$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: Plo+im5I2uiSj08MkhmEmMiECjfyHLtNLwMxsvQUNrQ= Subject key identifier: FF:81:C3:8D:2E:92:28:4D:10:57:13:44:02:0D:46:E7:DA:2A:BC:CF Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 59 Signing time: Fri 17 Apr 2026 01:45:29 +0000 Manifest this update: Fri 17 Apr 2026 01:45:29 +0000 Manifest next update: Fri 24 Apr 2026 01:45:29 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: bFS31kz7D4ixhRU/ECnkkKxjs3iUO42PAlJoAv5oTdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Apr 17 01:45:29 2026 GMT Not After : Apr 24 01:45:29 2026 GMT Subject: CN=69e190b9-666b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:bf:a0:e3:26:40:9c:8d:5b:1f:76:31:46: c5:01:67:3f:b1:97:62:ce:b6:3f:8f:2b:e0:c3:6d: d1:40:e0:0e:4c:df:10:90:22:d1:bb:f5:b5:62:d2: 25:02:d7:9d:bc:62:73:82:1a:5a:be:78:48:f2:32: 64:bb:2a:58:68:0c:37:a4:ca:f2:21:fb:38:6d:1a: fb:c7:7f:62:7f:bf:2c:7d:b4:68:c5:ac:18:46:6a: b2:11:d2:e9:99:d6:cf:c9:6c:6e:72:7a:48:ee:17: 0a:ed:1d:97:89:96:e2:3a:b7:d7:90:83:40:99:74: e7:22:9a:31:d2:18:fe:0c:fb:52:e5:c5:30:48:41: cf:95:b9:f8:0d:b2:b1:c3:f7:ce:e5:d6:28:dd:db: 63:ec:ae:b9:33:1f:6d:06:42:eb:02:ae:16:06:0c: 06:e7:6a:2e:43:f5:49:0d:d6:fd:3e:4e:91:67:22: d6:72:62:ef:73:d2:c6:bd:17:6e:51:c3:a1:8e:cd: ac:d6:f2:44:8b:48:c8:f6:7a:9e:34:b9:33:8b:1e: 79:9b:c7:81:92:21:f8:73:77:16:fe:a1:ea:c7:c0: 27:ae:f8:8e:34:e9:be:4c:d9:68:5b:61:60:e9:87: 37:d7:83:20:4b:3c:48:f6:f6:53:3d:f1:e3:e6:99: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:81:C3:8D:2E:92:28:4D:10:57:13:44:02:0D:46:E7:DA:2A:BC:CF X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f0:ce:c3:2c:ce:1f:27:cd:db:58:ee:ea:f3:5e:83:89:53: e4:3e:7f:12:d9:8c:81:e4:1b:c6:55:c4:03:bf:3c:69:2c:c6: 9e:f9:bf:b4:f3:65:b2:af:86:40:fd:cc:63:f3:37:88:82:f9: b1:e0:20:09:3a:2c:3b:93:11:96:95:9b:f5:c3:bf:99:4f:2d: 47:aa:f5:54:ea:af:7c:0c:2e:24:bd:ae:83:e3:f7:46:f1:f4: cb:16:7a:c6:af:fc:a7:df:b6:5b:6b:24:bf:e8:65:b5:da:80: 6e:4e:9b:11:0d:43:77:74:90:70:5b:aa:64:dc:ee:38:56:f0: b2:c3:55:92:1f:38:ad:2e:6e:88:7b:2d:5e:98:79:3e:5d:d8: 70:23:c7:9a:a5:4d:0d:35:e4:a1:d8:b2:a9:33:54:d2:d4:24: d4:3b:82:fe:11:48:ed:a1:c3:59:4a:95:7b:2f:f8:57:a4:0b: 8a:36:a9:3b:dc:cb:53:29:5b:72:51:07:d9:45:02:7e:bc:9d: ae:fe:11:77:44:1b:ea:ac:57:4c:ad:de:87:26:fe:e5:44:10: c2:4a:0b:ce:e6:ac:98:14:f5:dd:5d:df:d7:d9:02:c2:66:76: 6a:f3:0e:9e:5f:e8:0e:0b:68:56:17:55:e2:56:ad:cb:b1:98: 6c:05:83:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNjA0MTcwMTQ1MjlaFw0yNjA0MjQwMTQ1MjlaMBgxFjAUBgNV BAMTDTY5ZTE5MGI5LTY2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhYr+g4yZAnI1bH3YxRsUBZz+xl2LOtj+PK+DDbdFA4A5M3xCQItG79bVi0iUC 1528YnOCGlq+eEjyMmS7KlhoDDekyvIh+zhtGvvHf2J/vyx9tGjFrBhGarIR0umZ 1s/JbG5yekjuFwrtHZeJluI6t9eQg0CZdOcimjHSGP4M+1LlxTBIQc+VufgNsrHD 987l1ijd22PsrrkzH20GQusCrhYGDAbnai5D9UkN1v0+TpFnItZyYu9z0sa9F25R w6GOzazW8kSLSMj2ep40uTOLHnmbx4GSIfhzdxb+oerHwCeu+I406b5M2WhbYWDp hzfXgyBLPEj29lM98ePmmX47AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/4HDjS6S KE0QVxNEAg1G59oqvM8wHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAD8M7DLM4fJ83bWO7q816DiVPkPn8S2YyB5BvGVcQDvzxpLMae+b+082Wyr4ZA /cxj8zeIgvmx4CAJOiw7kxGWlZv1w7+ZTy1HqvVU6q98DC4kva6D4/dG8fTLFnrG r/yn37ZbayS/6GW12oBuTpsRDUN3dJBwW6pk3O44VvCyw1WSHzitLm6Iey1emHk+ XdhwI8eapU0NNeSh2LKpM1TS1CTUO4L+EUjtocNZSpV7L/hXpAuKNqk73MtTKVty UQfZRQJ+vJ2u/hF3RBvqrFdMrd6HJv7lRBDCSgvO5qyYFPXdXd/X2QLCZnZq8w6e X+gOC2hWF1XiVq3LsZhsBYOa -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:15 2026 by rpki-client