$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: hp49+85Ua+JOWxf+aSUncF/7jpHyFh/wMcHQu/qcfAI= Subject key identifier: C2:45:F7:F3:E7:1E:FE:BA:A1:F9:67:83:CF:9D:D7:A2:4B:40:43:FB Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 11BD Signing time: Thu 16 Apr 2026 17:06:45 +0000 Manifest this update: Thu 16 Apr 2026 17:06:44 +0000 Manifest next update: Thu 23 Apr 2026 17:06:44 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: M7LYJ3EF69sk0nyhbfCSzRh8U8zNjtyakGTqW2uu9JQ=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4552 (0x11c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Apr 16 17:06:44 2026 GMT Not After : Apr 23 17:06:44 2026 GMT Subject: CN=69e11724-645f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:5f:d6:0b:96:7c:a5:b5:db:41:54:00:16: 26:a1:93:7a:49:47:5e:c7:54:aa:1c:fa:63:9c:12: ec:8c:fb:a1:a0:66:5c:13:25:ca:54:52:dd:c3:3e: 19:92:9e:ba:57:63:66:e4:2b:d9:82:6a:22:c8:c1: 3d:a2:ed:93:51:da:dd:a0:b6:bd:32:69:a4:fd:0c: 9b:25:a7:33:6c:8c:dc:1f:66:b4:93:ab:34:76:91: 74:61:eb:d6:fc:84:c2:00:b0:a5:68:57:a3:16:15: f0:37:bd:17:93:9a:00:85:aa:5b:23:c8:72:83:c1: f5:1e:5a:43:b5:37:1d:e4:41:cd:b1:85:2e:42:16: 35:4f:11:6e:53:ca:34:7c:72:72:04:8a:fc:6d:ce: a9:47:d3:17:fd:cd:31:0c:2c:e7:fa:f6:e2:12:81: 2f:1f:a5:bc:8b:00:d2:57:a3:20:3c:15:93:33:28: d0:dd:d6:6a:9e:37:64:52:ea:4d:56:60:08:c4:88: 50:17:92:99:ef:73:c3:5e:9a:77:c9:93:86:01:1d: 47:2a:c3:52:cd:62:03:02:18:37:a4:18:ef:05:52: 84:b5:37:f6:bf:6c:6f:3e:83:59:d1:da:f9:6f:e1: 85:a6:18:67:37:87:b6:9a:b6:93:75:f4:c0:00:5f: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:45:F7:F3:E7:1E:FE:BA:A1:F9:67:83:CF:9D:D7:A2:4B:40:43:FB X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3e:cb:a7:77:41:b8:1b:fd:b2:39:d6:00:fc:fa:dc:6f:10: 0d:97:ee:22:82:ae:a6:bd:47:d8:f5:29:78:91:d6:94:bb:f0: d4:4a:56:57:cb:46:08:7d:8b:49:ae:43:d0:f5:35:4c:8c:f5: 0c:2e:b4:04:09:9e:e1:79:86:c7:82:4f:63:75:a0:37:55:d1: b6:a3:1a:3c:1a:17:0d:6e:2b:a7:eb:bb:5e:ec:63:bd:16:e9: d4:b9:92:c6:2b:3c:c9:9a:53:45:25:e6:a3:50:d3:03:88:f6: e6:54:05:0c:02:5e:c0:46:5d:a4:4a:38:ce:84:e2:6b:85:7c: 3b:a4:41:34:ef:b3:6c:b1:1a:2e:35:57:2e:dc:eb:e1:8b:16: 90:67:4b:40:e3:e2:83:f1:74:f1:57:61:e3:e3:f5:f4:3d:2f: f1:b5:c0:89:8d:c5:cf:92:09:e9:55:ec:8e:ef:c3:99:6c:7f: e0:9b:92:7b:41:77:49:8b:ea:7f:d9:78:6d:06:02:83:86:26: f6:8f:89:fb:c6:72:02:00:51:99:42:b8:4e:0c:9e:9e:f0:2f: fb:51:9c:07:05:d1:89:3f:2a:ad:c7:b9:02:93:73:a7:09:b0: 7a:3d:41:32:c0:35:75:f1:c9:9b:81:6c:2e:20:95:ee:ad:8a: 19:6b:41:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwNDE2MTcwNjQ0WhcNMjYwNDIzMTcwNjQ0WjAYMRYwFAYD VQQDEw02OWUxMTcyNC02NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa1f1guWfKW120FUABYmoZN6SUdex1SqHPpjnBLsjPuhoGZcEyXKVFLdwz4Z kp66V2Nm5CvZgmoiyME9ou2TUdrdoLa9Mmmk/QybJaczbIzcH2a0k6s0dpF0YevW /ITCALClaFejFhXwN70Xk5oAhapbI8hyg8H1HlpDtTcd5EHNsYUuQhY1TxFuU8o0 fHJyBIr8bc6pR9MX/c0xDCzn+vbiEoEvH6W8iwDSV6MgPBWTMyjQ3dZqnjdkUupN VmAIxIhQF5KZ73PDXpp3yZOGAR1HKsNSzWIDAhg3pBjvBVKEtTf2v2xvPoNZ0dr5 b+GFphhnN4e2mraTdfTAAF8qtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJF9/Pn Hv66oflng8+d16JLQEP7MB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApj7Lp3dBuBv9sjnWAPz63G8QDZfuIoKupr1H2PUpeJHWlLvw1EpWV8tGCH2L Sa5D0PU1TIz1DC60BAme4XmGx4JPY3WgN1XRtqMaPBoXDW4rp+u7XuxjvRbp1LmS xis8yZpTRSXmo1DTA4j25lQFDAJewEZdpEo4zoTia4V8O6RBNO+zbLEaLjVXLtzr 4YsWkGdLQOPig/F08Vdh4+P19D0v8bXAiY3Fz5IJ6VXsju/DmWx/4JuSe0F3SYvq f9l4bQYCg4Ym9o+J+8ZyAgBRmUK4TgyenvAv+1GcBwXRiT8qrce5ApNzpwmwej1B MsA1dfHJm4FsLiCV7q2KGWtB2A== -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:43 2026 by rpki-client