$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: zPDSsqqbdEJ1OdkKnGYlBPba+l51NQCtLFuFLYAwS3Q= Subject key identifier: 38:51:4F:E3:64:A3:C7:50:48:13:23:36:39:48:BB:1B:22:C2:F0:37 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A57 Signing time: Sat 28 Mar 2026 19:34:11 +0000 Manifest this update: Sat 28 Mar 2026 19:34:11 +0000 Manifest next update: Sat 04 Apr 2026 19:34:11 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: lbxwVAI2klDVers1/7cwG+XxxmQGSOSTFQfwCIJDq+4=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Mar 28 19:34:11 2026 GMT Not After : Apr 4 19:34:11 2026 GMT Subject: CN=69c82d33-471d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:5b:64:cd:5c:c3:da:87:6b:38:4c:09:32: d3:53:06:52:e6:ff:58:68:43:d3:31:c2:d8:7c:a1: 31:48:8a:8f:02:46:5d:0f:00:c2:c4:fa:47:19:8e: 88:15:63:e6:b5:84:80:3c:5e:ba:e8:7a:3c:53:d2: 75:ba:37:6f:1d:92:18:2e:5d:1e:c6:eb:bc:a2:62: df:3c:ac:65:c9:c2:18:71:f9:ad:26:36:b8:33:4c: 89:f6:08:e1:da:75:7e:f0:83:65:e9:2a:a0:6b:8f: 06:53:27:c2:f2:d0:5d:ea:1d:81:c3:f5:32:35:8d: 06:cf:f5:02:e4:c1:b6:c3:82:0d:a3:a0:ae:3b:ad: 00:c4:14:c3:77:47:80:ef:16:22:b8:35:d1:4b:84: af:49:52:a7:4a:9b:0a:f2:8b:a1:b8:06:fe:fb:0c: 86:04:61:e1:79:56:82:94:a5:04:f4:e2:32:3f:66: 68:11:ab:9e:a9:24:18:ca:0c:6d:26:95:38:9c:1e: 0a:ae:d8:03:44:ac:87:9a:94:54:27:08:67:e2:a2: 68:cf:e4:15:ee:d6:18:3b:cd:2d:6d:93:67:3f:3d: 84:bc:86:c0:cb:84:6e:74:cf:cb:dc:4b:8e:bb:93: 35:90:ea:e9:e1:a9:95:ce:b0:31:26:f4:03:87:0c: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:4F:E3:64:A3:C7:50:48:13:23:36:39:48:BB:1B:22:C2:F0:37 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:58:87:4d:b4:50:50:5a:0c:c6:89:41:cb:bd:78:35:6b:a8: 11:64:37:22:a8:63:5c:b7:55:fc:c8:0d:7b:91:1a:c4:3e:51: fd:b7:17:8f:93:fb:68:ab:55:cd:b1:59:46:0d:4c:67:5f:18: 41:90:85:49:19:58:95:6d:6f:ce:95:9f:8d:14:da:fb:4a:72: 7d:9b:99:fb:97:22:79:83:69:96:0b:21:42:96:ed:e5:a8:ec: 78:73:a3:c5:55:77:93:20:c3:7b:41:16:66:10:93:4b:c3:4f: 09:c1:96:30:45:9f:9d:98:c2:ef:d9:13:33:02:72:52:e4:36: 7c:7f:aa:43:4c:60:08:93:12:cc:49:94:78:c5:29:af:d8:ca: 95:36:02:15:4d:cd:f6:cb:29:71:5e:c3:4f:d9:64:30:0e:0e: 9f:98:5e:f5:41:32:e2:8b:90:a5:d2:7a:fa:1b:f6:26:9b:7d: 1b:50:8f:b8:c2:18:b2:85:73:3c:49:48:54:ca:f0:62:ea:85: 7a:10:5b:83:e7:64:74:51:69:4c:a6:62:bf:ab:d4:9f:71:64: 09:a2:b6:c3:4f:80:67:16:da:6d:10:7c:b6:9d:23:44:5a:f7: 69:13:03:30:ac:2d:07:e7:3d:1a:51:18:d6:ff:8d:e6:93:75: e5:45:fa:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjYwMzI4MTkzNDExWhcNMjYwNDA0MTkzNDExWjAYMRYwFAYD VQQDEw02OWM4MmQzMy00NzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHpbZM1cw9qHazhMCTLTUwZS5v9YaEPTMcLYfKExSIqPAkZdDwDCxPpHGY6I FWPmtYSAPF666Ho8U9J1ujdvHZIYLl0exuu8omLfPKxlycIYcfmtJja4M0yJ9gjh 2nV+8INl6Sqga48GUyfC8tBd6h2Bw/UyNY0Gz/UC5MG2w4INo6CuO60AxBTDd0eA 7xYiuDXRS4SvSVKnSpsK8ouhuAb++wyGBGHheVaClKUE9OIyP2ZoEaueqSQYygxt JpU4nB4KrtgDRKyHmpRUJwhn4qJoz+QV7tYYO80tbZNnPz2EvIbAy4RudM/L3EuO u5M1kOrp4amVzrAxJvQDhwyMqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhRT+Nk o8dQSBMjNjlIuxsiwvA3MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFiHTbRQUFoMxolBy714NWuoEWQ3IqhjXLdV/MgNe5EaxD5R/bcXj5P7aKtV zbFZRg1MZ18YQZCFSRlYlW1vzpWfjRTa+0pyfZuZ+5cieYNplgshQpbt5ajseHOj xVV3kyDDe0EWZhCTS8NPCcGWMEWfnZjC79kTMwJyUuQ2fH+qQ0xgCJMSzEmUeMUp r9jKlTYCFU3N9sspcV7DT9lkMA4On5he9UEy4ouQpdJ6+hv2Jpt9G1CPuMIYsoVz PElIVMrwYuqFehBbg+dkdFFpTKZiv6vUn3FkCaK2w0+AZxbabRB8tp0jRFr3aRMD MKwtB+c9GlEY1v+N5pN15UX6SQ== -----END CERTIFICATE-----Generated at Sun Mar 29 21:27:49 2026 by rpki-client