$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: i8jNsegL2qy+ETW3nD8RvuZWrGl4uZM68k7cO9HLIs4= Subject key identifier: 11:A8:34:19:C1:3C:8E:DA:50:34:8D:31:39:33:C7:85:31:51:D0:45 Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0689 Signing time: Sat 28 Mar 2026 22:22:56 +0000 Manifest this update: Sat 28 Mar 2026 22:22:56 +0000 Manifest next update: Sat 04 Apr 2026 22:22:56 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: GHgTVzdoalNG4iM+uhaaPMboK+zNF34jgAqUKupp2PQ=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: QvOTyrpbe1VCHU2+KRZM8SSI4eGcfEaHjSGLe1IGI/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 22:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Mar 28 22:22:56 2026 GMT Not After : Apr 4 22:22:56 2026 GMT Subject: CN=69c854c0-006f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:a7:5d:78:1c:59:7a:40:52:55:53:9c:e3: 28:34:92:43:69:8c:73:d9:d8:19:9e:8e:76:3e:ad: c2:86:df:ef:7e:57:8a:57:eb:c9:60:1f:27:f8:e2: 9f:55:35:44:36:9e:a1:32:6a:52:dd:f4:77:1e:42: 7f:34:b8:0e:5e:f0:eb:07:a7:f0:df:3d:6b:ec:e5: 2c:27:4d:bb:9f:be:53:11:70:b9:5f:a7:ca:e8:0d: 35:7f:22:6a:5b:c8:0c:19:77:6d:80:55:b3:0e:0a: ed:c3:ba:b4:75:36:6f:97:7d:30:1d:a9:3a:6b:9c: 96:f7:36:40:a6:4d:89:91:48:4f:0e:bf:e8:bc:90: fd:18:de:ae:c0:60:5a:14:7d:97:20:98:67:78:1d: 63:09:5b:62:03:9f:98:fc:88:42:46:ef:6f:26:07: bc:63:5e:29:02:cd:a3:44:bf:f2:21:b0:2c:fe:f4: 55:f4:d0:30:03:26:b6:8f:a6:1a:e6:57:9e:8b:a5: 8a:dd:19:44:c4:e6:b5:bf:ed:03:51:90:45:45:fb: eb:85:09:50:37:dc:b4:f1:90:9d:a3:5e:c8:57:21: 64:38:f6:4c:41:72:d5:a5:49:6e:51:a4:99:dd:6c: 58:18:6e:4e:47:0d:cf:80:47:76:a8:ec:59:db:26: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:34:19:C1:3C:8E:DA:50:34:8D:31:39:33:C7:85:31:51:D0:45 X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8a:fe:ff:b1:e3:e7:23:6a:8f:2b:88:98:5b:d0:22:68:15: 05:4f:76:be:66:4b:57:ce:52:cb:22:9b:7d:bf:ca:cc:de:46: 57:5c:90:4a:f4:9a:d1:e9:b5:af:9c:ba:17:59:d3:89:d0:d0: 52:6e:aa:ab:ed:06:aa:4b:a5:d8:50:65:14:ba:30:5a:a5:24: 3b:ca:74:c9:3c:e3:77:a5:ee:4a:20:fc:04:df:c7:c4:2c:c2: a3:68:ac:34:e8:b9:58:5a:59:42:cf:18:ec:71:ee:19:71:d9: 22:d2:89:bc:21:2b:3e:de:fc:e7:43:f8:37:91:4c:91:f6:98: 1f:c3:42:c8:86:2b:2b:98:3f:07:8c:2e:75:83:67:28:91:4a: 6c:62:31:4d:25:be:e2:8b:8a:a8:51:69:b3:79:f3:99:c0:0e: bd:02:93:3e:69:67:fa:95:9c:d3:19:50:51:70:44:74:a5:91: 07:e2:3e:28:1a:91:fd:bb:b6:14:ec:68:4a:41:9a:ae:3b:90: 98:45:85:0b:2f:f3:a3:fe:3f:ef:a7:11:4b:b9:40:e7:d0:00: 60:38:42:6e:80:4c:fb:d1:36:15:46:cd:0b:56:3b:27:b8:68: c2:81:d8:54:bc:8d:60:e3:65:6f:f4:ff:ae:cf:a9:87:28:7a: 48:d8:04:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjYwMzI4MjIyMjU2WhcNMjYwNDA0MjIyMjU2WjAYMRYwFAYD VQQDEw02OWM4NTRjMC0wMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40inXXgcWXpAUlVTnOMoNJJDaYxz2dgZno52Pq3Cht/vfleKV+vJYB8n+OKf VTVENp6hMmpS3fR3HkJ/NLgOXvDrB6fw3z1r7OUsJ027n75TEXC5X6fK6A01fyJq W8gMGXdtgFWzDgrtw7q0dTZvl30wHak6a5yW9zZApk2JkUhPDr/ovJD9GN6uwGBa FH2XIJhneB1jCVtiA5+Y/IhCRu9vJge8Y14pAs2jRL/yIbAs/vRV9NAwAya2j6Ya 5leei6WK3RlExOa1v+0DUZBFRfvrhQlQN9y08ZCdo17IVyFkOPZMQXLVpUluUaSZ 3WxYGG5ORw3PgEd2qOxZ2yZnmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGoNBnB PI7aUDSNMTkzx4UxUdBFMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAior+/7Hj5yNqjyuImFvQImgVBU92vmZLV85SyyKbfb/KzN5GV1yQSvSa0em1 r5y6F1nTidDQUm6qq+0Gqkul2FBlFLowWqUkO8p0yTzjd6XuSiD8BN/HxCzCo2is NOi5WFpZQs8Y7HHuGXHZItKJvCErPt7850P4N5FMkfaYH8NCyIYrK5g/B4wudYNn KJFKbGIxTSW+4ouKqFFps3nzmcAOvQKTPmln+pWc0xlQUXBEdKWRB+I+KBqR/bu2 FOxoSkGarjuQmEWFCy/zo/4/76cRS7lA59AAYDhCboBM+9E2FUbNC1Y7J7howoHY VLyNYONlb/T/rs+phyh6SNgEVw== -----END CERTIFICATE-----Generated at Mon Mar 30 01:04:49 2026 by rpki-client