$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: S6UFcGx68kyAdMV5DBlklXJRiVDzd7zf3vi4hzWnYM4= Subject key identifier: FD:C2:EF:24:EA:09:1C:53:BB:46:E7:63:02:6B:F6:A2:96:F5:1B:49 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 079B Signing time: Thu 16 Apr 2026 21:25:09 +0000 Manifest this update: Thu 16 Apr 2026 21:25:08 +0000 Manifest next update: Thu 23 Apr 2026 21:25:08 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: j2PNu+C8ePk41s8zie9pTGurSn2BmOreMcvPRzHqZlU=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: zBDrIrM5ZNmyGZZJoQehnFsEZgI4D/QOvG+mRLYkJ1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Apr 16 21:25:08 2026 GMT Not After : Apr 23 21:25:08 2026 GMT Subject: CN=69e153b5-b6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:66:1f:f8:b0:7f:8c:e6:46:66:7f:3d:38:fe: ad:db:48:72:a8:be:5d:d8:3c:d0:1e:83:e2:ae:9d: e3:91:39:f0:39:1c:0c:86:1d:dc:a7:ea:bd:d0:36: f8:aa:f6:e3:4f:6b:8e:55:20:72:41:aa:d2:f2:82: fd:55:69:30:bb:e8:e2:86:40:86:1d:2c:32:d6:04: 74:ae:c0:ae:1a:93:cb:27:f3:f7:68:e5:57:14:9f: 26:49:46:7a:b2:77:a9:03:04:bc:63:d4:95:ea:49: a1:ea:28:08:cb:35:aa:e8:7b:67:f0:0e:bf:93:be: 93:47:7f:dd:5b:e1:cc:2d:aa:68:1c:cf:e7:16:b1: 33:f6:0f:fc:df:e5:0a:98:4e:5e:aa:d5:b7:a5:8d: ee:e7:24:c8:83:3e:8a:10:73:c6:d3:0c:27:c8:03: 6a:9d:0a:e5:d1:e8:34:f6:e7:fb:0a:80:b2:52:8d: e0:e2:8f:e4:e5:72:2e:c1:d9:ce:3f:c1:97:95:08: 64:47:62:39:2f:45:e2:0b:e5:6f:3f:7a:66:ca:b7: 7d:c5:37:7d:aa:bd:94:e0:4e:47:77:2f:7c:a2:b7: 73:e5:1b:f8:8d:52:fd:c0:2d:00:2c:56:a4:87:29: 81:86:8c:b7:07:3d:67:f3:89:85:41:bb:eb:80:e9: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:EF:24:EA:09:1C:53:BB:46:E7:63:02:6B:F6:A2:96:F5:1B:49 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:10:bd:38:ed:73:86:2b:8e:41:cf:b1:e4:9a:65:24:a1: 15:37:50:f6:eb:a7:10:f3:8c:fc:13:84:26:76:52:a8:54:9a: e4:f4:e3:af:9f:e4:62:97:9c:84:d8:58:1b:0b:c4:c6:5d:3b: 43:74:81:c1:72:bb:40:e5:75:9f:44:1d:7b:dd:91:00:7b:54: 9e:49:0d:a8:ee:08:68:65:2e:f0:62:65:25:10:d6:4c:2d:d2: 73:63:8e:25:44:86:8a:c3:ce:e4:05:0e:91:ca:4d:53:29:08: 2d:de:54:49:3b:3e:3e:4f:97:e5:70:bd:2e:4b:b0:7c:b4:f8: bd:8e:20:54:d7:8f:c5:e2:05:84:87:28:5a:2e:9e:bb:b7:ab: fa:20:32:99:5d:bc:63:f2:2b:ba:a3:c3:2d:9a:67:d7:d2:ff: ca:99:6a:37:65:20:6a:6b:71:19:63:67:99:86:78:70:fa:26: 46:0a:c3:98:63:36:f2:3d:61:7f:24:b8:b4:ac:c1:f2:7d:62: 93:52:79:6f:5f:e2:fd:a6:bd:58:4e:35:bb:93:69:25:69:8f: b7:51:e5:0f:81:00:8b:91:3b:82:e3:60:e2:12:16:e2:e9:ed: aa:75:87:99:fb:f5:02:cc:50:28:8f:7d:80:aa:d9:f5:6b:61: 9a:91:e0:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjYwNDE2MjEyNTA4WhcNMjYwNDIzMjEyNTA4WjAYMRYwFAYD VQQDEw02OWUxNTNiNS1iNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mYf+LB/jOZGZn89OP6t20hyqL5d2DzQHoPirp3jkTnwORwMhh3cp+q90Db4 qvbjT2uOVSByQarS8oL9VWkwu+jihkCGHSwy1gR0rsCuGpPLJ/P3aOVXFJ8mSUZ6 snepAwS8Y9SV6kmh6igIyzWq6Htn8A6/k76TR3/dW+HMLapoHM/nFrEz9g/83+UK mE5eqtW3pY3u5yTIgz6KEHPG0wwnyANqnQrl0eg09uf7CoCyUo3g4o/k5XIuwdnO P8GXlQhkR2I5L0XiC+VvP3pmyrd9xTd9qr2U4E5Hdy98ordz5Rv4jVL9wC0ALFak hymBhoy3Bz1n84mFQbvrgOnh1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3C7yTq CRxTu0bnYwJr9qKW9RtJMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7kQvTjtc4YrjkHPseSaZSShFTdQ9uunEPOM/BOEJnZSqFSa5PTjr5/kYpec hNhYGwvExl07Q3SBwXK7QOV1n0Qde92RAHtUnkkNqO4IaGUu8GJlJRDWTC3Sc2OO JUSGisPO5AUOkcpNUykILd5USTs+Pk+X5XC9LkuwfLT4vY4gVNePxeIFhIcoWi6e u7er+iAymV28Y/IruqPDLZpn19L/yplqN2UgamtxGWNnmYZ4cPomRgrDmGM28j1h fyS4tKzB8n1ik1J5b1/i/aa9WE41u5NpJWmPt1HlD4EAi5E7guNg4hIW4untqnWH mfv1AsxQKI99gKrZ9WthmpHgcg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:14 2026 by rpki-client