$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: MC/SPaRIP5aOH4LX3h6qg3coWDr+zSzPkF/vGrUwr00= Subject key identifier: 65:64:3E:D1:7E:DE:1E:5C:8C:9B:0A:A6:1A:B4:3B:29:62:84:5C:A1 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 01EB Signing time: Sun 05 Apr 2026 02:58:04 +0000 Manifest this update: Sun 05 Apr 2026 02:58:04 +0000 Manifest next update: Sun 12 Apr 2026 02:58:04 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: oycGUAla8W/+uqrD7YYFO/9Nomsl+yFUrJXtW7Mrtxc=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Apr 5 02:58:04 2026 GMT Not After : Apr 12 02:58:04 2026 GMT Subject: CN=69d1cfbc-9e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:ff:92:99:ff:04:87:62:9e:d6:bb:1f:c0: b9:54:a3:f0:97:b4:db:1f:26:84:12:21:b2:19:3b: 9a:9a:28:b7:d8:15:86:c5:2a:23:1a:46:f2:1d:dc: 64:39:85:d1:aa:2f:c6:5c:45:3a:67:84:d8:b6:18: 3b:62:c2:a8:7d:2f:2c:20:19:3c:d0:fa:07:1c:c2: 44:8b:54:9c:45:4f:d0:96:45:b5:ae:ca:60:90:25: 2f:d8:6b:10:33:22:76:61:04:aa:5c:7d:4b:4e:9f: 64:f2:93:1a:78:fc:c1:9a:5b:72:35:c4:ec:0f:b7: ae:d2:9b:f9:97:d0:2f:74:8a:5e:63:e5:c9:12:ae: 3e:2d:2d:dc:95:33:18:82:c9:b3:2e:ef:33:b8:ed: d7:8b:7a:53:2c:1e:4c:b4:52:ba:e4:0e:65:fe:dc: 82:71:0e:22:c5:dd:72:98:53:9e:fd:92:b7:61:26: 9d:92:1a:3f:36:1a:b0:a8:1b:8c:a9:bc:e1:ed:1c: af:9a:97:31:77:c1:a6:a5:91:ac:8d:27:5a:6f:dc: 02:06:0b:fb:62:d3:e9:6e:d6:8a:92:68:93:1c:90: 1d:6e:f3:90:e6:cb:77:79:d1:18:42:ce:cc:ea:0a: f0:ec:65:66:1e:b9:34:0b:5b:90:48:4f:dd:27:af: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:64:3E:D1:7E:DE:1E:5C:8C:9B:0A:A6:1A:B4:3B:29:62:84:5C:A1 X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:9c:27:e0:2a:33:74:e5:2d:d4:fa:66:c2:3c:4e:70:21:e2: 22:92:6a:7f:ef:24:f3:e8:ad:a3:0b:4e:8e:ac:ca:53:8b:14: 80:2a:07:ef:fd:e0:de:6c:e2:fd:f2:78:2e:94:6f:3e:ee:de: a0:7a:24:de:a1:c5:e0:05:05:8a:ea:a7:9a:51:ac:e8:6e:a6: 88:3f:4b:1c:fd:71:5e:0c:df:0d:3b:d2:f3:c5:17:b3:b7:24: 21:cf:4b:b7:a4:cf:28:d8:00:84:2a:47:80:63:3e:d2:ab:9c: b2:48:14:d9:2a:a2:1a:27:08:74:a9:5e:c5:63:95:2a:86:17: 21:b0:9f:32:13:22:23:9f:f6:ba:2b:78:a9:be:47:74:16:cd: 15:95:06:27:c0:f9:fc:a7:50:b8:d7:7c:09:27:1a:bf:5d:12: cf:a4:7b:1b:06:0c:21:e8:e0:69:70:de:3c:20:44:24:58:86: e3:9d:73:c0:28:d1:0c:f3:cc:a2:f8:2d:f7:04:61:ac:b2:fa: 66:b8:0a:46:68:31:18:f4:3d:39:5d:90:76:aa:7c:8e:49:67: b8:06:93:74:a3:97:32:2b:c6:bf:97:02:67:db:04:e4:08:d1: a0:d0:98:07:fe:e6:c1:01:32:53:17:4c:4e:10:d4:97:86:f0: 19:55:c2:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwNDA1MDI1ODA0WhcNMjYwNDEyMDI1ODA0WjAYMRYwFAYD VQQDEw02OWQxY2ZiYy05ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rD/kpn/BIdinta7H8C5VKPwl7TbHyaEEiGyGTuamii32BWGxSojGkbyHdxk OYXRqi/GXEU6Z4TYthg7YsKofS8sIBk80PoHHMJEi1ScRU/QlkW1rspgkCUv2GsQ MyJ2YQSqXH1LTp9k8pMaePzBmltyNcTsD7eu0pv5l9AvdIpeY+XJEq4+LS3clTMY gsmzLu8zuO3Xi3pTLB5MtFK65A5l/tyCcQ4ixd1ymFOe/ZK3YSadkho/NhqwqBuM qbzh7Ryvmpcxd8GmpZGsjSdab9wCBgv7YtPpbtaKkmiTHJAdbvOQ5st3edEYQs7M 6grw7GVmHrk0C1uQSE/dJ699AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVkPtF+ 3h5cjJsKphq0OylihFyhMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpwn4CozdOUt1PpmwjxOcCHiIpJqf+8k8+itowtOjqzKU4sUgCoH7/3g3mzi /fJ4LpRvPu7eoHok3qHF4AUFiuqnmlGs6G6miD9LHP1xXgzfDTvS88UXs7ckIc9L t6TPKNgAhCpHgGM+0qucskgU2SqiGicIdKlexWOVKoYXIbCfMhMiI5/2uit4qb5H dBbNFZUGJ8D5/KdQuNd8CScav10Sz6R7GwYMIejgaXDePCBEJFiG451zwCjRDPPM ovgt9wRhrLL6ZrgKRmgxGPQ9OV2Qdqp8jklnuAaTdKOXMivGv5cCZ9sE5AjRoNCY B/7mwQEyUxdMThDUl4bwGVXCDA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:10 2026 by rpki-client