh1jQQLhRLYCUPB4vQvw5Os4lNE= Subject key identifier: E4:15:15:73:2E:A3:CD:8C:BB:D7:9C:C8:84:79:47:79:EF:AE:6D:37 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DF7 Signing time: Thu 26 Mar 2026 15:31:07 +0000 Manifest this update: Thu 26 Mar 2026 15:31:06 +0000 Manifest next update: Thu 02 Apr 2026 15:31:06 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: 5sMXlLQ3y7yBF0hot7yNKeG4MF4NN44nHZMCK3hCdrE=) 2: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) 3: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11805 (0x2e1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Mar 26 15:31:06 2026 GMT Not After : Apr 2 15:31:06 2026 GMT Subject: CN=69c5513b-2ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:12:75:09:34:83:f1:95:6b:70:62:6c:7e: 63:f3:55:0a:7c:f2:d2:7a:be:cf:ca:93:4d:fa:94: bc:5c:63:6d:cc:11:2b:72:7a:c2:73:cf:16:ff:2b: bb:68:c5:a3:ad:b1:39:79:ef:45:24:97:99:0e:1d: 6b:fc:a7:58:6b:3c:4f:a7:f0:56:90:a6:56:0c:56: a7:49:e1:6e:43:90:ba:27:27:0a:8b:20:90:d0:72: 41:47:14:20:66:85:9d:b2:a5:86:4e:67:d8:91:c1: 50:bc:33:75:26:2f:84:04:fd:e0:ac:f8:7a:c1:b5: 7d:4f:3d:ba:a0:12:2d:35:94:34:2a:fd:47:df:a3: 18:a3:a7:c2:db:f9:d7:a1:98:0f:8f:e3:8c:ee:a9: c2:55:d1:bc:14:18:d1:d3:02:04:02:1e:fa:5c:aa: e4:c6:cc:1c:ae:88:51:e5:fb:ef:cd:79:cd:f2:b5: b6:4d:06:cc:3d:02:d7:0d:ab:1d:fc:dd:96:f2:9a: a0:8a:a9:2a:2d:a7:3f:73:ae:d0:fb:4f:a5:03:98: 80:f0:53:a2:67:cf:78:a7:80:1c:fa:3b:c1:5f:ea: e4:95:da:b3:7d:08:93:8d:dc:d8:9f:dc:58:04:d7: 08:5a:44:45:a4:6f:d5:87:ab:dc:39:8d:c4:d9:1e: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:15:15:73:2E:A3:CD:8C:BB:D7:9C:C8:84:79:47:79:EF:AE:6D:37 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d6:3a:7c:0a:e9:2b:6f:78:33:6f:6f:e9:38:f8:cf:86:57: 21:73:7c:48:ff:4e:19:51:53:d1:d5:d6:98:95:c3:60:4a:e4: 04:e8:f4:44:76:07:db:5c:e3:c2:dd:75:eb:8e:c0:f8:12:5b: ae:7f:e2:9a:c5:5e:c1:49:71:74:81:6b:7c:6a:fc:79:9f:f6: fa:a2:3a:12:ba:f6:a3:c9:f4:18:cc:7b:12:36:0f:c5:91:64: 91:c8:24:ea:d4:6d:8b:23:c7:db:91:57:49:bb:9c:d6:a7:dd: cb:bd:a9:bc:a2:ca:58:2d:12:b7:bf:39:6a:df:46:73:9f:9c: fb:0d:cd:b4:8b:8f:60:6f:73:42:1c:a7:c8:d5:08:bd:28:82: 66:7e:22:3d:92:e9:02:3d:30:cb:df:b8:b4:33:f6:11:6c:d6: b0:1e:10:5a:88:dc:24:be:50:9b:4e:f5:4d:a4:9e:47:00:3f: b1:87:c1:6b:eb:ae:0e:3c:5c:91:61:d7:a7:78:df:2a:81:ef: b7:13:da:a6:6a:04:66:67:19:dc:ab:6d:76:42:a9:a5:10:bf: b1:70:f7:3d:86:ce:4e:59:32:28:6e:ec:7d:3f:1e:2e:d4:3d: 31:04:bb:14:88:aa:99:35:cc:43:4a:8b:b3:56:88:fc:18:3b: fc:fb:cc:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwMzI2MTUzMTA2WhcNMjYwNDAyMTUzMTA2WjAYMRYwFAYD VQQDEw02OWM1NTEzYi0yZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGwSdQk0g/GVa3BibH5j81UKfPLSer7PypNN+pS8XGNtzBErcnrCc88W/yu7 aMWjrbE5ee9FJJeZDh1r/KdYazxPp/BWkKZWDFanSeFuQ5C6JycKiyCQ0HJBRxQg ZoWdsqWGTmfYkcFQvDN1Ji+EBP3grPh6wbV9Tz26oBItNZQ0Kv1H36MYo6fC2/nX oZgPj+OM7qnCVdG8FBjR0wIEAh76XKrkxswcrohR5fvvzXnN8rW2TQbMPQLXDasd /N2W8pqgiqkqLac/c67Q+0+lA5iA8FOiZ894p4Ac+jvBX+rkldqzfQiTjdzYn9xY BNcIWkRFpG/Vh6vcOY3E2R6S0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQVFXMu o82Mu9ecyIR5R3nvrm03MB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9Y6fArpK294M29v6Tj4z4ZXIXN8SP9OGVFT0dXWmJXDYErkBOj0RHYH21zj wt11647A+BJbrn/imsVewUlxdIFrfGr8eZ/2+qI6Err2o8n0GMx7EjYPxZFkkcgk 6tRtiyPH25FXSbuc1qfdy72pvKLKWC0St785at9Gc5+c+w3NtIuPYG9zQhynyNUI vSiCZn4iPZLpAj0wy9+4tDP2EWzWsB4QWojcJL5Qm071TaSeRwA/sYfBa+uuDjxc kWHXp3jfKoHvtxPapmoEZmcZ3KttdkKppRC/sXD3PYbOTlkyKG7sfT8eLtQ9MQS7 FIiqmTXMQ0qLs1aI/Bg7/PvMVA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:53 2026 by rpki-client