$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: BvNl77LAyBCoKCPSQppIhtMWlOFbm//8rbRGg6O7B9Y= Subject key identifier: 1C:BC:C8:79:26:05:BD:52:F3:CD:B5:A4:EB:DA:55:1D:0F:29:E6:59 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: 0138 Signing time: Wed 25 Mar 2026 04:39:07 +0000 Manifest this update: Wed 25 Mar 2026 04:39:06 +0000 Manifest next update: Wed 01 Apr 2026 04:39:06 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: Vgli2t6k7NbwaS7hkLfG9A5WHA1cznIUcAmVDLLh5/4=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Mar 25 04:39:06 2026 GMT Not After : Apr 1 04:39:06 2026 GMT Subject: CN=69c366ea-4b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:0f:cc:c8:26:d7:5c:ab:e9:a6:eb:44:b4: 42:52:be:1d:32:af:57:58:81:ba:5b:e7:03:5c:12: 41:18:d2:1b:d0:10:75:ec:85:c5:49:b3:3b:1a:f1: f1:33:10:6e:5c:f1:be:70:a8:9c:0a:8e:07:74:8b: 74:d1:45:a4:5b:58:11:7b:03:ba:47:bb:9b:8a:9f: d4:df:58:51:6c:7b:88:e0:9c:8f:47:41:b2:14:8b: b4:c5:62:2c:ad:b2:25:79:c0:dd:b0:46:52:f7:4d: 5f:2e:c6:2d:65:f8:91:e7:4c:ec:bf:90:c7:7a:1a: d0:74:7a:13:da:84:87:2b:f4:ae:12:c8:0a:9f:83: 36:dd:50:24:d3:39:97:88:0f:c1:4c:0e:8a:5f:b4: d7:00:46:f2:49:0c:bd:de:6d:ae:f3:f5:d2:54:6e: e2:5d:b8:52:53:57:d9:83:a8:45:b8:3d:a0:cd:5a: ae:5a:cb:bf:5d:e5:b4:b4:55:ad:cb:96:27:6b:47: f7:f1:34:a0:c3:05:af:8d:67:78:bc:36:36:68:ad: 70:e5:d8:f2:05:0e:6a:7b:54:18:ed:65:62:fd:87: fa:02:7c:1b:3e:db:ea:5e:53:c6:74:a1:3b:f9:f9: 84:01:63:71:f4:ec:d1:7b:6b:58:b4:f1:bf:9c:df: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BC:C8:79:26:05:BD:52:F3:CD:B5:A4:EB:DA:55:1D:0F:29:E6:59 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0a:f9:b2:f0:b8:68:49:71:91:1a:cf:cf:a5:f0:51:76:91: 75:49:8a:d0:20:59:b4:20:f9:a5:15:3b:cb:d5:40:3b:c8:4b: 5e:a1:7b:a2:e4:27:97:27:a3:38:4b:2a:f6:07:de:90:0f:b5: f2:c1:5c:2b:69:9b:ea:47:b6:f5:ee:2d:2b:6b:37:1a:86:c2: 87:7c:8a:a8:85:1e:8e:f6:84:95:da:bc:de:04:c2:4e:c7:b0: 10:3f:b4:ee:1c:9e:37:61:63:de:b7:d9:0c:2a:13:a9:29:14: e0:56:09:47:24:4e:69:55:a6:87:39:61:4c:64:2d:20:2f:fe: 4c:21:35:de:67:f6:85:52:96:22:fe:c5:f6:57:bb:fd:57:63: 79:9c:30:87:77:4f:bc:40:67:2f:63:fc:87:aa:91:82:da:11: a3:18:2c:67:7f:37:e2:43:cf:80:f6:cb:94:db:3d:59:4f:24: 48:10:28:df:49:b1:f4:0c:0e:91:4e:10:98:29:4e:10:6e:fb: 50:bf:2e:27:f3:3b:c3:a7:40:39:40:b4:5a:ab:91:9b:24:51: c2:d2:07:cf:01:5a:f6:4f:6e:2e:28:0b:2e:f0:bb:c2:ff:d4: 8e:7a:9a:82:1d:6a:d4:3d:de:47:d3:73:06:4e:12:dd:49:47: f5:b7:2f:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjYwMzI1MDQzOTA2WhcNMjYwNDAxMDQzOTA2WjAYMRYwFAYD VQQDEw02OWMzNjZlYS00YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArd8PzMgm11yr6abrRLRCUr4dMq9XWIG6W+cDXBJBGNIb0BB17IXFSbM7GvHx MxBuXPG+cKicCo4HdIt00UWkW1gRewO6R7ubip/U31hRbHuI4JyPR0GyFIu0xWIs rbIlecDdsEZS901fLsYtZfiR50zsv5DHehrQdHoT2oSHK/SuEsgKn4M23VAk0zmX iA/BTA6KX7TXAEbySQy93m2u8/XSVG7iXbhSU1fZg6hFuD2gzVquWsu/XeW0tFWt y5Yna0f38TSgwwWvjWd4vDY2aK1w5djyBQ5qe1QY7WVi/Yf6AnwbPtvqXlPGdKE7 +fmEAWNx9OzRe2tYtPG/nN/chwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBy8yHkm Bb1S8821pOvaVR0PKeZZMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdAr5svC4aElxkRrPz6XwUXaRdUmK0CBZtCD5pRU7y9VAO8hLXqF7ouQnlyej OEsq9gfekA+18sFcK2mb6ke29e4tK2s3GobCh3yKqIUejvaEldq83gTCTsewED+0 7hyeN2Fj3rfZDCoTqSkU4FYJRyROaVWmhzlhTGQtIC/+TCE13mf2hVKWIv7F9le7 /VdjeZwwh3dPvEBnL2P8h6qRgtoRoxgsZ3834kPPgPbLlNs9WU8kSBAo30mx9AwO kU4QmClOEG77UL8uJ/M7w6dAOUC0WquRmyRRwtIHzwFa9k9uLigLLvC7wv/Ujnqa gh1q1D3eR9NzBk4S3UlH9bcvmA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:30 2026 by rpki-client