$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: J0YrT1cx7pkX3GgrlMbs/xZGwrVz/I8NkbK6aiTsFJg= Subject key identifier: 4A:A9:79:4C:25:57:EC:D2:46:FC:18:DB:75:F4:C9:89:58:A5:5A:71 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0514 Signing time: Sun 01 Mar 2026 00:14:04 +0000 Manifest this update: Sun 01 Mar 2026 00:14:03 +0000 Manifest next update: Sun 08 Mar 2026 00:14:03 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: SBHFjB22Y+sdselABqW8MENBp7nX3o0B7wN+OofsdMY=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Mar 1 00:14:03 2026 GMT Not After : Mar 8 00:14:03 2026 GMT Subject: CN=69a384cb-203b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:db:e3:ba:65:bd:a6:ac:2c:e7:16:f1:56: 87:a8:12:ac:7b:a1:1f:f2:87:83:ef:d9:78:78:a3: 1f:a6:72:2a:fd:ab:a7:71:1b:9c:21:0f:71:0a:0c: 6e:63:bb:4f:bc:3c:d8:16:ed:71:b1:23:cd:cf:d9: e8:ab:a8:90:ea:39:3a:24:f8:b0:f7:2c:bd:02:8c: 5f:38:36:43:2e:41:ec:b6:bf:48:ba:41:59:69:55: 4e:3c:ed:60:3d:df:9e:42:0b:7a:b4:5d:8b:61:3b: 34:e0:60:e5:e0:d0:f7:0b:f6:70:02:9e:38:c8:d0: c9:8c:9c:74:cf:f8:a6:97:8a:dd:e9:bb:6c:49:1d: 40:22:8e:9f:70:74:7e:05:b4:03:c9:5d:b7:7d:a6: ec:fc:4f:6b:8d:b6:7f:85:ae:c7:20:52:0e:19:73: 72:fb:5a:ae:43:cd:cd:75:ce:13:ec:0b:23:d1:ad: 35:37:c6:2a:18:c2:42:d5:52:a3:e1:b3:41:1c:c2: d1:ee:bd:03:dd:67:3f:f3:26:08:6a:f3:21:86:b0: a3:85:b7:1b:01:03:ba:91:8b:99:e3:7a:31:58:85: da:6e:00:d3:a2:9f:f7:25:05:2e:5a:2e:92:cc:9b: 81:eb:75:8d:25:ef:bf:d0:9e:2b:9b:68:cb:28:7a: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:79:4C:25:57:EC:D2:46:FC:18:DB:75:F4:C9:89:58:A5:5A:71 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9b:e1:83:09:25:33:b2:68:d6:47:e8:3b:6b:10:79:10:97: 39:9f:d2:31:e2:6c:c6:dc:3a:e3:05:4a:de:db:b3:69:9d:31: 07:f2:08:82:c5:d0:bd:a7:99:32:7c:1e:95:14:e2:ae:c5:39: 43:77:da:40:c5:dc:aa:53:68:87:a9:35:4d:1a:77:66:51:55: 97:b8:3d:09:ec:1e:5a:d0:e7:79:e3:28:a3:d4:b7:09:ed:41: 30:d3:da:d6:58:c6:07:6e:60:5f:91:cc:b9:0f:88:b6:2c:f9: ee:0a:10:93:5e:65:68:c7:2e:a9:a3:d3:79:a9:45:58:ef:30: a7:a9:18:5d:62:dc:31:92:48:4e:d4:9d:ac:05:1b:3b:ff:21: 7f:75:44:ee:8f:e7:ba:b8:51:8d:59:ac:a1:43:5d:1d:a8:63: 26:0c:ed:7e:1e:9c:81:58:bf:7f:4a:55:0a:4f:36:4b:73:f9: 3b:f5:88:09:e4:74:b2:f3:f8:2d:48:95:92:ed:dc:07:18:6a: b6:6d:d8:e4:e4:43:40:90:0a:4a:4e:80:18:56:40:b5:be:e6: f8:21:14:14:a1:67:c7:2d:9b:ce:1e:cd:2d:4f:5a:ac:2c:bd: 03:22:b9:18:98:55:6e:81:81:02:70:3c:cd:f9:6b:e7:34:4c: 92:67:82:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjYwMzAxMDAxNDAzWhcNMjYwMzA4MDAxNDAzWjAYMRYwFAYD VQQDDA02OWEzODRjYi0yMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkXb47plvaasLOcW8VaHqBKse6Ef8oeD79l4eKMfpnIq/auncRucIQ9xCgxu Y7tPvDzYFu1xsSPNz9noq6iQ6jk6JPiw9yy9AoxfODZDLkHstr9IukFZaVVOPO1g Pd+eQgt6tF2LYTs04GDl4ND3C/ZwAp44yNDJjJx0z/iml4rd6btsSR1AIo6fcHR+ BbQDyV23fabs/E9rjbZ/ha7HIFIOGXNy+1quQ83Ndc4T7Asj0a01N8YqGMJC1VKj 4bNBHMLR7r0D3Wc/8yYIavMhhrCjhbcbAQO6kYuZ43oxWIXabgDTop/3JQUuWi6S zJuB63WNJe+/0J4rm2jLKHrYNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqpeUwl V+zSRvwY23X0yYlYpVpxMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5vhgwklM7Jo1kfoO2sQeRCXOZ/SMeJsxtw64wVK3tuzaZ0xB/IIgsXQvaeZ MnwelRTirsU5Q3faQMXcqlNoh6k1TRp3ZlFVl7g9CeweWtDneeMoo9S3Ce1BMNPa 1ljGB25gX5HMuQ+Itiz57goQk15laMcuqaPTealFWO8wp6kYXWLcMZJITtSdrAUb O/8hf3VE7o/nurhRjVmsoUNdHahjJgztfh6cgVi/f0pVCk82S3P5O/WICeR0svP4 LUiVku3cBxhqtm3Y5ORDQJAKSk6AGFZAtb7m+CEUFKFnxy2bzh7NLU9arCy9AyK5 GJhVboGBAnA8zflr5zRMkmeCCg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:24 2026 by rpki-client