$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: duPu9/+xx+hz1v5YqoOAH8WPVjl3ewvQeDU5khTuGNk= Subject key identifier: 73:4C:F4:48:ED:51:2B:56:A4:65:02:E7:02:65:A6:D1:10:39:BC:52 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 35 Signing time: Sun 01 Mar 2026 10:03:02 +0000 Manifest this update: Sun 01 Mar 2026 10:03:02 +0000 Manifest next update: Sun 08 Mar 2026 10:03:02 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: 8g1C47CEDJTl/6k61TYVgBhFbCfYTRzDMUwDs26KElU=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: 7XPEsCnRb6A7RN//32t1/Zkxb0wUx6g+wFth5wK2Amo=) 3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: m91IAm4Qh3ZBdZZb9b+cR2X1GQMtkr4UNaEK1Tsoyns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Mar 1 10:03:02 2026 GMT Not After : Mar 8 10:03:02 2026 GMT Subject: CN=69a40ed6-17a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:34:84:34:a8:55:b5:d8:b4:c4:96:02:e0: 1f:60:c9:5c:af:4d:c9:e1:ef:25:cd:48:93:83:75: e2:e7:c1:95:3b:b9:80:35:71:41:58:87:f0:52:da: 58:4b:42:a9:f2:f4:72:2b:52:47:8c:01:3b:79:f5: 18:cc:cf:db:27:67:15:a2:95:2a:77:85:5d:c1:05: c8:f5:67:d9:b6:a7:db:79:3f:d6:10:11:91:74:1e: 44:42:ea:b4:e3:e3:dc:cc:f3:ca:e2:e7:05:8a:f6: 7d:3b:ed:58:ce:f4:9c:b4:3c:bc:70:10:ca:2d:07: 8e:3c:25:3d:63:a2:b0:b5:63:97:bb:a7:ff:d8:87: ef:3d:bc:2d:26:d8:aa:8b:85:08:46:f9:0b:a6:ae: 67:04:33:b4:2e:5a:96:5f:ea:a3:59:d4:36:ee:0b: a4:51:76:ed:75:aa:a4:0e:19:0b:a8:1e:f6:ca:0c: 74:07:20:3e:ff:ff:6a:63:1a:de:96:76:9f:87:5a: 12:c1:9e:d8:f5:ad:11:3a:88:60:6c:89:0a:a1:fa: b1:63:64:d4:d8:51:75:75:e4:a4:4a:37:21:fe:88: 56:f8:bc:98:44:6d:98:27:19:cd:9b:20:4a:64:14: 30:21:8e:0f:06:9a:43:74:7a:bf:52:e6:3e:30:32: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4C:F4:48:ED:51:2B:56:A4:65:02:E7:02:65:A6:D1:10:39:BC:52 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:42:3c:b4:33:41:d0:02:59:41:42:f7:8c:d4:26:5d:e9:da: 84:b6:54:43:78:ff:64:fa:2f:b2:96:e6:7d:81:21:2f:94:8f: 00:13:06:ba:e3:1e:38:b6:a5:13:47:11:52:6c:4a:0f:da:55: 3a:f3:57:bc:f3:7d:07:dd:9d:bb:3e:9a:7c:8f:1b:8c:e7:99: c8:57:9f:c9:d6:01:92:cc:c4:e8:bc:c5:49:a7:f9:09:84:57: 44:ba:ae:f7:28:15:3d:4b:46:0a:3c:7c:21:50:b5:22:a1:27: 9e:47:c1:cb:26:6d:87:f8:66:16:6d:cc:0a:cc:28:99:7d:58: d3:d3:4b:60:ed:68:6d:4c:71:b1:64:95:46:7a:2b:55:d7:71: 32:65:66:fa:00:b7:bb:02:10:a1:ea:29:88:84:a3:75:dc:b7: a6:87:a1:ba:a2:a6:17:4b:57:fd:d0:8b:cd:da:32:ca:9e:4c: 7e:4a:85:e8:a0:35:cb:31:2e:cf:98:c9:24:ac:2a:a2:a1:71: 94:47:0a:85:8f:d8:60:7a:a0:cb:45:0d:55:09:af:e8:37:a1: bd:f2:25:b0:cf:70:4a:34:af:51:b0:f4:1a:4c:63:e1:40:49: c4:78:5a:9d:62:9c:7c:26:12:97:cb:9e:8b:c1:85:c2:2a:bc: b8:bb:dd:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjAzMDExMDAzMDJaFw0yNjAzMDgxMDAzMDJaMBgxFjAUBgNV BAMTDTY5YTQwZWQ2LTE3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZozSENKhVtdi0xJYC4B9gyVyvTcnh7yXNSJODdeLnwZU7uYA1cUFYh/BS2lhL Qqny9HIrUkeMATt59RjMz9snZxWilSp3hV3BBcj1Z9m2p9t5P9YQEZF0HkRC6rTj 49zM88ri5wWK9n077VjO9Jy0PLxwEMotB448JT1jorC1Y5e7p//Yh+89vC0m2KqL hQhG+QumrmcEM7QuWpZf6qNZ1DbuC6RRdu11qqQOGQuoHvbKDHQHID7//2pjGt6W dp+HWhLBntj1rRE6iGBsiQqh+rFjZNTYUXV15KRKNyH+iFb4vJhEbZgnGc2bIEpk FDAhjg8GmkN0er9S5j4wMoZlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc0z0SO1R K1akZQLnAmWm0RA5vFIwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDDQjy0M0HQAllBQveM1CZd6dqEtlRDeP9k+i+yluZ9gSEvlI8AEwa64x44tqUT RxFSbEoP2lU681e8830H3Z27Ppp8jxuM55nIV5/J1gGSzMTovMVJp/kJhFdEuq73 KBU9S0YKPHwhULUioSeeR8HLJm2H+GYWbcwKzCiZfVjT00tg7WhtTHGxZJVGeitV 13EyZWb6ALe7AhCh6imIhKN13Lemh6G6oqYXS1f90IvN2jLKnkx+SoXooDXLMS7P mMkkrCqioXGURwqFj9hgeqDLRQ1VCa/oN6G98iWwz3BKNK9RsPQaTGPhQEnEeFqd Ypx8JhKXy56LwYXCKry4u91s -----END CERTIFICATE-----Generated at Sun Mar 1 22:53:51 2026 by rpki-client