$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: dt6wKCGvQo6EqRDZQg4B7uKJEzAg8yjmuLCEiZU87a4= Subject key identifier: 0B:FF:B8:DE:6E:EB:89:55:3C:B1:C4:25:80:D6:E8:A3:5C:5B:D3:FC Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 3A Signing time: Tue 03 Mar 2026 08:15:26 +0000 Manifest this update: Tue 03 Mar 2026 08:15:25 +0000 Manifest next update: Tue 10 Mar 2026 08:15:25 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: DCJNO/ZiJeCcCA5VlT6ZbCHBBCtFT94PM6AAYGTHNSg=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) 3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Mar 3 08:15:25 2026 GMT Not After : Mar 10 08:15:25 2026 GMT Subject: CN=69a6989d-f879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:64:8e:13:57:40:e5:6b:fb:22:6e:10:16: 10:f6:70:25:38:00:ab:e3:52:8e:1d:c4:35:1b:91: fa:5f:f8:7c:ae:df:eb:82:e5:ed:e2:f4:b9:26:e0: f3:db:a1:7b:35:41:db:62:49:a1:81:f2:4d:56:c0: 1e:2d:88:8f:9b:fb:1d:96:9c:0f:f5:43:12:d6:dc: 31:f2:67:73:fb:9e:4a:67:d4:8a:73:5e:3c:eb:a9: 0a:8b:68:20:f6:c5:20:c1:40:68:79:81:9d:59:a9: b6:34:cb:7f:f0:12:a1:11:5d:0d:b9:fa:42:e4:69: 6b:70:9d:b1:c9:88:80:71:2b:7f:34:af:ba:37:d6: 46:63:65:ad:8a:6d:c4:52:15:ce:39:e5:3d:8f:00: e0:b9:ef:97:1e:70:f4:53:22:95:fe:c9:4e:b1:b5: 72:24:b9:ab:66:80:dd:7c:5e:14:d1:59:ac:bd:cc: 35:60:39:af:3e:e5:39:d7:70:79:9c:22:ef:31:b7: 79:b4:a3:44:0b:1f:3f:1c:f8:c2:df:6e:90:41:d9: 46:2d:1e:dd:ec:c7:9c:47:34:af:b3:12:9b:c6:67: 6a:05:ba:46:5f:10:2d:34:bd:e1:aa:d2:41:21:b6: f1:45:d4:48:d3:d4:e7:57:ca:29:e3:98:7f:2c:68: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FF:B8:DE:6E:EB:89:55:3C:B1:C4:25:80:D6:E8:A3:5C:5B:D3:FC X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:2b:1f:66:0c:8d:0c:a9:c7:cd:5f:1d:fe:e1:b7:4b:ea:1b: e1:ad:00:ff:c2:b7:c0:b0:63:c8:74:d7:4c:5d:42:2e:00:d4: 6e:70:5d:37:8c:d4:22:0f:0c:7a:c3:af:a5:3b:db:83:72:d8: 53:ca:54:59:6f:8b:7a:c6:b4:98:9d:03:c0:29:b9:ee:dd:de: 5b:3d:6d:5f:12:ee:86:e0:3e:2b:b0:2a:35:42:b7:09:89:aa: 49:9c:1a:20:68:4b:a3:9c:0a:1d:63:df:87:9b:ef:e5:73:a6: e2:db:e5:ee:e0:a5:bf:0f:4a:12:91:a2:09:f6:8d:f9:21:a3: 57:52:44:d5:22:8e:82:bc:c1:26:91:9f:3f:04:de:a1:e9:8d: fb:c6:3e:bd:a4:37:82:56:b6:34:d2:be:f9:00:4e:c8:80:58: 83:f5:ba:40:4c:91:b7:cf:b1:d7:1d:1e:12:6a:46:06:dd:6c: a2:d8:ce:c4:91:0d:c8:ad:16:0c:c3:90:fc:77:90:91:41:67: 09:9e:e6:9b:6d:91:08:ae:5d:c2:b7:ea:d2:21:48:c6:f7:bd: 95:8f:88:6e:e8:c1:15:ac:31:9a:42:74:07:5a:16:df:97:32: ea:c6:ea:d3:64:b6:2b:14:50:f7:c2:52:fe:da:4d:b4:c6:d6: 73:63:a6:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjAzMDMwODE1MjVaFw0yNjAzMTAwODE1MjVaMBgxFjAUBgNV BAMTDTY5YTY5ODlkLWY4NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh/GSOE1dA5Wv7Im4QFhD2cCU4AKvjUo4dxDUbkfpf+Hyu3+uC5e3i9Lkm4PPb oXs1QdtiSaGB8k1WwB4tiI+b+x2WnA/1QxLW3DHyZ3P7nkpn1IpzXjzrqQqLaCD2 xSDBQGh5gZ1ZqbY0y3/wEqERXQ25+kLkaWtwnbHJiIBxK380r7o31kZjZa2KbcRS Fc455T2PAOC575cecPRTIpX+yU6xtXIkuatmgN18XhTRWay9zDVgOa8+5TnXcHmc Iu8xt3m0o0QLHz8c+MLfbpBB2UYtHt3sx5xHNK+zEpvGZ2oFukZfEC00veGq0kEh tvFF1EjT1OdXyinjmH8saGPrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC/+43m7r iVU8scQlgNboo1xb0/wwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAKx9mDI0MqcfNXx3+4bdL6hvhrQD/wrfAsGPIdNdMXUIuANRucF03jNQiDwx6 w6+lO9uDcthTylRZb4t6xrSYnQPAKbnu3d5bPW1fEu6G4D4rsCo1QrcJiapJnBog aEujnAodY9+Hm+/lc6bi2+Xu4KW/D0oSkaIJ9o35IaNXUkTVIo6CvMEmkZ8/BN6h 6Y37xj69pDeCVrY00r75AE7IgFiD9bpATJG3z7HXHR4SakYG3Wyi2M7EkQ3IrRYM w5D8d5CRQWcJnuabbZEIrl3Ct+rSIUjG972Vj4hu6MEVrDGaQnQHWhbflzLqxurT ZLYrFFD3wlL+2k20xtZzY6an -----END CERTIFICATE-----Generated at Wed Mar 4 14:49:45 2026 by rpki-client