$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: hdMHwqzJijxlTGVVXLJ7Xd2T1/zWQI8/6TDJZFKdmXI= Subject key identifier: A0:52:B9:37:9C:3C:CC:28:72:C0:14:19:54:C3:F0:70:A5:BF:B8:28 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 0254 Signing time: Fri 27 Mar 2026 01:52:58 +0000 Manifest this update: Fri 27 Mar 2026 01:52:58 +0000 Manifest next update: Fri 03 Apr 2026 01:52:58 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: 4jCA1sCFQHGKYphmCidZ0DMXAW3s+iCz2D3XKnxIhQI=) 2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) 3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Mar 27 01:52:58 2026 GMT Not After : Apr 3 01:52:58 2026 GMT Subject: CN=69c5e2fa-1469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8f:21:dc:25:5c:04:57:31:93:a4:ae:65:7f: fd:6b:b7:57:e1:d7:37:31:43:78:49:83:13:a2:d7: 89:b0:29:78:5e:61:c2:e1:5a:93:54:fb:b9:1d:1f: 2b:41:9a:12:5d:5e:6c:77:66:c6:30:89:93:5a:9d: 79:c8:31:f9:eb:89:7b:6e:5c:02:e7:e5:9a:00:15: 80:82:44:00:aa:36:2d:17:83:64:2a:55:8b:c7:52: 93:f2:8c:a0:f8:9d:83:b3:3d:95:7e:68:2c:91:81: 2c:2f:37:df:20:40:e8:ed:5b:85:93:50:ac:94:8a: 45:1a:75:81:34:f3:16:b9:b8:7c:d8:21:a4:f4:d0: ab:a0:86:db:ac:c9:9c:5f:05:df:1f:24:c0:87:a8: 09:97:12:74:18:c0:79:e9:98:79:e2:fd:38:12:d0: 2c:c6:60:8a:cb:db:9e:2c:d3:ac:f3:6f:ce:ea:03: d8:40:84:9d:1d:7c:6a:47:a3:b4:40:2d:9b:87:09: 79:1a:55:2e:6e:61:41:18:a6:80:2a:a5:11:5f:aa: dc:30:3e:7a:eb:db:18:77:96:38:46:7a:5b:36:ea: 2c:3a:32:cb:e9:aa:2a:c2:d8:f7:c5:6f:91:0d:17: 50:63:90:1f:0f:35:73:ad:6a:06:b9:53:08:ba:7c: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:52:B9:37:9C:3C:CC:28:72:C0:14:19:54:C3:F0:70:A5:BF:B8:28 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c6:4e:d6:23:d2:55:8d:4e:5b:43:c4:47:42:41:a5:f2:ee: 3e:97:ca:f8:e9:4d:d9:52:16:29:5d:78:3b:f3:72:ad:ba:70: 44:a4:24:eb:00:01:6b:77:d2:62:6b:c6:4f:69:78:10:46:a2: b4:59:31:b7:7f:72:9c:25:c2:aa:53:e5:05:c9:73:08:4c:fc: 01:8c:d3:47:4a:40:21:0c:4f:7f:af:42:95:c0:cd:91:c3:9c: 79:bf:bc:84:f2:8c:51:68:41:2d:43:dc:e0:ae:a9:da:2f:4f: 0c:11:a3:77:61:eb:f9:61:be:6c:af:f4:49:c2:77:26:bb:c2: 0f:4e:97:f8:77:82:2a:47:0b:69:40:8f:90:d3:ac:7e:a3:f1: d0:de:ac:d7:0d:5a:e1:8a:5d:69:56:79:13:e6:6f:84:22:f1: ed:5e:64:9f:52:a1:a2:e1:be:33:f8:2e:0a:73:a9:9e:3e:ae: 80:aa:b5:da:a5:df:7d:bc:09:0c:c3:ce:ed:e9:c1:5c:8a:c1: db:6b:6d:e6:3a:7d:68:e7:7e:29:90:dc:04:18:fa:bd:8c:9d: 06:f5:4c:1d:84:bd:97:4a:c8:e9:e6:cb:8a:f1:18:f5:c4:aa: d1:0c:39:57:73:9c:04:54:1a:bd:43:02:66:c4:cc:81:0a:5b: 78:69:73:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwMzI3MDE1MjU4WhcNMjYwNDAzMDE1MjU4WjAYMRYwFAYD VQQDEw02OWM1ZTJmYS0xNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I8h3CVcBFcxk6SuZX/9a7dX4dc3MUN4SYMToteJsCl4XmHC4VqTVPu5HR8r QZoSXV5sd2bGMImTWp15yDH564l7blwC5+WaABWAgkQAqjYtF4NkKlWLx1KT8oyg +J2Dsz2VfmgskYEsLzffIEDo7VuFk1CslIpFGnWBNPMWubh82CGk9NCroIbbrMmc XwXfHyTAh6gJlxJ0GMB56Zh54v04EtAsxmCKy9ueLNOs82/O6gPYQISdHXxqR6O0 QC2bhwl5GlUubmFBGKaAKqURX6rcMD5669sYd5Y4RnpbNuosOjLL6aoqwtj3xW+R DRdQY5AfDzVzrWoGuVMIunz/ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBSuTec PMwocsAUGVTD8HClv7goMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMZO1iPSVY1OW0PER0JBpfLuPpfK+OlN2VIWKV14O/NyrbpwRKQk6wABa3fS YmvGT2l4EEaitFkxt39ynCXCqlPlBclzCEz8AYzTR0pAIQxPf69ClcDNkcOceb+8 hPKMUWhBLUPc4K6p2i9PDBGjd2Hr+WG+bK/0ScJ3JrvCD06X+HeCKkcLaUCPkNOs fqPx0N6s1w1a4YpdaVZ5E+ZvhCLx7V5kn1KhouG+M/guCnOpnj6ugKq12qXffbwJ DMPO7enBXIrB22tt5jp9aOd+KZDcBBj6vYydBvVMHYS9l0rI6ebLivEY9cSq0Qw5 V3OcBFQavUMCZsTMgQpbeGlzaQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:43:35 2026 by rpki-client