$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: obX5QqBAp8aQ4PvSrnVBiBEegKbz3gicO0MSIPQ2Ehk= Subject key identifier: C0:AB:AB:D7:C0:A3:C8:6D:D3:9B:4E:C6:66:B3:F8:7B:A2:04:10:1A Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 47 Signing time: Sun 01 Mar 2026 09:45:12 +0000 Manifest this update: Sun 01 Mar 2026 09:45:11 +0000 Manifest next update: Sun 08 Mar 2026 09:45:11 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: TkUFDIvRl7yrnwFjf6aAlA4I4CVzw3ZIHQ9eHtyDLQk=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: cUM/YRlGCUalihANb69w5cZ0Y6p6DB5jdCl/LBiwJeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Mar 1 09:45:11 2026 GMT Not After : Mar 8 09:45:11 2026 GMT Subject: CN=69a40aa8-4b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:c1:2e:14:be:19:fa:a2:4d:e2:e4:b5:50: 7f:24:b5:b7:0e:02:ef:ef:2f:a2:ab:c9:14:ee:dc: 82:fb:4e:cd:db:8e:8c:42:ad:6c:b4:09:a0:8e:55: 93:00:53:33:15:01:c8:07:49:e7:b1:89:b6:b3:52: 31:f5:74:a1:64:45:f6:74:c3:58:11:d6:cc:65:6a: 48:04:7f:f2:af:f9:ec:52:b7:d5:c2:45:b2:b5:0a: c7:3f:3c:2b:d8:c3:1d:d2:66:67:67:78:a5:fe:68: 45:c5:78:82:13:3c:65:a9:44:77:02:d4:88:be:c9: bb:53:e4:14:af:9a:cc:33:48:b9:6a:ae:52:79:17: b9:61:6e:2a:1b:21:07:ce:41:78:74:19:22:54:46: b2:73:16:e3:42:c9:54:6f:99:18:9a:f3:78:01:40: 9f:a0:ea:a0:89:93:cd:3e:c9:98:ab:77:13:6a:84: 86:08:c8:a6:4a:cc:c2:74:9b:ed:3f:18:91:f5:bc: 31:c7:1b:bc:69:0d:d1:66:e8:5b:33:26:3e:03:0d: 1c:79:b3:35:e7:2b:3e:37:15:8b:4b:9f:ff:9e:c1: d9:e3:2a:c8:c6:7f:1f:8e:d2:3f:59:b2:71:4f:78: c5:8f:27:78:b3:ef:bc:9d:08:30:b5:5a:12:d2:ff: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AB:AB:D7:C0:A3:C8:6D:D3:9B:4E:C6:66:B3:F8:7B:A2:04:10:1A X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:70:66:f2:bb:08:1c:20:c4:b1:cc:98:11:f8:1d:03:17:25: 60:e7:db:f0:67:bd:49:d5:c3:4c:17:8a:00:4a:42:76:32:e9: cf:41:6f:78:43:69:70:5c:73:f0:7c:cc:c2:e7:1d:2b:3d:8f: 4a:cc:bd:fb:21:30:51:25:ed:d4:d9:b6:bd:25:68:b6:99:7c: b8:aa:7a:01:7f:b2:a1:27:5b:03:84:eb:1a:ca:39:0b:4a:d0: cf:0a:68:7c:19:38:61:e5:fa:91:0b:0b:81:5b:8a:a4:62:43: 49:c6:d2:56:70:54:e5:13:5e:9c:16:77:c9:7d:3b:6b:b4:e0: cc:9e:87:d5:32:32:1c:be:5e:0d:8f:86:05:e0:fb:1c:48:b4: 3b:38:a8:e2:20:20:91:83:b7:18:f6:b8:92:f4:07:1a:a6:bf: 0b:3c:f6:e2:79:df:1f:83:e4:07:34:71:9d:4d:89:a0:74:12: 66:72:e5:60:2e:3b:ed:b4:ff:c2:5c:6a:b7:51:1c:c1:d4:1e: 9c:53:cf:a5:ee:40:df:13:47:8a:4e:b2:4a:43:5b:34:7a:4e: 53:cb:0d:48:f7:3f:06:ef:2d:8f:91:5d:ee:f7:21:0b:63:1f: 08:75:08:4a:a3:41:1d:11:11:14:ac:94:ec:0b:00:16:62:97: 27:c1:3b:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNjAzMDEwOTQ1MTFaFw0yNjAzMDgwOTQ1MTFaMBgxFjAUBgNV BAMTDTY5YTQwYWE4LTRiNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0/cEuFL4Z+qJN4uS1UH8ktbcOAu/vL6KryRTu3IL7Ts3bjoxCrWy0CaCOVZMA UzMVAcgHSeexibazUjH1dKFkRfZ0w1gR1sxlakgEf/Kv+exSt9XCRbK1Csc/PCvY wx3SZmdneKX+aEXFeIITPGWpRHcC1Ii+ybtT5BSvmswzSLlqrlJ5F7lhbiobIQfO QXh0GSJURrJzFuNCyVRvmRia83gBQJ+g6qCJk80+yZirdxNqhIYIyKZKzMJ0m+0/ GJH1vDHHG7xpDdFm6FszJj4DDRx5szXnKz43FYtLn/+ewdnjKsjGfx+O0j9ZsnFP eMWPJ3iz77ydCDC1WhLS/xQhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwKur18Cj yG3Tm07GZrP4e6IEEBowHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDYcGbyuwgcIMSxzJgR+B0DFyVg59vwZ71J1cNMF4oASkJ2MunPQW94Q2lwXHPw fMzC5x0rPY9KzL37ITBRJe3U2ba9JWi2mXy4qnoBf7KhJ1sDhOsayjkLStDPCmh8 GThh5fqRCwuBW4qkYkNJxtJWcFTlE16cFnfJfTtrtODMnofVMjIcvl4Nj4YF4Psc SLQ7OKjiICCRg7cY9riS9Acapr8LPPbied8fg+QHNHGdTYmgdBJmcuVgLjvttP/C XGq3URzB1B6cU8+l7kDfE0eKTrJKQ1s0ek5Tyw1I9z8G7y2PkV3u9yELYx8IdQhK o0EdEREUrJTsCwAWYpcnwTvs -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:09 2026 by rpki-client