$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft File: ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft (raw, json) Hash identifier: UVnMJYKoxmBqZJChF9nX1STnS5g84wqubY8g4wjpbps= Subject key identifier: E0:BC:AC:76:14:11:F4:B3:87:D3:C2:B9:E1:90:F3:73:44:B6:4C:58 Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77 Certificate issuer: /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft Manifest number: 27 Signing time: Sun 05 Apr 2026 08:13:48 +0000 Manifest this update: Sun 05 Apr 2026 08:13:48 +0000 Manifest next update: Sun 12 Apr 2026 08:13:48 +0000 Files and hashes: 1: ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl (hash: KGXe4NROHRWNS2zX8aucbZE1jihEzvpC6n2zvN8lnIo=) 2: FFB68BF6067311F19CC2DF5A3C3D8C67.roa (hash: k9kaJXO8PQNyQBahywqQxP62KA454/soqOWb5claBqg=) 3: FF37A9C6067311F19CC2DF5A3C3D8C67.roa (hash: L00fkvDAp1HW2g8z2VX9l/pSUD1IBVKXFZoC6l822Do=) 4: 6BBEB632135F11F18A7710FA2D3D8C67.roa (hash: 6EX3EMDbsuc9zc5WzcOw4eX2IMHRRIrcRojW8W0oknY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277 Validity Not Before: Apr 5 08:13:48 2026 GMT Not After : Apr 12 08:13:48 2026 GMT Subject: CN=69d219bc-b146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:22:5b:35:61:33:d8:a7:65:d2:68:35:b9: 01:ae:7d:f0:86:ac:0a:14:4a:b7:02:9c:d1:a3:6f: f8:7c:d9:07:1d:99:31:fa:84:a6:26:0b:91:2e:39: 77:67:d3:1e:cf:50:22:dd:0e:e7:f9:ac:1d:80:ee: 30:2a:fb:0e:2b:4c:92:8e:df:93:88:5f:c8:80:ae: a3:a6:26:89:82:5c:6d:5f:a6:b8:8b:04:89:80:a9: 9e:a5:f1:69:4f:e8:9b:29:9f:c3:5f:f0:3c:a8:0e: cc:ea:24:5f:d0:0a:96:0b:1d:6c:47:77:59:b2:ae: c0:78:b9:e6:1a:27:89:99:bb:b3:a5:0d:6b:a8:f3: 95:9f:5c:61:bd:3b:82:de:6b:a8:50:b7:f3:78:85: 2c:ec:64:7a:94:02:90:cb:88:e0:d0:07:3b:ee:f7: 12:c0:30:63:d0:53:64:64:42:3a:a4:27:a5:56:5a: 16:51:4c:ce:bf:0f:06:24:4d:a0:b8:42:03:ea:60: c1:4e:6a:9c:aa:0d:69:2f:18:e2:1c:d5:ba:bd:24: ed:8d:44:2d:08:dc:ed:d4:32:63:9c:7c:7a:78:c6: 03:1a:84:50:ca:64:24:32:20:7a:58:7d:77:98:18: f3:db:b8:6e:ad:f0:18:a0:dc:c0:7c:ea:ae:c3:b7: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:AC:76:14:11:F4:B3:87:D3:C2:B9:E1:90:F3:73:44:B6:4C:58 X509v3 Authority Key Identifier: keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c5:71:2d:ba:aa:f4:3f:db:a9:b1:ec:e4:c3:43:3e:1f:98: 3d:c9:50:99:bf:bc:34:79:80:e9:5a:53:44:63:2d:e2:1d:94: 1c:55:c4:37:64:e6:b6:7f:ad:2a:62:7e:3d:b6:3d:77:88:3f: 21:05:b6:6a:4d:3f:51:6b:1f:44:aa:d4:a6:38:2a:8c:ed:69: 11:7e:5a:e6:39:e8:2e:1d:76:6d:d5:c8:57:a8:74:b9:6f:90: 1f:0a:21:d9:75:49:80:81:d5:0e:a8:02:42:08:3e:72:97:08: d6:cd:51:2d:f3:a4:5b:30:2b:4d:55:03:5c:7b:b5:f5:09:6d: 6c:97:41:70:99:fe:8e:9e:e0:0d:bd:d9:81:d3:8a:01:e6:ef: b5:30:d8:34:3b:e2:79:0b:49:65:58:03:4e:4c:06:63:fb:70: 44:b4:5e:a4:d5:f9:07:ef:bf:a9:d0:93:ec:98:60:e0:0f:bb: 55:3d:a1:a5:c8:aa:82:84:61:87:3b:9a:ff:74:e0:03:59:98: 57:9f:35:ef:40:55:7d:4b:d2:3f:c7:17:b4:ab:30:23:0c:22: 00:32:29:98:e3:ce:2d:0f:9d:a1:35:f1:92:32:9a:c2:f1:ee: f0:d3:f1:be:fa:41:a9:e5:cc:24:26:68:a9:0d:e8:89:94:9d: ef:fe:0e:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTczODExMC8GA1UEBRMoNjY2NTRFMDEyMDM5MzI2RTEzRDNDRDlFRjU4REE5RUYw Nzc3MjI3NzAeFw0yNjA0MDUwODEzNDhaFw0yNjA0MTIwODEzNDhaMBgxFjAUBgNV BAMTDTY5ZDIxOWJjLWIxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGASJbNWEz2Kdl0mg1uQGuffCGrAoUSrcCnNGjb/h82QcdmTH6hKYmC5EuOXdn 0x7PUCLdDuf5rB2A7jAq+w4rTJKO35OIX8iArqOmJomCXG1fpriLBImAqZ6l8WlP 6Jspn8Nf8DyoDszqJF/QCpYLHWxHd1myrsB4ueYaJ4mZu7OlDWuo85WfXGG9O4Le a6hQt/N4hSzsZHqUApDLiODQBzvu9xLAMGPQU2RkQjqkJ6VWWhZRTM6/DwYkTaC4 QgPqYMFOapyqDWkvGOIc1bq9JO2NRC0I3O3UMmOcfHp4xgMahFDKZCQyIHpYfXeY GPPbuG6t8Big3MB86q7DtwPTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4LysdhQR 9LOH08K54ZDzc0S2TFgwHwYDVR0jBBgwFoAUZmVOASA5Mm4T082e9Y2p7wd3Incw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzM4Lzk4Q0MzN0NFMDY3 MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00VDA4MmU5WTJwN3dkM0lu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm1WT0FTQTVNbTRUMDgyZTlZMnA3d2QzSW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzM4Lzk4Q0MzN0NFMDY3MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00 VDA4MmU5WTJwN3dkM0luYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOxXEtuqr0P9upsezkw0M+H5g9yVCZv7w0eYDpWlNEYy3iHZQcVcQ3ZOa2f60q Yn49tj13iD8hBbZqTT9Rax9EqtSmOCqM7WkRflrmOeguHXZt1chXqHS5b5AfCiHZ dUmAgdUOqAJCCD5ylwjWzVEt86RbMCtNVQNce7X1CW1sl0Fwmf6OnuANvdmB04oB 5u+1MNg0O+J5C0llWANOTAZj+3BEtF6k1fkH77+p0JPsmGDgD7tVPaGlyKqChGGH O5r/dOADWZhXnzXvQFV9S9I/xxe0qzAjDCIAMimY484tD52hNfGSMprC8e7w0/G+ +kGp5cwkJmipDeiJlJ3v/g6A -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:48 2026 by rpki-client