$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: 2iV64/CURPRQKDv8+jN3K4Sujtnmsqpvdd3/SMrVMC8= Subject key identifier: B2:4D:9C:CF:1F:56:BB:FE:C0:A6:45:28:83:F9:9C:68:DC:A5:53:3E Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 54 Signing time: Fri 27 Mar 2026 07:42:18 +0000 Manifest this update: Fri 27 Mar 2026 07:42:17 +0000 Manifest next update: Fri 03 Apr 2026 07:42:17 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: z4bu+DA3WzVRSwnjyzzBUWeVJ+pT1qFmf6MigIVP0lw=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: cUM/YRlGCUalihANb69w5cZ0Y6p6DB5jdCl/LBiwJeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Mar 27 07:42:17 2026 GMT Not After : Apr 3 07:42:17 2026 GMT Subject: CN=69c634d9-ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:ca:61:86:89:8c:65:e1:2a:66:c7:b8:8a: 7d:cc:db:60:f8:f5:ae:c9:6e:cd:5d:6e:6a:79:8b: 7d:2b:fa:99:21:75:bd:a4:78:5a:e9:be:13:4b:bd: 8a:5a:51:bd:19:d1:10:fe:ca:4b:e5:bf:ad:19:99: cf:fb:4f:d3:cd:f7:7b:30:8c:d1:c9:4e:4f:56:bf: 41:ce:56:d2:2a:a2:d0:57:a5:77:03:4a:40:2d:a6: c6:af:0b:95:0e:0c:07:4e:86:af:bd:c6:0e:9e:57: e3:b2:9a:33:1a:bf:78:16:96:b3:dd:ed:5c:0c:e2: 59:1f:22:38:40:e5:09:99:f9:a2:b5:58:e2:5a:ea: fe:55:e1:39:98:93:08:2f:ea:6e:51:5f:a9:11:7b: 06:2f:2c:d4:be:71:1d:0c:a6:50:86:c4:f4:ad:eb: f9:c5:d4:59:f7:e0:6d:17:ce:8c:65:f3:17:01:1a: f6:9f:b6:9e:66:40:56:be:8c:7e:f5:cc:76:da:fa: 64:7a:fb:0f:20:a2:3a:76:d2:49:37:49:cb:2d:7c: ce:15:7c:ec:59:5c:6c:da:cd:9f:da:e5:60:ae:eb: 43:87:d6:24:3a:a8:3a:5d:49:1c:87:9a:df:a5:14: 7a:49:72:ce:0c:50:f7:55:cc:03:28:09:d4:6e:96: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4D:9C:CF:1F:56:BB:FE:C0:A6:45:28:83:F9:9C:68:DC:A5:53:3E X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:41:02:ae:8e:05:c7:77:78:0e:8b:7e:c2:50:70:f2:24:e9: 63:3c:97:c1:1d:54:1c:78:16:63:77:52:f8:9e:f1:0c:2e:7c: be:a4:ec:41:38:ee:5e:cc:16:30:a6:80:e6:46:20:ab:2b:e1: 39:55:9a:89:92:30:4c:17:b3:d7:f2:84:a1:b0:be:1a:36:f5: 71:60:09:44:c8:f3:e2:9a:55:84:f2:9d:43:df:0f:82:b4:52: a3:0e:ef:8d:a8:e9:6f:7a:80:50:b6:0e:58:31:29:7c:85:1e: 95:71:8e:62:df:57:4c:15:22:66:80:45:e9:63:02:f3:c4:3d: a2:23:27:bc:51:1d:d6:ee:c4:8d:e4:ae:f5:79:38:2b:0f:a6: 2b:dd:f0:e4:0d:a5:12:18:a0:35:c9:da:63:22:a9:50:25:0c: 2a:67:2b:36:26:f4:45:87:c1:d5:3e:a2:3b:87:b2:52:41:a5: 0f:af:65:cf:e2:68:aa:7d:a5:11:df:04:10:84:72:0f:75:f8: a5:51:8a:c9:ce:98:10:0e:c7:b8:cd:7a:97:05:60:59:0c:90: c4:14:66:94:57:8a:98:4c:8f:49:e5:27:21:35:69:94:b3:12: f1:ef:f5:6d:9d:f8:dd:14:4f:bd:e7:7d:d5:6f:9b:c5:c7:19: 75:7b:a9:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNjAzMjcwNzQyMTdaFw0yNjA0MDMwNzQyMTdaMBgxFjAUBgNV BAMTDTY5YzYzNGQ5LWVlNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSBMphhomMZeEqZse4in3M22D49a7Jbs1dbmp5i30r+pkhdb2keFrpvhNLvYpa Ub0Z0RD+ykvlv60Zmc/7T9PN93swjNHJTk9Wv0HOVtIqotBXpXcDSkAtpsavC5UO DAdOhq+9xg6eV+OymjMav3gWlrPd7VwM4lkfIjhA5QmZ+aK1WOJa6v5V4TmYkwgv 6m5RX6kRewYvLNS+cR0MplCGxPSt6/nF1Fn34G0Xzoxl8xcBGvaftp5mQFa+jH71 zHba+mR6+w8gojp20kk3ScstfM4VfOxZXGzazZ/a5WCu60OH1iQ6qDpdSRyHmt+l FHpJcs4MUPdVzAMoCdRulplxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsk2czx9W u/7ApkUog/mcaNylUz4wHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaQQKujgXHd3gOi37CUHDyJOljPJfBHVQceBZjd1L4nvEMLny+pOxBOO5ezBYw poDmRiCrK+E5VZqJkjBMF7PX8oShsL4aNvVxYAlEyPPimlWE8p1D3w+CtFKjDu+N qOlveoBQtg5YMSl8hR6VcY5i31dMFSJmgEXpYwLzxD2iIye8UR3W7sSN5K71eTgr D6Yr3fDkDaUSGKA1ydpjIqlQJQwqZys2JvRFh8HVPqI7h7JSQaUPr2XP4miqfaUR 3wQQhHIPdfilUYrJzpgQDse4zXqXBWBZDJDEFGaUV4qYTI9J5SchNWmUsxLx7/Vt nfjdFE+9533Vb5vFxxl1e6lT -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:45 2026 by rpki-client