$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: TNpSafakHiPFMpDo+eZ8EFE45shBvSWeRZ0ldnskcR0= Subject key identifier: AC:E0:42:B9:F5:FE:07:DB:BB:0C:9A:4B:2B:87:34:E8:51:8B:60:E7 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 0287 Signing time: Fri 17 Apr 2026 01:39:00 +0000 Manifest this update: Fri 17 Apr 2026 01:39:00 +0000 Manifest next update: Fri 24 Apr 2026 01:39:00 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: vbx0cpEfT+Ysg15ZhH4pTvdRPipOFlgYaqOyNc0++XE=) 2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=) 3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=) 4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Apr 17 01:39:00 2026 GMT Not After : Apr 24 01:39:00 2026 GMT Subject: CN=69e18f34-589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:e5:52:1e:46:41:07:33:5c:37:7f:c2:c2: 54:5d:ed:71:ec:b5:76:b6:42:76:e8:08:f4:6f:e5: 51:a9:fb:ce:00:1d:2d:a6:3e:0e:f5:45:13:41:e4: 91:9f:a4:a6:f0:94:77:10:8c:28:1e:4a:f7:28:6f: f9:c4:df:b1:47:cc:33:0f:bb:34:cc:75:3d:84:b8: f9:32:e5:98:1b:8f:9d:e9:99:f1:5a:08:bc:7f:7b: a8:85:68:1f:bf:b9:b7:86:84:71:97:ba:e3:a0:5a: 89:8e:c9:80:43:3d:b4:cf:e0:22:2d:89:da:63:3d: f6:65:da:50:ca:d8:89:84:12:78:3b:4f:6a:c6:2a: 90:45:18:f5:41:b3:94:b2:00:26:cb:ea:04:cb:30: 72:d1:bf:33:9d:68:75:5d:fa:50:2a:03:f1:76:08: a8:e5:96:fc:e1:4e:93:18:d2:88:bc:36:94:b9:50: 01:53:7c:9d:2d:63:7b:00:16:64:db:f9:cc:ba:0d: f8:c7:1f:c4:40:75:17:5c:40:40:34:81:3a:3f:6d: 01:30:ed:48:54:fb:cd:49:d5:d2:57:49:7d:4d:95: 41:9a:6c:fe:f9:40:b9:24:1c:67:77:f0:b1:50:36: ab:b9:db:78:50:92:2d:e3:c3:9b:f7:96:23:1b:4e: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:42:B9:F5:FE:07:DB:BB:0C:9A:4B:2B:87:34:E8:51:8B:60:E7 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d1:ee:e0:01:c8:09:1c:3a:f1:00:f8:fd:58:e8:fd:80:e3: f4:ba:27:c3:38:4e:74:44:0e:30:f4:4d:d8:af:b7:3a:cb:0b: 6b:3a:5f:57:ad:b8:27:0c:27:f6:4c:45:9d:67:93:4c:80:bc: 95:39:5e:65:fc:2c:77:08:17:ce:99:90:36:de:e2:bb:19:b0: bf:83:4a:d9:23:23:11:bc:d0:e2:d9:e6:8e:61:ef:6c:14:ae: fd:a4:0a:a1:d0:89:2a:cd:2f:0e:83:cf:36:e6:2b:9a:24:ea: bf:01:a9:aa:07:69:8b:0e:3a:74:06:e6:b8:1d:0d:9a:ca:64: 5c:71:c2:46:58:e7:3e:3d:09:84:01:40:2d:66:0d:30:95:b9: 30:51:93:69:b5:a6:7e:12:3f:de:c3:36:67:91:7c:61:57:c5: be:f9:57:c9:da:2d:97:a8:8d:71:95:9d:3c:bd:bd:63:ff:86: 23:45:17:7a:33:bc:c4:1d:64:32:46:92:c1:87:04:9e:01:ac: f8:54:ad:c7:71:d0:b9:cf:f1:b2:33:1b:bb:c3:d8:9d:7d:5e: 4d:55:59:9b:d9:e9:a9:a2:40:b9:19:6c:7b:36:02:b3:7c:f2: 7b:a9:78:5b:37:6e:0c:dc:84:b5:fc:e2:a0:4e:d5:63:01:8a: f7:e7:36:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjYwNDE3MDEzOTAwWhcNMjYwNDI0MDEzOTAwWjAYMRYwFAYD VQQDEw02OWUxOGYzNC01ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTnlUh5GQQczXDd/wsJUXe1x7LV2tkJ26Aj0b+VRqfvOAB0tpj4O9UUTQeSR n6Sm8JR3EIwoHkr3KG/5xN+xR8wzD7s0zHU9hLj5MuWYG4+d6ZnxWgi8f3uohWgf v7m3hoRxl7rjoFqJjsmAQz20z+AiLYnaYz32ZdpQytiJhBJ4O09qxiqQRRj1QbOU sgAmy+oEyzBy0b8znWh1XfpQKgPxdgio5Zb84U6TGNKIvDaUuVABU3ydLWN7ABZk 2/nMug34xx/EQHUXXEBANIE6P20BMO1IVPvNSdXSV0l9TZVBmmz++UC5JBxnd/Cx UDarudt4UJIt48Ob95YjG05yXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzgQrn1 /gfbuwyaSyuHNOhRi2DnMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANdHu4AHICRw68QD4/Vjo/YDj9LonwzhOdEQOMPRN2K+3OssLazpfV624Jwwn 9kxFnWeTTIC8lTleZfwsdwgXzpmQNt7iuxmwv4NK2SMjEbzQ4tnmjmHvbBSu/aQK odCJKs0vDoPPNuYrmiTqvwGpqgdpiw46dAbmuB0NmspkXHHCRljnPj0JhAFALWYN MJW5MFGTabWmfhI/3sM2Z5F8YVfFvvlXydotl6iNcZWdPL29Y/+GI0UXejO8xB1k MkaSwYcEngGs+FStx3HQuc/xsjMbu8PYnX1eTVVZm9npqaJAuRlsezYCs3zye6l4 WzduDNyEtfzioE7VYwGK9+c2Rw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:28:33 2026 by rpki-client