$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: LC5JSTr+Lajn2hD0ha8H62q5Ynu2R0aT+nw88lVqjj0= Subject key identifier: 6B:ED:70:00:FA:B1:B0:35:EB:8C:76:8B:ED:CE:DB:49:48:32:66:BC Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 08FE Signing time: Wed 18 Mar 2026 20:00:43 +0000 Manifest this update: Wed 18 Mar 2026 20:00:42 +0000 Manifest next update: Wed 25 Mar 2026 20:00:42 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: k429Eq2+swI+hZlGOSWrkfgAB0I/za3apcMj2cr0pV0=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: okmXmHYulLyxDZHeOTwAQb95eohRY4pGXYv8eeAWmU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Mar 18 20:00:42 2026 GMT Not After : Mar 25 20:00:42 2026 GMT Subject: CN=69bb046b-b80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:4c:30:4b:4f:dc:db:7b:c9:86:ae:95:c6: 54:1c:2e:34:7f:22:39:5e:40:ef:55:4b:be:69:d2: ce:0b:16:f4:9f:8b:0d:89:ad:23:23:f5:89:b0:b4: 08:8b:65:7f:7a:56:70:7a:df:f8:bb:44:13:e9:c8: d9:cc:6e:73:b5:c7:d5:90:07:26:2d:f5:49:f0:c2: 25:5e:10:3a:b1:80:39:d7:76:2a:12:44:1b:8f:20: e4:18:01:1d:fe:39:86:fb:ea:c6:bb:c4:c5:a8:3f: f0:c8:5f:67:be:eb:76:dd:61:66:b3:d4:64:80:a0: e5:33:d7:c1:c9:91:7e:57:6c:ce:26:a6:a3:fe:7d: ac:c9:65:bf:53:24:f9:da:c5:7d:aa:3a:81:11:e1: 15:07:25:11:05:78:41:86:1e:f9:f5:9b:1b:dc:34: 9a:4b:d0:51:5c:26:bf:e6:23:22:ef:2b:b3:5c:43: 4c:da:99:ff:1b:84:b7:67:fb:bc:07:4f:77:15:b6: 70:0f:22:de:73:3d:51:29:14:c0:9a:17:c4:c4:8c: f6:71:10:8d:bb:18:d5:e0:26:33:7e:3a:37:d6:fd: 03:34:c6:63:6b:bc:87:b0:d7:3c:58:b4:09:e6:9c: 3c:48:84:b2:d5:8b:c0:46:29:08:01:f2:9e:8e:56: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:70:00:FA:B1:B0:35:EB:8C:76:8B:ED:CE:DB:49:48:32:66:BC X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:26:14:e1:0b:8c:c6:af:e8:d8:11:71:91:07:bb:22:b9:96: 4d:9d:1f:04:d9:a2:1f:0c:b7:00:9d:44:68:59:8f:a9:e4:07: 78:67:4f:70:82:77:ce:1d:fc:79:31:70:96:23:9a:4b:90:c0: 9e:e5:c4:2c:23:fd:61:ea:d0:26:d8:e4:2b:a4:d1:fa:9c:b4: 61:37:2d:3e:01:66:9a:ff:5d:ad:fd:ad:93:41:d3:c6:c9:cb: 1b:06:6f:ed:62:de:be:60:e7:6b:b1:f2:40:ce:34:95:b0:18: fd:47:82:82:3a:7d:21:2c:29:b2:eb:cf:a2:85:cd:e9:71:40: b2:a7:c4:d7:31:cb:1a:f0:1b:df:01:c8:83:35:55:13:d9:33: 94:bc:c0:c0:9c:ff:d4:ef:26:a9:28:75:19:4c:97:8b:3d:e1: 29:6f:2f:89:80:4b:1c:ec:0e:46:cd:08:e1:e0:28:34:6f:67: 2d:51:19:34:16:f7:c0:29:8c:ec:83:c9:2c:f6:1b:b6:19:bb: f1:c5:c3:6f:8f:c2:cf:75:4d:5b:7a:f2:c4:cf:d3:45:ec:c4: 6b:47:c9:e1:7f:d3:e0:0c:32:3f:0e:cf:d3:0f:e5:5c:02:af: ac:7c:c4:9d:97:0b:31:f7:f5:dc:6e:94:9e:45:44:19:e7:23: f0:b9:b8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwMzE4MjAwMDQyWhcNMjYwMzI1MjAwMDQyWjAYMRYwFAYD VQQDEw02OWJiMDQ2Yi1iODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m5MMEtP3Nt7yYaulcZUHC40fyI5XkDvVUu+adLOCxb0n4sNia0jI/WJsLQI i2V/elZwet/4u0QT6cjZzG5ztcfVkAcmLfVJ8MIlXhA6sYA513YqEkQbjyDkGAEd /jmG++rGu8TFqD/wyF9nvut23WFms9RkgKDlM9fByZF+V2zOJqaj/n2syWW/UyT5 2sV9qjqBEeEVByURBXhBhh759Zsb3DSaS9BRXCa/5iMi7yuzXENM2pn/G4S3Z/u8 B093FbZwDyLecz1RKRTAmhfExIz2cRCNuxjV4CYzfjo31v0DNMZja7yHsNc8WLQJ 5pw8SISy1YvARikIAfKejlZCuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvtcAD6 sbA164x2i+3O20lIMma8MB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmiYU4QuMxq/o2BFxkQe7IrmWTZ0fBNmiHwy3AJ1EaFmPqeQHeGdPcIJ3zh38 eTFwliOaS5DAnuXELCP9YerQJtjkK6TR+py0YTctPgFmmv9drf2tk0HTxsnLGwZv 7WLevmDna7HyQM40lbAY/UeCgjp9ISwpsuvPooXN6XFAsqfE1zHLGvAb3wHIgzVV E9kzlLzAwJz/1O8mqSh1GUyXiz3hKW8viYBLHOwORs0I4eAoNG9nLVEZNBb3wCmM 7IPJLPYbthm78cXDb4/Cz3VNW3ryxM/TRezEa0fJ4X/T4AwyPw7P0w/lXAKvrHzE nZcLMff13G6UnkVEGecj8Lm4pg== -----END CERTIFICATE-----Generated at Fri Mar 20 02:38:17 2026 by rpki-client