$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: +IANbJuyS5tJmCa3xaK5ZRBE+natUe4dkcC/WihZbYk= Subject key identifier: 02:26:AF:29:25:58:D5:B1:E8:F5:6D:24:3E:A8:9F:33:9F:15:89:A6 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1530 Signing time: Thu 12 Mar 2026 16:40:59 +0000 Manifest this update: Thu 12 Mar 2026 16:40:59 +0000 Manifest next update: Thu 19 Mar 2026 16:40:59 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: PbpW2oMhCKxS3q3roL48a8zDYsjUW7rST3Qnb22V1WI=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=) 4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5463 (0x1557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Mar 12 16:40:59 2026 GMT Not After : Mar 19 16:40:59 2026 GMT Subject: CN=69b2ec9b-4cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:de:3c:4e:3e:3b:0f:fb:23:69:c4:5b:8d: 31:90:82:b9:2e:97:95:75:fc:3b:d7:db:26:bf:53: b6:cc:65:23:90:6d:dd:31:67:77:62:22:1c:b5:55: 26:98:49:a2:4a:d8:7b:c6:8a:5b:74:ce:bd:0c:68: 0c:f8:26:b1:dd:e6:29:82:16:85:83:60:3f:76:d2: 5c:18:06:76:2e:ea:44:3e:75:6b:fd:4f:ba:7b:75: 8f:a1:02:77:b2:fc:91:41:1a:96:53:9a:e8:c9:4f: 19:a9:b6:75:bb:0c:d3:7e:71:9e:7e:d5:a8:04:e9: b0:93:e3:26:72:3b:89:a9:6e:a1:74:6a:21:1a:57: d8:49:f6:11:33:04:28:d1:48:41:85:60:c3:fd:ae: 6f:b9:2c:37:83:c0:5c:83:62:42:3b:c7:54:25:83: b9:b4:27:df:56:10:39:e5:c9:e2:b2:a2:53:8c:ef: a1:b3:87:4c:65:ef:55:26:29:fd:c8:37:47:2d:62: a0:18:25:f5:a4:24:4b:bc:0d:0b:a7:4b:40:a4:0b: f2:e5:4d:25:96:6f:7c:22:79:5d:eb:52:5b:1f:57: fb:a9:a2:63:b9:cd:dc:1c:d1:e4:df:96:9a:6a:c6: f6:43:85:85:82:72:17:c8:f9:1c:fb:0e:ea:5f:34: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:26:AF:29:25:58:D5:B1:E8:F5:6D:24:3E:A8:9F:33:9F:15:89:A6 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:00:fb:19:19:e8:46:6a:5e:6f:3d:9d:84:1e:9c:09:04:be: 6d:ef:c1:ae:e8:cb:d1:27:b6:92:23:c5:e3:ef:24:4e:59:77: fa:d6:1e:9d:ef:21:a6:bb:28:1b:f6:4d:9b:20:84:35:78:13: 22:fd:46:7c:af:73:c0:ca:51:34:1c:6d:34:aa:02:ba:0f:3b: 34:e5:0e:5b:36:8a:e4:7e:68:15:98:f4:c0:da:7d:9c:13:c8: 7d:4a:93:02:fe:12:96:92:66:2e:29:00:0f:fc:ef:05:a6:1b: b6:35:dd:36:15:37:64:b6:4b:11:67:c4:cc:47:26:72:9b:49: de:c4:63:e3:34:13:ff:a3:f9:bc:d2:e3:77:4e:13:72:a3:f8: 7f:63:92:10:a6:a5:02:24:37:aa:f6:06:2f:c1:0c:58:8d:48: 5e:30:df:43:e3:ed:c9:f9:62:5e:74:99:b0:5f:3f:cb:8f:9d: 5e:97:fe:e9:49:f3:55:94:0b:5f:fd:9d:e2:c8:e6:96:76:10: 33:1a:69:e4:e7:e1:86:6c:cc:60:a8:cc:e9:2e:f3:95:8e:31: b8:98:05:36:0b:48:b4:11:a8:5e:6c:db:11:f3:1e:6a:38:ab: ee:7c:47:62:d8:dc:10:34:93:c6:78:0d:75:c3:e3:1a:e3:9a: ea:61:e7:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYwMzEyMTY0MDU5WhcNMjYwMzE5MTY0MDU5WjAYMRYwFAYD VQQDEw02OWIyZWM5Yi00Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XnePE4+Ow/7I2nEW40xkIK5LpeVdfw719smv1O2zGUjkG3dMWd3YiIctVUm mEmiSth7xopbdM69DGgM+Cax3eYpghaFg2A/dtJcGAZ2LupEPnVr/U+6e3WPoQJ3 svyRQRqWU5royU8ZqbZ1uwzTfnGeftWoBOmwk+MmcjuJqW6hdGohGlfYSfYRMwQo 0UhBhWDD/a5vuSw3g8Bcg2JCO8dUJYO5tCffVhA55cnisqJTjO+hs4dMZe9VJin9 yDdHLWKgGCX1pCRLvA0Lp0tApAvy5U0llm98Inld61JbH1f7qaJjuc3cHNHk35aa asb2Q4WFgnIXyPkc+w7qXzSGIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAImrykl WNWx6PVtJD6onzOfFYmmMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAggD7GRnoRmpebz2dhB6cCQS+be/BrujL0Se2kiPF4+8kTll3+tYene8hprso G/ZNmyCENXgTIv1GfK9zwMpRNBxtNKoCug87NOUOWzaK5H5oFZj0wNp9nBPIfUqT Av4SlpJmLikAD/zvBaYbtjXdNhU3ZLZLEWfEzEcmcptJ3sRj4zQT/6P5vNLjd04T cqP4f2OSEKalAiQ3qvYGL8EMWI1IXjDfQ+PtyfliXnSZsF8/y4+dXpf+6UnzVZQL X/2d4sjmlnYQMxpp5OfhhmzMYKjM6S7zlY4xuJgFNgtItBGoXmzbEfMeajir7nxH YtjcEDSTxngNdcPjGuOa6mHn6g== -----END CERTIFICATE-----Generated at Fri Mar 13 23:53:55 2026 by rpki-client