$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json) Hash identifier: v806m5eMidZcLET2lpSfE2PvB09a7ndrFM+16FVLMtE= Subject key identifier: BD:D5:68:44:13:FE:2D:72:FF:B6:3A:FC:01:36:EA:0A:71:B0:B3:31 Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 07:54:02 +0000 Manifest this update: Wed 25 Mar 2026 07:54:02 +0000 Manifest next update: Wed 01 Apr 2026 07:54:02 +0000 Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: uQBgtAdZm52sm7ni8ydFw+kodn6D0gsSv3KGgxya29s=) 2: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: 8CNnaJx3H61GgnJxhNhOMmVhr6HZscFPEBcc69eMEC4=) 3: EE4BF2EAFB5911F0B335DD54496F56BC.roa (hash: eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Mar 25 07:54:02 2026 GMT Not After : Apr 1 07:54:02 2026 GMT Subject: CN=69c3949a-ccbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:58:07:b4:25:5b:4a:97:85:f0:e2:4d:20: 66:52:b6:62:e5:72:e3:72:e3:d4:bb:c5:0d:18:0a: 57:56:35:66:de:6f:8f:ac:47:92:2c:dd:cb:51:92: 17:5d:54:e9:05:83:4d:c8:27:21:c4:57:7c:18:b8: e9:da:bc:6f:ee:8c:24:bb:fc:f6:6f:c9:4d:c1:02: 92:71:c4:14:cb:36:fd:c1:c7:5e:5a:b2:d4:2f:73: b2:53:6f:b4:8d:57:02:74:40:59:30:b4:7f:0d:9a: 8a:2b:be:28:92:67:32:81:6f:43:ff:34:cf:72:bc: 1e:35:a7:72:bb:9d:13:a4:2a:eb:83:28:58:af:ce: a1:27:06:26:4b:6e:8d:2d:a7:15:a0:e8:ae:25:31: 6f:2a:ce:27:76:f5:db:b3:59:3c:1f:b1:b5:11:a2: 9f:eb:96:44:7f:8d:c9:79:ab:74:00:20:72:55:04: 21:fc:fb:f5:67:90:3f:75:59:4a:3a:dd:29:68:ed: 79:28:cb:74:88:11:9e:16:a1:ac:d4:2c:6e:97:1a: aa:25:62:e5:df:4b:df:95:f6:fc:7d:47:a7:79:a2: 47:8d:c1:2e:f7:f8:6d:9a:2a:af:44:58:e9:24:30: 6a:a7:99:c6:7c:54:a9:ac:8e:c9:c5:40:4a:e4:f3: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D5:68:44:13:FE:2D:72:FF:B6:3A:FC:01:36:EA:0A:71:B0:B3:31 X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:b7:da:ad:2b:e2:04:31:0e:43:40:a9:32:11:c9:98:18:c4: bf:7b:78:db:12:14:37:23:17:e2:bb:79:66:ea:5b:d1:a0:7f: 6b:37:1c:b4:f0:79:6e:38:63:b8:ea:9b:11:4d:49:0b:cc:27: 28:4e:79:d7:4c:22:38:41:86:32:23:15:30:1a:98:59:84:0e: 9d:10:47:ae:82:dc:c1:c0:8c:51:ae:ca:76:8f:f4:37:91:26: b9:24:d9:e3:f3:b0:3b:06:d5:57:09:ee:bd:12:13:71:7d:d6: c8:11:78:50:ab:80:6a:71:30:14:24:37:cd:30:e3:01:d3:24: 1b:97:b0:a6:6b:22:6d:80:74:21:4f:5f:8f:c0:9b:e6:b8:ba: 83:4f:c0:8d:ed:8b:f3:76:56:81:e7:81:0f:2c:e6:cb:2a:de: 3d:19:fd:3c:f4:f3:e7:d7:64:5e:f2:c0:f0:f8:f3:c0:05:51: 6f:8a:2c:b2:f1:c3:5e:cc:32:8e:90:00:de:f4:1c:3b:fa:6b: d3:2e:73:6c:92:db:63:ef:38:df:5a:44:95:c6:b3:ec:57:1c: 4b:24:b0:66:dc:76:5d:cd:06:14:38:59:e1:6c:b4:b0:5b:21: 5d:36:1a:be:4a:e2:cc:4f:e2:08:d0:1e:78:fa:d0:b1:a8:3c: 5f:18:c3:db -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5NTU0NkI3RTBD MUQxMUM1NzAeFw0yNjAzMjUwNzU0MDJaFw0yNjA0MDEwNzU0MDJaMBgxFjAUBgNV BAMTDTY5YzM5NDlhLWNjYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClZlgHtCVbSpeF8OJNIGZStmLlcuNy49S7xQ0YCldWNWbeb4+sR5Is3ctRkhdd VOkFg03IJyHEV3wYuOnavG/ujCS7/PZvyU3BApJxxBTLNv3Bx15astQvc7JTb7SN VwJ0QFkwtH8NmoorviiSZzKBb0P/NM9yvB41p3K7nROkKuuDKFivzqEnBiZLbo0t pxWg6K4lMW8qzid29duzWTwfsbURop/rlkR/jcl5q3QAIHJVBCH8+/VnkD91WUo6 3Slo7Xkoy3SIEZ4WoazULG6XGqolYuXfS9+V9vx9R6d5okeNwS73+G2aKq9EWOkk MGqnmcZ8VKmsjsnFQErk89N9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvdVoRBP+ LXL/tjr8ATbqCnGwszEwHwYDVR0jBBgwFoAUzq7A6H2VhStEwGE5VUa34MHRHFcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzVDMkQxMDY0RUJD OTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhG Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenE3QTZIMlZoU3RFd0dFNVZVYTM0TUhSSEZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC OTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0 RXdHRTVWVWEzNE1IUkhGYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDEt9qtK+IEMQ5DQKkyEcmYGMS/e3jbEhQ3Ixfiu3lm6lvRoH9rNxy08HluOGO4 6psRTUkLzCcoTnnXTCI4QYYyIxUwGphZhA6dEEeugtzBwIxRrsp2j/Q3kSa5JNnj 87A7BtVXCe69EhNxfdbIEXhQq4BqcTAUJDfNMOMB0yQbl7CmayJtgHQhT1+PwJvm uLqDT8CN7YvzdlaB54EPLObLKt49Gf089PPn12Re8sDw+PPABVFviiyy8cNezDKO kADe9Bw7+mvTLnNskttj7zjfWkSVxrPsVxxLJLBm3HZdzQYUOFnhbLSwWyFdNhq+ SuLMT+II0B54+tCxqDxfGMPb -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:14 2026 by rpki-client