$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: 8dtxmaA7vvgDw3EBcvuH4yZK9qKlyEfMOQkmT0S9/0I= Subject key identifier: 74:62:CF:AA:A5:19:3D:36:DD:B0:4C:FF:C5:27:0C:9E:A2:74:01:67 Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 018D Signing time: Sun 29 Mar 2026 04:07:49 +0000 Manifest this update: Sun 29 Mar 2026 04:07:48 +0000 Manifest next update: Sun 05 Apr 2026 04:07:48 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: GQQmUyaxqf9bz+bTWGMCVJHufeVkhmlEzlfKevYH2D8=) 2: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: vuF5k1NsD6Od4bFMuffyNgPZt3phl7DtSt9MwFSK4mg=) 3: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: OT0428JvC1+upD3r1Q6wreYkovP29Wg2j9MuCZqS4DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 04:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: Mar 29 04:07:48 2026 GMT Not After : Apr 5 04:07:48 2026 GMT Subject: CN=69c8a595-75a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:cb:b3:85:c7:9f:62:b0:fe:8c:e9:45:e2: 39:d9:69:e8:c4:d6:84:2f:76:d3:fd:fe:7b:63:b5: ca:fe:8e:51:55:c0:cd:fb:18:9d:80:1f:95:03:09: a1:5f:f5:9e:fd:2c:07:38:32:d9:6a:92:aa:4a:f5: cf:3a:54:cc:a3:75:07:aa:13:9b:08:63:df:8b:d2: e8:37:7e:43:3d:3d:6e:1a:10:f6:a4:0f:11:c5:b9: e6:d5:07:ad:55:24:9c:03:ef:76:42:fe:cc:c0:46: fc:32:ca:25:83:ca:aa:0c:14:c7:4c:33:78:51:3f: b6:ad:92:c9:f2:46:1c:43:d1:4d:88:4a:83:e6:28: ea:9c:5f:95:34:38:9a:50:70:03:8e:24:0f:29:c0: f1:26:51:3e:fd:7e:3d:cc:a4:a3:96:a5:97:db:d3: 1e:64:25:30:15:c7:bd:77:ef:21:65:99:1c:1a:d1: b9:42:3b:68:11:ee:1d:44:03:42:0c:30:bb:c6:66: 8e:7a:82:91:11:17:e0:6e:c9:5a:6d:e8:24:04:9f: 4e:6b:79:8d:d2:75:ff:a0:6a:09:fd:a5:a9:85:c4: 08:6b:62:62:fd:70:d2:f0:03:53:53:ca:c3:a4:1a: 7a:b8:11:ff:d1:d4:21:7a:74:c9:4d:65:d7:15:cf: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:62:CF:AA:A5:19:3D:36:DD:B0:4C:FF:C5:27:0C:9E:A2:74:01:67 X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:39:49:5e:3a:38:ca:cf:4c:5d:21:2a:bf:68:ce:8c:60:0d: fd:9e:23:cb:9f:2c:9e:b9:95:c6:ae:9c:31:55:ba:18:02:82: f7:4a:84:88:db:ae:b7:f7:4c:53:c9:be:7c:20:a5:ff:39:dc: 17:60:0c:35:d0:ec:aa:a4:f0:e5:4e:51:ea:cd:62:a4:6f:32: 57:a5:9f:3e:01:5d:1a:16:b9:7a:5a:d0:77:8c:76:71:48:52: b3:ce:90:68:b6:96:cd:d6:de:46:52:45:56:e1:ec:e4:05:14: 85:bc:00:f0:78:d8:eb:09:37:fd:32:9a:f5:bb:fb:c3:8d:40: 21:72:c1:62:c6:57:fe:f4:f5:e7:22:f8:4c:ce:04:7a:e2:97: 76:20:b0:1d:93:c2:0c:72:7f:e5:14:a1:0a:63:ad:d7:30:77: 87:47:3d:cd:6a:23:aa:4e:30:1c:a2:f8:14:5d:1d:d8:13:af: 9f:7a:4c:ff:06:8a:34:28:1e:2a:10:0c:a8:a8:87:3a:94:05: c5:35:9c:f4:4e:e5:ca:9f:2f:75:f8:2c:4a:87:bc:be:d7:83: da:66:fe:9f:72:c1:59:a4:b9:d4:98:0d:14:a2:86:f0:af:98: f4:7a:93:70:c7:00:bb:37:bc:ba:43:88:52:c0:b2:cf:6f:f6: 97:07:71:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjYwMzI5MDQwNzQ4WhcNMjYwNDA1MDQwNzQ4WjAYMRYwFAYD VQQDEw02OWM4YTU5NS03NWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmirLs4XHn2Kw/ozpReI52WnoxNaEL3bT/f57Y7XK/o5RVcDN+xidgB+VAwmh X/We/SwHODLZapKqSvXPOlTMo3UHqhObCGPfi9LoN35DPT1uGhD2pA8Rxbnm1Qet VSScA+92Qv7MwEb8Msolg8qqDBTHTDN4UT+2rZLJ8kYcQ9FNiEqD5ijqnF+VNDia UHADjiQPKcDxJlE+/X49zKSjlqWX29MeZCUwFce9d+8hZZkcGtG5QjtoEe4dRANC DDC7xmaOeoKRERfgbslabegkBJ9Oa3mN0nX/oGoJ/aWphcQIa2Ji/XDS8ANTU8rD pBp6uBH/0dQhenTJTWXXFc9liwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRiz6ql GT023bBM/8UnDJ6idAFnMB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmjlJXjo4ys9MXSEqv2jOjGAN/Z4jy58snrmVxq6cMVW6GAKC90qEiNuut/dM U8m+fCCl/zncF2AMNdDsqqTw5U5R6s1ipG8yV6WfPgFdGha5elrQd4x2cUhSs86Q aLaWzdbeRlJFVuHs5AUUhbwA8HjY6wk3/TKa9bv7w41AIXLBYsZX/vT15yL4TM4E euKXdiCwHZPCDHJ/5RShCmOt1zB3h0c9zWojqk4wHKL4FF0d2BOvn3pM/waKNCge KhAMqKiHOpQFxTWc9E7lyp8vdfgsSoe8vteD2mb+n3LBWaS51JgNFKKG8K+Y9HqT cMcAuze8ukOIUsCyz2/2lwdxcw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:49:14 2026 by rpki-client