$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft File: ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft (raw, json) Hash identifier: 1tY6/os7HhqV9mDiQHq1KqHVd2bH+vde1M2vbYEqkxU= Subject key identifier: 45:90:A8:3B:2E:2C:27:E9:34:73:D0:58:A4:F3:91:A6:33:2E:D7:E1 Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77 Certificate issuer: /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft Manifest number: 2C Signing time: Wed 15 Apr 2026 08:24:37 +0000 Manifest this update: Wed 15 Apr 2026 08:24:36 +0000 Manifest next update: Wed 22 Apr 2026 08:24:36 +0000 Files and hashes: 1: ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl (hash: lLCzfUhsutZZOI8SmZRqL5ktjpkGiF1k53OCk7eJChE=) 2: FFB68BF6067311F19CC2DF5A3C3D8C67.roa (hash: k9kaJXO8PQNyQBahywqQxP62KA454/soqOWb5claBqg=) 3: FF37A9C6067311F19CC2DF5A3C3D8C67.roa (hash: L00fkvDAp1HW2g8z2VX9l/pSUD1IBVKXFZoC6l822Do=) 4: 6BBEB632135F11F18A7710FA2D3D8C67.roa (hash: 6EX3EMDbsuc9zc5WzcOw4eX2IMHRRIrcRojW8W0oknY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277 Validity Not Before: Apr 15 08:24:36 2026 GMT Not After : Apr 22 08:24:36 2026 GMT Subject: CN=69df4b45-0ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:0d:86:40:2f:39:93:bc:07:c4:af:84:f7: 0e:bf:71:7f:7a:d7:41:97:66:b8:df:32:f8:69:41: 06:87:44:7d:df:c6:6f:57:75:6d:5e:96:8e:44:42: f2:29:50:f4:b8:65:45:d3:b3:80:01:ae:5f:76:fc: 9e:93:05:f6:49:3f:1e:43:24:8e:07:bc:8a:95:33: 83:5d:3f:f1:4c:40:dc:21:7a:e1:83:f9:fb:42:51: c6:b5:8f:78:6e:b1:05:2e:01:e2:86:cf:ea:a8:0e: 7e:0f:1e:55:2d:01:a8:e8:56:4c:da:28:d7:66:a0: 27:4f:44:5c:92:16:32:81:74:71:92:4c:cf:32:8f: a4:17:7e:b1:4b:d9:29:d6:a8:62:b8:d0:d7:83:7d: 0e:73:8f:e8:bc:0d:9d:8f:12:da:a2:be:5f:9e:6f: f5:d3:4a:fc:76:cb:04:ec:3b:09:81:47:02:9d:65: 18:4e:3c:92:af:40:32:bb:7f:d3:c0:71:d2:52:9b: 31:f2:08:3a:1f:84:a4:9b:ac:88:42:ca:e2:56:87: 35:9b:5b:34:1e:96:b5:e0:4d:1c:30:20:88:5c:86: 0e:7d:c6:54:26:02:9e:d5:3c:40:0f:63:e4:47:01: 7d:23:6e:34:18:c3:56:fc:13:87:51:cb:b3:22:92: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:90:A8:3B:2E:2C:27:E9:34:73:D0:58:A4:F3:91:A6:33:2E:D7:E1 X509v3 Authority Key Identifier: keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9d:48:15:93:a2:2f:5e:34:4f:2a:9d:c1:8b:88:3e:d3:7a: cb:bf:bd:20:8e:1a:4e:3b:66:67:b0:df:27:f3:3f:4a:89:3e: 32:23:88:27:c5:d5:1f:4f:3d:2f:94:43:48:76:23:d0:ce:0e: d9:df:0c:86:25:0e:92:90:7d:fa:c0:98:49:a9:53:e4:88:90: 4d:ba:92:c3:10:4c:3d:fc:e4:f7:0c:9e:00:b2:b0:e6:47:97: 66:fe:df:e7:45:50:b8:29:80:31:64:8e:b8:61:58:e2:e9:81: 9b:14:81:a9:0a:1d:bc:f6:04:1e:f1:5d:29:7e:c5:27:50:6d: 23:ce:f8:19:e0:cb:fb:ba:c1:bb:ff:e2:0f:b5:99:3f:a3:fd: e0:8d:9d:8f:cb:fe:cd:71:d2:9d:a3:f7:1b:c4:eb:9a:ee:8a: f0:5e:f8:0b:4a:42:80:e0:25:52:65:dc:1a:2f:88:41:be:48: 21:2e:7a:7a:ad:b0:a2:4b:a3:dd:fb:62:46:fa:64:bf:39:f0: 0e:a9:e3:d9:37:04:bf:30:40:58:5f:26:d3:d5:e0:fd:b7:6c: fc:d7:ff:25:79:1c:b1:83:88:fc:e8:b2:f3:e9:ab:d8:89:b1: 33:ba:25:c0:5c:a5:6d:a2:23:39:16:e3:c9:b2:84:7e:74:f4: e2:7d:0a:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTczODExMC8GA1UEBRMoNjY2NTRFMDEyMDM5MzI2RTEzRDNDRDlFRjU4REE5RUYw Nzc3MjI3NzAeFw0yNjA0MTUwODI0MzZaFw0yNjA0MjIwODI0MzZaMBgxFjAUBgNV BAMTDTY5ZGY0YjQ1LTBlYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCYg2GQC85k7wHxK+E9w6/cX9610GXZrjfMvhpQQaHRH3fxm9XdW1elo5EQvIp UPS4ZUXTs4ABrl92/J6TBfZJPx5DJI4HvIqVM4NdP/FMQNwheuGD+ftCUca1j3hu sQUuAeKGz+qoDn4PHlUtAajoVkzaKNdmoCdPRFySFjKBdHGSTM8yj6QXfrFL2SnW qGK40NeDfQ5zj+i8DZ2PEtqivl+eb/XTSvx2ywTsOwmBRwKdZRhOPJKvQDK7f9PA cdJSmzHyCDofhKSbrIhCyuJWhzWbWzQelrXgTRwwIIhchg59xlQmAp7VPEAPY+RH AX0jbjQYw1b8E4dRy7MiktuFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURZCoOy4s J+k0c9BYpPORpjMu1+EwHwYDVR0jBBgwFoAUZmVOASA5Mm4T082e9Y2p7wd3Incw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzM4Lzk4Q0MzN0NFMDY3 MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00VDA4MmU5WTJwN3dkM0lu Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm1WT0FTQTVNbTRUMDgyZTlZMnA3d2QzSW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzM4Lzk4Q0MzN0NFMDY3MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00 VDA4MmU5WTJwN3dkM0luYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsnUgVk6IvXjRPKp3Bi4g+03rLv70gjhpOO2ZnsN8n8z9KiT4yI4gnxdUfTz0v lENIdiPQzg7Z3wyGJQ6SkH36wJhJqVPkiJBNupLDEEw9/OT3DJ4AsrDmR5dm/t/n RVC4KYAxZI64YVji6YGbFIGpCh289gQe8V0pfsUnUG0jzvgZ4Mv7usG7/+IPtZk/ o/3gjZ2Py/7NcdKdo/cbxOua7orwXvgLSkKA4CVSZdwaL4hBvkghLnp6rbCiS6Pd +2JG+mS/OfAOqePZNwS/MEBYXybT1eD9t2z81/8leRyxg4j86LLz6avYibEzuiXA XKVtoiM5FuPJsoR+dPTifQrd -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:12 2026 by rpki-client