$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: u54EPDMvN3fjGBMlBswEJzrZ5XWuvCx5+lpm/6ab1ek= Subject key identifier: 3A:63:24:3E:26:88:95:B6:C7:5D:70:0B:D4:A5:7F:81:97:BC:98:56 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 0127 Signing time: Mon 02 Mar 2026 00:31:24 +0000 Manifest this update: Mon 02 Mar 2026 00:31:22 +0000 Manifest next update: Mon 09 Mar 2026 00:31:22 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: GZbsttsaP4Dqo7Efx1DDBlG9sT/bi6IZCQjVZ+m4bWc=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: KClykHKChBZ5Bx9B5+rZuGfT1EY+y0O+dL2jNFzbRSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Mar 2 00:31:22 2026 GMT Not After : Mar 9 00:31:22 2026 GMT Subject: CN=69a4da5b-df94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:6b:8f:7d:b3:fc:60:7a:d8:44:cb:6d:72: 12:94:cc:2b:f0:84:94:77:f4:16:10:64:82:5b:21: 5d:29:b1:8d:06:af:5b:03:94:0c:53:40:91:2b:fa: 0f:6e:a8:ff:22:ab:82:02:0f:11:f2:ba:6c:13:8d: 66:77:5d:2a:e8:e7:8c:74:b2:8b:20:f3:d8:1e:80: b3:37:ca:b0:5a:d5:03:1f:3a:3d:99:59:b9:fa:40: 8e:69:09:68:5d:e4:5d:fc:d1:a8:a4:17:b6:60:da: ff:84:ad:34:d5:7a:20:09:4b:bb:8f:e7:b6:70:c2: 10:8d:89:c3:26:81:0b:94:a8:2d:bd:3e:0c:cf:7f: 59:46:73:f9:17:8f:76:38:75:04:32:6d:b1:25:7a: 50:bf:aa:97:63:d7:3b:7a:f9:69:60:07:f1:a4:7a: 9b:7e:17:33:82:83:94:92:a8:a5:0d:ae:4a:05:08: a1:5f:3b:87:b1:fd:79:92:4d:07:63:e2:60:94:b3: 2b:5c:85:aa:23:ad:01:17:b3:bb:62:34:91:dc:7a: 6d:29:5c:39:c5:dd:d2:2b:e4:fe:fd:45:99:45:1d: 38:8b:bc:5a:22:a9:08:58:d9:85:f2:97:a6:f7:5b: c7:2a:7e:a3:18:3c:f5:dc:27:91:6d:b9:b3:cc:1e: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:63:24:3E:26:88:95:B6:C7:5D:70:0B:D4:A5:7F:81:97:BC:98:56 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:6f:75:d8:9e:b9:1b:31:fe:58:41:16:c0:2a:56:b8:85: 77:87:f9:4d:73:5a:db:4c:3c:59:e7:3c:cb:77:96:a8:97:21: fc:dd:a7:b0:9e:1f:77:0b:ad:6a:5d:ad:57:b2:d8:ce:a3:05: 3e:fd:c6:4f:aa:ca:48:8f:b9:3e:c5:77:f7:03:97:33:d9:ce: 6b:57:64:d2:35:44:80:f8:ca:89:24:6c:f6:9e:8f:6b:12:80: 09:f2:20:d4:9f:77:d1:13:12:d3:c7:08:81:37:23:f7:d0:52: ca:e6:d4:72:21:64:62:e2:cc:0f:77:ec:67:fb:aa:a3:f3:d1: cc:a3:39:4c:73:08:6c:22:de:e7:42:c4:13:e3:1e:44:8c:64: 3c:07:b4:aa:15:8e:5a:d6:e2:14:29:46:1d:3b:7f:d3:aa:03: b4:d9:3b:e0:0d:30:93:0d:c5:07:d0:d3:34:61:a7:0c:2c:41: b1:ac:f8:b1:1b:7b:aa:65:8b:04:8c:7d:d6:d4:df:74:61:68: 12:b2:b9:7f:64:43:94:c6:0d:ef:de:0c:a8:c5:86:48:a0:13: 2b:d4:f9:5e:44:17:64:95:68:c9:93:ec:14:d9:c3:87:55:19: 53:6f:2a:88:78:fb:83:b6:07:bf:44:c9:60:b1:b9:13:a9:a2: 1a:aa:16:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjYwMzAyMDAzMTIyWhcNMjYwMzA5MDAzMTIyWjAYMRYwFAYD VQQDEw02OWE0ZGE1Yi1kZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDVrj32z/GB62ETLbXISlMwr8ISUd/QWEGSCWyFdKbGNBq9bA5QMU0CRK/oP bqj/IquCAg8R8rpsE41md10q6OeMdLKLIPPYHoCzN8qwWtUDHzo9mVm5+kCOaQlo XeRd/NGopBe2YNr/hK001XogCUu7j+e2cMIQjYnDJoELlKgtvT4Mz39ZRnP5F492 OHUEMm2xJXpQv6qXY9c7evlpYAfxpHqbfhczgoOUkqilDa5KBQihXzuHsf15kk0H Y+JglLMrXIWqI60BF7O7YjSR3HptKVw5xd3SK+T+/UWZRR04i7xaIqkIWNmF8pem 91vHKn6jGDz13CeRbbmzzB5NOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpjJD4m iJW2x11wC9Slf4GXvJhWMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHXpvddieuRsx/lhBFsAqVriFd4f5TXNa20w8Wec8y3eWqJch/N2nsJ4fdwut al2tV7LYzqMFPv3GT6rKSI+5PsV39wOXM9nOa1dk0jVEgPjKiSRs9p6PaxKACfIg 1J930RMS08cIgTcj99BSyubUciFkYuLMD3fsZ/uqo/PRzKM5THMIbCLe50LEE+Me RIxkPAe0qhWOWtbiFClGHTt/06oDtNk74A0wkw3FB9DTNGGnDCxBsaz4sRt7qmWL BIx91tTfdGFoErK5f2RDlMYN794MqMWGSKATK9T5XkQXZJVoyZPsFNnDh1UZU28q iHj7g7YHv0TJYLG5E6miGqoWPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:51 2026 by rpki-client