$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: gPUf9qUb+j7xol0ZsSAHi97tgstq1FSierhZM8VjQDs= Subject key identifier: 59:0D:3C:6F:A6:EA:2E:D5:90:E6:15:77:81:22:44:D0:17:B5:BE:25 Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 011A Signing time: Sun 01 Mar 2026 06:52:37 +0000 Manifest this update: Sun 01 Mar 2026 06:52:36 +0000 Manifest next update: Sun 08 Mar 2026 06:52:36 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: GOSdUqO59fE1loFuDbJ+EVlO/eljEwaPrMR0UOldY4o=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=) 3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Mar 1 06:52:36 2026 GMT Not After : Mar 8 06:52:36 2026 GMT Subject: CN=69a3e235-24d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:fb:79:ff:fb:9b:83:20:0b:60:3a:1e:0f: ef:b0:6d:ba:fe:cf:fe:42:79:fa:41:5e:ac:f9:2a: 6d:91:b3:54:4c:c1:ce:13:84:c9:ca:95:08:50:de: e9:d0:0d:c4:f6:80:a8:78:8d:b9:6c:7a:01:1d:f1: e4:38:81:c7:59:e3:2a:fa:bc:36:5c:15:6f:33:ba: 43:86:0c:1b:71:90:f2:5d:d8:e3:3c:0d:c6:41:b9: 36:37:1a:0a:0b:5a:0b:61:cf:7b:55:b1:8b:53:65: af:ec:1d:f1:a8:da:67:bc:c3:31:2c:15:71:bf:f3: 54:6d:43:4f:b0:b0:2e:e5:4c:26:fc:6d:59:06:ea: 01:f4:aa:40:1e:25:d4:71:b0:b0:7f:02:c0:6d:f1: 12:48:21:78:b7:6b:27:6f:35:5b:f3:4a:08:dc:46: e9:df:cf:f0:20:2b:74:da:48:34:98:6d:05:9a:5c: a4:46:6e:6e:d0:b7:ca:b8:6f:10:b5:04:26:0d:51: d5:80:b4:cb:86:00:c7:c0:53:24:f9:b2:56:6c:bd: a5:ac:cb:0b:30:42:74:04:36:c0:e5:28:50:cf:a7: 41:ff:7a:61:27:02:e5:04:28:3d:42:a2:bc:65:1d: f0:32:f3:b7:dd:6f:f8:19:cd:e4:b9:80:1b:6c:47: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:3C:6F:A6:EA:2E:D5:90:E6:15:77:81:22:44:D0:17:B5:BE:25 X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:0f:0c:3f:79:ea:b4:09:91:41:5e:2a:6f:3c:00:2f:02: 77:3e:82:dd:d0:c8:37:1d:5d:95:1c:56:f7:5f:64:fb:e3:5d: 80:71:6c:d3:83:0d:2b:4d:6a:23:e1:33:f0:56:b0:5a:e4:0e: f1:fd:eb:27:1a:d3:e9:8a:bb:0f:d4:b2:71:9e:65:b6:ba:25: 8b:2f:1d:18:20:c1:16:60:df:17:9e:49:95:27:88:c0:02:52: 9f:e7:66:7c:62:68:bf:74:17:9a:87:53:b7:7f:01:9d:c4:fe: 9a:60:0b:f7:d7:35:b9:a6:92:89:72:91:87:da:66:1b:e2:ab: 16:ed:80:97:bb:f0:72:dc:c1:39:e3:20:b4:13:6f:35:cb:29: be:e8:50:81:3d:53:d9:81:b5:eb:19:75:b3:23:f3:23:ae:49: cb:86:95:b7:41:b3:a6:a4:6d:ac:47:de:95:b2:52:07:69:62: d1:a6:47:e6:06:9f:63:a2:e3:7c:85:b4:50:38:e8:60:a2:3a: 43:0f:a1:71:8d:52:d8:9a:28:c1:35:75:a0:93:ae:78:32:8d: 79:9d:d8:47:b4:68:71:93:3e:85:c0:d2:33:34:1e:80:85:65: e8:90:fc:c4:1a:4c:f4:33:de:6d:08:e9:34:9b:70:2c:fc:6c: 3a:3c:11:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjYwMzAxMDY1MjM2WhcNMjYwMzA4MDY1MjM2WjAYMRYwFAYD VQQDEw02OWEzZTIzNS0yNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSL7ef/7m4MgC2A6Hg/vsG26/s/+Qnn6QV6s+SptkbNUTMHOE4TJypUIUN7p 0A3E9oCoeI25bHoBHfHkOIHHWeMq+rw2XBVvM7pDhgwbcZDyXdjjPA3GQbk2NxoK C1oLYc97VbGLU2Wv7B3xqNpnvMMxLBVxv/NUbUNPsLAu5Uwm/G1ZBuoB9KpAHiXU cbCwfwLAbfESSCF4t2snbzVb80oI3Ebp38/wICt02kg0mG0FmlykRm5u0LfKuG8Q tQQmDVHVgLTLhgDHwFMk+bJWbL2lrMsLMEJ0BDbA5ShQz6dB/3phJwLlBCg9QqK8 ZR3wMvO33W/4Gc3kuYAbbEeM5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkNPG+m 6i7VkOYVd4EiRNAXtb4lMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJqQPDD956rQJkUFeKm88AC8Cdz6C3dDINx1dlRxW919k++NdgHFs04MNK01q I+Ez8FawWuQO8f3rJxrT6Yq7D9SycZ5ltroliy8dGCDBFmDfF55JlSeIwAJSn+dm fGJov3QXmodTt38BncT+mmAL99c1uaaSiXKRh9pmG+KrFu2Al7vwctzBOeMgtBNv NcspvuhQgT1T2YG16xl1syPzI65Jy4aVt0GzpqRtrEfelbJSB2li0aZH5gafY6Lj fIW0UDjoYKI6Qw+hcY1S2JoowTV1oJOueDKNeZ3YR7RocZM+hcDSMzQegIVl6JD8 xBpM9DPebQjpNJtwLPxsOjwRIw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:37 2026 by rpki-client