$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: AW2rCjyda0Rcr+FK+1s4k6lCVV/6zFWj6wZbqSe9jcQ= Subject key identifier: 92:3D:45:7A:93:65:26:B5:43:74:C5:5B:DF:F7:35:E8:67:FA:F2:93 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DE6 Signing time: Sat 28 Feb 2026 15:31:28 +0000 Manifest this update: Sat 28 Feb 2026 15:31:27 +0000 Manifest next update: Sat 07 Mar 2026 15:31:27 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: w4EEbgYYYHvAWM2jPzonCX0kOXL06mCrY2BModXZPZk=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 15:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11784 (0x2e08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Feb 28 15:31:27 2026 GMT Not After : Mar 7 15:31:27 2026 GMT Subject: CN=69a30a50-1fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9a:c8:ea:0f:a2:e1:17:42:79:cc:f3:bf:72: 7b:b1:d0:cf:e3:22:b4:c3:52:35:b9:98:5b:05:ba: 8a:74:df:d7:ea:6d:f6:50:88:2b:f6:ca:64:d7:f6: cd:fd:f6:5d:7c:90:15:9c:3b:42:1a:62:35:2a:b5: fb:67:df:31:7a:99:dd:23:1f:2c:83:04:5e:51:0a: cc:37:30:a9:83:65:a9:4f:80:8b:52:4a:09:a2:17: 04:6d:1d:49:87:a9:ff:96:c0:b9:f2:cb:9e:27:c4: 8f:04:ec:54:24:16:6d:9e:18:0e:a5:a3:fd:bd:14: 09:25:68:76:d9:da:f2:71:1f:22:42:4c:7d:9f:1e: 9b:61:34:a9:f5:e4:74:e6:c0:6f:d2:2e:15:8a:cd: 4b:4a:4e:ae:c4:d7:db:91:21:23:85:56:dc:08:97: d4:6e:a7:24:25:48:3c:ed:e2:28:52:e7:40:09:03: 47:ce:68:c5:ee:f5:f8:c1:5e:2e:52:b0:a5:7c:2b: 97:e9:c3:0b:1a:6b:d9:6e:93:7d:43:96:87:8d:3d: f1:a8:ab:7d:55:ae:1f:10:07:42:f3:06:ce:f0:a8: 52:ac:fe:04:9e:b6:ab:78:a1:2f:81:4a:52:fa:1d: 48:bf:b2:8c:38:88:3d:94:23:66:ab:4a:42:1f:45: 00:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:45:7A:93:65:26:B5:43:74:C5:5B:DF:F7:35:E8:67:FA:F2:93 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:47:1a:2a:a0:fd:a3:4e:b6:22:77:8f:1c:7b:7e:36:19:bb: cc:fd:68:12:5b:c4:7f:50:f6:96:5b:96:66:2e:a0:15:f5:a0: c5:15:1d:3f:47:7f:ce:19:84:7f:30:bc:db:1d:fe:0c:e1:39: 31:72:6d:51:2c:6e:19:56:3f:a7:9a:10:70:1e:e3:ee:f9:8e: a6:08:6b:c5:c8:38:c9:ea:43:4c:7a:8a:78:db:da:1f:68:ed: c9:35:6d:67:56:75:5f:f8:61:fa:31:c0:27:6e:66:30:33:f6: c2:a4:5c:58:65:e4:0a:18:32:c2:d2:88:c0:ef:91:a5:11:ea: 9a:d8:33:9c:33:98:d9:e3:a7:4b:c8:09:38:38:09:e8:4c:da: 03:ab:c3:5a:6f:ee:f9:4d:61:6a:1e:be:0d:e2:a2:66:bc:12: fc:3d:2b:38:93:6e:53:a6:c4:c8:31:d6:d1:f0:f1:d8:2b:ad: 5e:21:e0:92:d2:8d:e2:a3:ce:83:fd:13:5f:3d:87:22:9a:96: 33:fd:74:eb:74:95:29:59:9c:bc:4d:3d:dc:dd:b5:00:e0:db: d5:93:dc:88:e6:93:b6:96:8f:e1:d7:a5:f9:63:60:45:7e:e3: bb:55:e0:09:e7:2f:34:9a:56:35:8b:0c:52:4b:60:2b:79:bc: 40:e7:5f:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwMjI4MTUzMTI3WhcNMjYwMzA3MTUzMTI3WjAYMRYwFAYD VQQDDA02OWEzMGE1MC0xZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZrI6g+i4RdCeczzv3J7sdDP4yK0w1I1uZhbBbqKdN/X6m32UIgr9spk1/bN /fZdfJAVnDtCGmI1KrX7Z98xepndIx8sgwReUQrMNzCpg2WpT4CLUkoJohcEbR1J h6n/lsC58sueJ8SPBOxUJBZtnhgOpaP9vRQJJWh22drycR8iQkx9nx6bYTSp9eR0 5sBv0i4Vis1LSk6uxNfbkSEjhVbcCJfUbqckJUg87eIoUudACQNHzmjF7vX4wV4u UrClfCuX6cMLGmvZbpN9Q5aHjT3xqKt9Va4fEAdC8wbO8KhSrP4EnrareKEvgUpS +h1Iv7KMOIg9lCNmq0pCH0UAhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI9RXqT ZSa1Q3TFW9/3Nehn+vKTMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzkcaKqD9o062InePHHt+Nhm7zP1oElvEf1D2lluWZi6gFfWgxRUdP0d/zhmE fzC82x3+DOE5MXJtUSxuGVY/p5oQcB7j7vmOpghrxcg4yepDTHqKeNvaH2jtyTVt Z1Z1X/hh+jHAJ25mMDP2wqRcWGXkChgywtKIwO+RpRHqmtgznDOY2eOnS8gJODgJ 6EzaA6vDWm/u+U1hah6+DeKiZrwS/D0rOJNuU6bEyDHW0fDx2CutXiHgktKN4qPO g/0TXz2HIpqWM/1063SVKVmcvE093N21AODb1ZPciOaTtpaP4del+WNgRX7ju1Xg CecvNJpWNYsMUktgK3m8QOdfeg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:12:55 2026 by rpki-client