$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: F0tOKQfaY3bwbNDI3h95VA5n+nCfO1U5iW5o62VikSk= Subject key identifier: 49:29:17:E9:1C:3A:51:A0:04:8E:41:57:0D:79:1B:BD:8D:96:85:E3 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 09A2 Signing time: Mon 02 Mar 2026 02:08:04 +0000 Manifest this update: Mon 02 Mar 2026 02:08:02 +0000 Manifest next update: Mon 09 Mar 2026 02:08:02 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: SpkEm/+DDpVmuhJRvbdtmH+WI7rQvAM3C/0C8GKiSSU=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: AjxjmwQEjXn0QHDZKCLjrPCZHZ9/Qm2oT27QUruEzk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Mar 2 02:08:02 2026 GMT Not After : Mar 9 02:08:02 2026 GMT Subject: CN=69a4f104-977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:fc:30:a4:02:2f:65:4f:3b:65:30:97:ed: a2:fc:bd:41:29:0e:e8:6e:77:5b:7d:56:25:69:d4: 25:64:99:23:67:0d:32:53:07:9e:4f:06:53:53:5a: 07:fa:d5:7a:3e:91:ab:6f:38:85:ae:80:cc:23:37: b8:b8:99:ad:81:21:9f:bf:85:28:88:6b:6b:af:2e: 96:dc:32:d3:0f:88:e7:11:ce:39:5f:bf:c4:42:f2: 02:45:81:81:ab:5a:6c:88:bb:82:86:c9:fd:2c:7d: ab:8b:fd:1e:d2:fc:45:5b:13:83:82:5c:a9:7a:8c: 81:ba:5c:7b:a4:e1:84:95:fc:25:60:02:3b:31:47: fb:99:1d:2b:54:2e:2a:58:f2:57:90:23:12:bb:15: b7:cd:c9:bb:96:16:33:dd:01:f0:0f:07:ff:e8:7d: e5:59:ff:2a:21:83:42:8b:bb:25:78:ea:c0:cb:73: 44:58:b2:40:2f:38:66:5f:e6:97:2f:62:a7:51:f5: eb:02:84:6d:98:5b:92:0e:4d:e8:19:57:70:e6:3e: 5e:5c:3b:a7:14:06:33:76:8c:00:08:b6:e9:bf:ba: 02:0c:dc:3a:f6:2c:34:7f:36:47:b3:58:f1:97:bf: 88:32:db:26:57:82:33:02:8d:bb:3a:3a:89:51:73: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:17:E9:1C:3A:51:A0:04:8E:41:57:0D:79:1B:BD:8D:96:85:E3 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:23:2a:ba:14:ff:87:47:c3:00:e0:9c:b7:80:56:00:9b:a7: 93:78:ac:bb:9a:21:14:8b:ac:aa:d8:78:1a:6c:d4:c1:3f:b3: 96:ba:c0:c5:70:84:76:c6:c9:65:82:b8:f3:30:56:37:1e:c9: a9:06:0c:61:8f:fd:04:0d:e5:31:e1:d6:2c:72:de:74:1b:a0: e0:40:43:2d:21:e1:40:64:78:2f:11:75:31:10:9d:56:39:10: 65:27:e1:29:cd:03:f9:e2:86:0b:b0:ae:1b:3b:1b:e1:86:a8: 40:20:1b:b9:af:7d:ba:e4:03:1e:73:8e:9e:d3:85:50:8c:07: 9b:b4:b8:e9:3f:42:7c:15:3b:e8:58:74:10:4f:61:35:c7:dd: c3:4c:cb:19:a5:6b:b4:e1:2b:ad:3d:4c:8e:16:b5:41:28:c7: 84:08:d0:fb:e1:ee:bb:5e:71:15:a2:04:08:59:5e:9b:a7:61: 32:c6:56:5e:f7:71:c7:68:c7:31:9f:e8:ed:96:eb:6c:56:1b: d1:66:4a:3a:91:20:1c:e7:d6:cd:f1:e2:8b:49:df:0a:eb:28: 42:e6:93:8c:1d:71:48:cc:b2:81:c8:03:61:2b:35:92:11:22: 2a:b3:9d:3c:05:95:07:78:5a:a8:34:9d:86:96:0e:d3:a9:88: 2f:b4:6c:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjYwMzAyMDIwODAyWhcNMjYwMzA5MDIwODAyWjAYMRYwFAYD VQQDEw02OWE0ZjEwNC05NzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqET8MKQCL2VPO2Uwl+2i/L1BKQ7obndbfVYladQlZJkjZw0yUweeTwZTU1oH +tV6PpGrbziFroDMIze4uJmtgSGfv4UoiGtrry6W3DLTD4jnEc45X7/EQvICRYGB q1psiLuChsn9LH2ri/0e0vxFWxODglypeoyBulx7pOGElfwlYAI7MUf7mR0rVC4q WPJXkCMSuxW3zcm7lhYz3QHwDwf/6H3lWf8qIYNCi7sleOrAy3NEWLJALzhmX+aX L2KnUfXrAoRtmFuSDk3oGVdw5j5eXDunFAYzdowACLbpv7oCDNw69iw0fzZHs1jx l7+IMtsmV4IzAo27OjqJUXNfqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkpF+kc OlGgBI5BVw15G72NloXjMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCMquhT/h0fDAOCct4BWAJunk3isu5ohFIusqth4GmzUwT+zlrrAxXCEdsbJ ZYK48zBWNx7JqQYMYY/9BA3lMeHWLHLedBug4EBDLSHhQGR4LxF1MRCdVjkQZSfh Kc0D+eKGC7CuGzsb4YaoQCAbua99uuQDHnOOntOFUIwHm7S46T9CfBU76Fh0EE9h Ncfdw0zLGaVrtOErrT1Mjha1QSjHhAjQ++Huu15xFaIECFlem6dhMsZWXvdxx2jH MZ/o7ZbrbFYb0WZKOpEgHOfWzfHii0nfCusoQuaTjB1xSMyygcgDYSs1khEiKrOd PAWVB3haqDSdhpYO06mIL7RseQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:47 2026 by rpki-client