$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: EEJm6cEWCyTsY4O5/31PZQ4qy0O2IXy2BkedGYcZgek= Subject key identifier: 09:18:34:BC:BE:22:39:E1:14:13:9E:FF:F4:44:95:0E:87:83:6D:1A Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1DF3 Signing time: Sat 04 Apr 2026 16:01:15 +0000 Manifest this update: Sat 04 Apr 2026 16:01:15 +0000 Manifest next update: Sat 11 Apr 2026 16:01:15 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: up1XYLNcSDiLKORhqqh3nHqc5y583odKuUgz34wBa6A=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: 3geyNyHlLt4m67I8XY+XLIc0Dfd7U5LMWFn+gd8QVdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7679 (0x1dff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: Apr 4 16:01:15 2026 GMT Not After : Apr 11 16:01:15 2026 GMT Subject: CN=69d135cb-c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:8f:56:c5:32:6a:84:e5:da:23:4d:84:be: 93:d8:6b:1f:3b:f4:67:11:f4:06:8a:13:9d:81:25: d6:dc:ae:80:af:b6:2e:33:51:e2:71:df:a4:b3:d3: 4c:4d:c4:84:3b:66:8e:b2:c9:fc:65:61:26:ab:18: a6:fe:ea:44:8d:77:5f:f7:6c:5f:3c:89:8c:e8:40: 9e:97:ea:1d:b0:2a:ae:d2:7e:4b:35:36:30:66:78: e5:9c:38:0b:da:12:7c:96:61:c7:4d:34:2a:f7:84: d3:ba:0f:e7:ac:e0:f8:d9:34:c1:45:e3:a3:a1:3a: 04:de:3b:8d:2d:46:21:a8:6c:dc:fa:8b:56:1e:f6: 52:63:17:04:0a:04:54:e0:f8:97:34:04:b7:9e:e9: bb:46:4f:d2:bb:ce:d1:b5:40:14:b4:7b:57:d4:b9: 5f:6d:43:58:31:1c:84:25:74:2b:6a:fd:b2:a6:40: e5:c3:7f:9d:f1:9f:e4:f0:58:9b:80:b7:c1:86:4e: 0f:f9:69:c6:3c:f0:1b:36:d4:4f:ae:bb:ec:c0:ec: c3:0b:b8:25:4e:8e:f0:c2:eb:af:bb:46:23:e7:0e: a2:85:0b:bd:33:03:9e:fd:ea:4f:8a:1e:e9:18:31: 9f:a2:cd:03:bc:92:11:81:06:b5:60:30:fc:aa:09: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:34:BC:BE:22:39:E1:14:13:9E:FF:F4:44:95:0E:87:83:6D:1A X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:20:a0:ed:0b:cf:bb:ae:d1:29:f6:c9:20:1e:04:80:2b: 08:2a:ef:2b:be:0b:61:b3:90:b3:f7:96:2f:ad:e3:66:b9:82: d1:f5:49:91:71:70:0e:30:6e:ce:29:aa:95:5d:b6:f1:09:6d: 98:55:63:7e:50:d2:ed:fa:d7:6d:9e:4b:96:1b:91:9d:77:be: 8c:77:ef:d2:aa:21:93:ae:5b:cc:c8:3d:ac:e1:ca:33:a9:6e: 41:ef:f8:ec:4c:56:56:3e:13:bd:f6:6d:75:cb:28:a8:7d:2b: 7c:8e:c2:bd:f0:54:06:3e:91:cd:19:6c:f9:cd:bb:89:30:11: 7f:2f:9c:be:a9:36:96:12:2c:ee:99:62:7f:28:99:8f:fd:ab: 61:44:b2:1d:cf:df:df:a3:13:7b:90:87:04:f8:0a:d8:ec:66: 02:d2:2a:9b:e6:47:f6:22:a9:4b:ec:87:7f:c7:d2:40:eb:f1: 70:30:ad:0b:06:e3:1d:f1:69:19:8d:26:57:50:24:9e:5d:e5: 17:ce:9f:1f:a8:ff:dc:53:13:26:e6:a8:47:a5:23:36:07:4b: 28:82:ca:88:03:91:29:44:f1:b4:76:b1:d2:0f:60:b3:0d:8e: e6:6e:18:28:ea:f6:cb:1c:c3:ae:80:3d:82:d6:b5:7f:9a:d0: 05:ea:43:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjYwNDA0MTYwMTE1WhcNMjYwNDExMTYwMTE1WjAYMRYwFAYD VQQDEw02OWQxMzVjYi1jMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiaPVsUyaoTl2iNNhL6T2GsfO/RnEfQGihOdgSXW3K6Ar7YuM1Hicd+ks9NM TcSEO2aOssn8ZWEmqxim/upEjXdf92xfPImM6ECel+odsCqu0n5LNTYwZnjlnDgL 2hJ8lmHHTTQq94TTug/nrOD42TTBReOjoToE3juNLUYhqGzc+otWHvZSYxcECgRU 4PiXNAS3num7Rk/Su87RtUAUtHtX1LlfbUNYMRyEJXQrav2ypkDlw3+d8Z/k8Fib gLfBhk4P+WnGPPAbNtRPrrvswOzDC7glTo7wwuuvu0Yj5w6ihQu9MwOe/epPih7p GDGfos0DvJIRgQa1YDD8qgkugwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkYNLy+ IjnhFBOe//RElQ6Hg20aMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/YgoO0Lz7uu0Sn2ySAeBIArCCrvK74LYbOQs/eWL63jZrmC0fVJkXFwDjBu zimqlV228QltmFVjflDS7frXbZ5LlhuRnXe+jHfv0qohk65bzMg9rOHKM6luQe/4 7ExWVj4TvfZtdcsoqH0rfI7CvfBUBj6RzRls+c27iTARfy+cvqk2lhIs7plifyiZ j/2rYUSyHc/f36MTe5CHBPgK2OxmAtIqm+ZH9iKpS+yHf8fSQOvxcDCtCwbjHfFp GY0mV1Aknl3lF86fH6j/3FMTJuaoR6UjNgdLKILKiAORKUTxtHax0g9gsw2O5m4Y KOr2yxzDroA9gta1f5rQBepDTQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:03 2026 by rpki-client