$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json) Hash identifier: 2J0FFEqsRzlky1Du9qXmo5lIuoglm3O08p1MYTT5GoE= Subject key identifier: E6:6D:52:53:E4:3A:8C:B3:3F:B6:DE:DF:80:DA:FA:97:71:EB:D7:FA Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft Manifest number: 72 Signing time: Wed 25 Mar 2026 07:04:51 +0000 Manifest this update: Wed 25 Mar 2026 07:04:51 +0000 Manifest next update: Wed 01 Apr 2026 07:04:51 +0000 Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: ViEIeMe0bxMqFUWSeKE1TtDe5KmgWfwNQ6+W+xWGx8s=) 2: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=) 3: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Validity Not Before: Mar 25 07:04:51 2026 GMT Not After : Apr 1 07:04:51 2026 GMT Subject: CN=69c38913-0202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:fa:87:96:33:0f:71:0e:60:d9:54:17:80: 0e:29:6c:90:7f:65:57:62:aa:5a:9a:9d:4a:c7:c9: 7c:16:7f:88:e7:0b:ff:86:d8:96:25:c5:68:07:b6: f0:66:e5:4b:b5:2b:de:9e:90:1c:47:9e:55:ea:ba: c3:b4:be:88:c4:6c:e4:d7:d4:90:1d:63:7c:50:53: 08:e8:39:21:f3:d4:1e:94:2a:39:3a:21:fd:2e:82: 69:68:c1:f6:57:a7:0a:57:85:39:bc:c8:48:1e:13: a1:82:90:9e:10:79:75:28:3b:f7:a5:42:e9:1d:3a: 05:9c:ec:00:64:1e:a2:63:f1:0c:fd:7d:f2:db:ca: 6f:99:33:21:a7:ad:03:ad:13:c1:a3:38:56:f6:5b: f8:36:b1:85:87:45:8c:b1:d9:40:0b:40:c9:51:9e: bd:d1:5c:45:25:76:a3:d8:b8:2e:6f:bf:dd:9a:9b: 6b:25:37:e9:d4:3f:b0:2c:b2:13:dd:76:9a:7e:23: 92:b5:68:62:d4:6a:15:fc:81:6d:00:1b:55:6d:9b: 24:1d:ff:40:e4:d7:69:9e:03:d6:5c:0b:18:2c:37: c4:c1:57:61:f8:f3:48:23:0f:55:4c:5b:12:3d:53: 48:af:02:f7:3a:54:ee:24:c2:72:29:8d:56:a7:30: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:52:53:E4:3A:8C:B3:3F:B6:DE:DF:80:DA:FA:97:71:EB:D7:FA X509v3 Authority Key Identifier: keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:62:08:dc:6c:89:55:77:20:b6:b7:9e:be:b3:29:83:64:0c: 1c:bb:00:00:6d:c9:30:71:ce:1c:16:84:69:3f:4c:ff:43:53: 3d:5f:b5:c6:a9:63:7c:3e:65:50:be:f1:10:71:86:24:fb:87: f2:24:24:3d:e3:1c:b7:71:96:51:3f:b9:a6:21:46:75:98:72: f6:87:c5:e9:b7:14:e0:f6:72:1c:25:f2:34:2b:07:83:a3:18: ed:2b:f0:0f:c6:e3:40:84:2f:52:8d:5b:d3:5f:fc:b0:4f:0d: 57:fe:6d:f4:6b:da:cb:c3:21:ee:17:6b:75:65:d0:15:99:47: 36:dd:e6:28:6c:a3:5f:a4:e4:a4:67:4e:f6:19:a1:0d:c2:91: 13:28:df:88:06:52:22:00:3e:71:f5:85:98:31:1e:92:24:d9: 59:70:5c:df:85:7d:12:f5:03:92:79:bf:10:51:11:00:be:78: 0a:52:c5:31:94:a8:93:21:6a:27:21:ee:94:58:df:5f:94:d5: c3:2f:57:4b:90:16:76:8e:81:74:2c:99:ab:f1:9d:f4:0b:21: b1:80:d2:bb:3b:9b:26:fc:3f:73:0c:2c:56:d9:1c:40:17:15: 5a:f3:ae:f2:f3:69:9d:f0:97:89:03:e1:31:da:7e:77:a5:93: 37:eb:c1:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY5QzExMC8GA1UEBRMoNjZBQjRFQjk2MjlEMjZGOTdFMjQ4QThDMzI0NDU4NzNC N0UzQzBGODAeFw0yNjAzMjUwNzA0NTFaFw0yNjA0MDEwNzA0NTFaMBgxFjAUBgNV BAMTDTY5YzM4OTEzLTAyMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtMfqHljMPcQ5g2VQXgA4pbJB/ZVdiqlqanUrHyXwWf4jnC/+G2JYlxWgHtvBm 5Uu1K96ekBxHnlXqusO0vojEbOTX1JAdY3xQUwjoOSHz1B6UKjk6If0ugmlowfZX pwpXhTm8yEgeE6GCkJ4QeXUoO/elQukdOgWc7ABkHqJj8Qz9ffLbym+ZMyGnrQOt E8GjOFb2W/g2sYWHRYyx2UALQMlRnr3RXEUldqPYuC5vv92am2slN+nUP7AsshPd dpp+I5K1aGLUahX8gW0AG1VtmyQd/0Dk12meA9ZcCxgsN8TBV2H480gjD1VMWxI9 U0ivAvc6VO4kwnIpjVanMBfHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5m1SU+Q6 jLM/tt7fgNr6l3Hr1/owHwYDVR0jBBgwFoAUZqtOuWKdJvl+JIqMMkRYc7fjwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjlDLzlBOEZCNTRFODI2 QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnF0T3VXS2RKdmwtSklxTU1rUlljN2Zqd1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjlDLzlBOEZCNTRFODI2QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZs LUpJcU1Na1JZYzdmandQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyYgjcbIlVdyC2t56+symDZAwcuwAAbckwcc4cFoRpP0z/Q1M9X7XGqWN8PmVQ vvEQcYYk+4fyJCQ94xy3cZZRP7mmIUZ1mHL2h8XptxTg9nIcJfI0KweDoxjtK/AP xuNAhC9SjVvTX/ywTw1X/m30a9rLwyHuF2t1ZdAVmUc23eYobKNfpOSkZ072GaEN wpETKN+IBlIiAD5x9YWYMR6SJNlZcFzfhX0S9QOSeb8QUREAvngKUsUxlKiTIWon Ie6UWN9flNXDL1dLkBZ2joF0LJmr8Z30CyGxgNK7O5sm/D9zDCxW2RxAFxVa867y 82md8JeJA+Ex2n53pZM368Fc -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:59 2026 by rpki-client