$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: Sri2lLcnIuonGJLN5MMhDatwG7wTQYM2L7usz4IaCUE= Subject key identifier: 56:C5:8A:11:A1:D8:67:7F:16:43:ED:B7:57:1A:F3:32:D6:11:0D:DF Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 1058 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 1043 Signing time: Tue 24 Mar 2026 17:19:01 +0000 Manifest this update: Tue 24 Mar 2026 17:19:00 +0000 Manifest next update: Tue 31 Mar 2026 17:19:00 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: R1/aeecelFWe4pV1CpM9F9fls68VM4CsezV1CQhMnpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4184 (0x1058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Mar 24 17:19:00 2026 GMT Not After : Mar 31 17:19:00 2026 GMT Subject: CN=69c2c785-cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:9d:c2:97:d9:87:e6:cf:43:6e:47:0e:ba: 19:7a:02:3c:b6:d7:f2:f9:b1:da:6b:7c:5c:68:d5: 95:a3:01:68:85:7f:7d:43:b5:7b:94:bd:b2:e5:dc: ba:e3:65:b8:b3:c4:08:8a:c2:62:2d:84:64:c0:be: 61:16:0e:fd:e1:cf:3d:6b:42:22:7d:5a:19:32:b2: df:f0:59:16:36:c2:0b:0f:27:dd:22:2d:05:bb:14: 1e:a0:44:ee:41:7f:8a:81:5f:1f:30:29:ae:47:34: 73:f4:e3:06:94:e9:a3:bf:0c:ab:79:5a:ca:45:f7: 0e:c2:ab:ca:d6:1a:fb:df:37:f0:71:d0:6f:de:f9: 31:61:e1:03:07:23:cf:a8:d0:f9:76:df:40:b8:b6: 58:4a:14:8d:dd:9e:72:8b:de:5f:75:19:f9:7f:b0: 42:d6:c6:e4:11:b6:c2:41:7c:97:94:d3:4e:ce:c2: 17:76:24:ce:c5:6c:80:07:e3:4d:82:78:0e:ca:53: 43:96:94:91:a1:2a:3b:4d:f5:3b:f6:a7:7d:6f:b8: 71:ff:7a:05:48:78:a2:73:3c:cb:5b:35:97:2d:10: 27:5e:84:29:c8:5b:c0:73:87:b1:43:3d:c8:c6:37: 2c:0f:d8:4f:52:bc:74:44:bf:e7:91:c2:25:49:40: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:8A:11:A1:D8:67:7F:16:43:ED:B7:57:1A:F3:32:D6:11:0D:DF X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:96:9d:f2:5a:6d:5e:36:d3:13:1e:0b:28:53:e6:ef:c1:d7: a8:d2:05:43:7b:1c:1a:44:91:31:56:1e:24:fd:df:7e:ce:b5: 8d:72:51:f8:34:cb:eb:d9:a5:5d:a3:da:6c:07:45:63:ab:26: aa:d1:0c:13:82:52:83:be:8a:4d:0c:59:14:28:87:5c:e9:8e: 37:4e:a9:c1:f8:0f:ed:37:64:18:74:7d:11:7a:55:6a:44:cb: 1e:df:0b:5a:97:27:53:c9:25:94:5b:aa:82:0d:4d:61:7c:a8: d9:0c:58:51:70:ab:51:52:5c:f9:c6:f2:a3:fe:ed:86:e6:fa: ca:e4:d0:00:4f:66:20:c6:99:bf:fd:e3:8c:3f:7e:cf:28:2e: 5c:34:3a:bc:4b:1b:ab:00:1c:89:22:c9:e2:3b:6f:6e:a8:2b: 8f:06:c8:a3:9e:a9:be:8a:7a:9d:38:f5:34:e3:83:90:22:65: 89:1f:77:b4:73:0b:eb:98:ad:c9:a2:bd:ea:59:3f:70:f7:7d: 8d:e2:a4:ff:ee:e2:45:08:aa:0f:67:bf:31:66:28:63:d4:9f: fc:4b:f5:2d:16:99:2f:b5:e0:5e:98:c5:d6:de:bc:f8:e2:46: e9:c8:28:a7:6d:f1:dd:81:f7:b5:43:d1:0d:f9:13:13:63:94: bb:43:d9:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjYwMzI0MTcxOTAwWhcNMjYwMzMxMTcxOTAwWjAYMRYwFAYD VQQDEw02OWMyYzc4NS1jY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPWdwpfZh+bPQ25HDroZegI8ttfy+bHaa3xcaNWVowFohX99Q7V7lL2y5dy6 42W4s8QIisJiLYRkwL5hFg794c89a0IifVoZMrLf8FkWNsILDyfdIi0FuxQeoETu QX+KgV8fMCmuRzRz9OMGlOmjvwyreVrKRfcOwqvK1hr73zfwcdBv3vkxYeEDByPP qND5dt9AuLZYShSN3Z5yi95fdRn5f7BC1sbkEbbCQXyXlNNOzsIXdiTOxWyAB+NN gngOylNDlpSRoSo7TfU79qd9b7hx/3oFSHiiczzLWzWXLRAnXoQpyFvAc4exQz3I xjcsD9hPUrx0RL/nkcIlSUDe7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbFihGh 2Gd/FkPtt1ca8zLWEQ3fMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJad8lptXjbTEx4LKFPm78HXqNIFQ3scGkSRMVYeJP3ffs61jXJR+DTL69ml XaPabAdFY6smqtEME4JSg76KTQxZFCiHXOmON06pwfgP7TdkGHR9EXpVakTLHt8L WpcnU8kllFuqgg1NYXyo2QxYUXCrUVJc+cbyo/7thub6yuTQAE9mIMaZv/3jjD9+ zyguXDQ6vEsbqwAciSLJ4jtvbqgrjwbIo56pvop6nTj1NOODkCJliR93tHML65it yaK96lk/cPd9jeKk/+7iRQiqD2e/MWYoY9Sf/Ev1LRaZL7XgXpjF1t68+OJG6cgo p23x3YH3tUPRDfkTE2OUu0PZ5A== -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:06 2026 by rpki-client