$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: pMlOxi06ulFr8a8HCwrCuejElGItVIDmVPS5tbLO3IY= Subject key identifier: 59:CE:31:67:5A:0F:15:6D:C3:3C:E5:4A:95:00:C0:C5:4D:AA:FB:95 Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 48 Signing time: Fri 17 Apr 2026 08:04:50 +0000 Manifest this update: Fri 17 Apr 2026 08:04:50 +0000 Manifest next update: Fri 24 Apr 2026 08:04:50 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: mAR6Pem5SoZOcPrN17fJ2q1u0dvrSU0jztOL/MKqHwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Apr 17 08:04:50 2026 GMT Not After : Apr 24 08:04:50 2026 GMT Subject: CN=69e1e9a2-d381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:96:15:d4:6e:81:45:6c:63:76:8c:05:c8: 11:1e:05:58:e8:e1:bb:5c:6b:f6:5d:2c:36:87:b1: 99:91:81:a6:e7:56:55:59:9d:45:64:be:d1:7b:d0: 7a:fb:3a:e6:ae:cf:bb:33:3d:fb:10:74:78:ce:41: 1d:8b:54:8d:ae:b2:61:96:6d:34:26:9f:ae:2d:19: 2a:ae:c7:7e:fd:81:37:16:a2:de:1b:af:35:e9:58: 3a:ca:b7:81:c2:2d:28:b3:f1:5a:ed:c3:b3:b4:12: 1e:fe:40:dc:cd:ae:33:64:38:24:92:b1:f1:51:c3: e7:63:df:d7:a0:79:d5:56:4f:25:f8:22:af:cf:e0: cb:cb:fa:08:33:09:0d:91:2c:09:a6:ad:6f:bf:db: 36:77:72:7c:67:5d:3b:5d:f1:53:6d:07:d0:ae:31: 4b:3d:10:f1:21:23:7d:e9:53:26:cd:51:9e:31:6a: 27:22:dd:30:e7:42:23:d0:15:d1:53:14:59:04:67: ea:5a:b8:8a:72:03:6b:9c:89:a2:94:8d:e5:63:4f: c2:72:43:51:bc:5f:07:7a:6c:51:24:aa:dd:b8:21: d4:94:07:53:66:05:a4:17:3f:46:64:29:d7:0b:35: 0c:19:00:2d:34:92:3d:13:06:6a:ef:3a:20:cd:ce: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:31:67:5A:0F:15:6D:C3:3C:E5:4A:95:00:C0:C5:4D:AA:FB:95 X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d3:ce:b4:71:96:b9:e7:a7:40:ef:a5:46:2b:b2:c2:d5:76: e4:78:ff:02:21:ee:8e:29:41:f5:35:4a:96:1d:da:30:69:2f: 86:0e:c6:d5:73:56:62:9a:24:84:c0:37:c6:1d:56:8d:bc:14: ba:42:02:61:ed:b9:69:0e:9d:16:bf:6a:a0:ea:3c:91:1c:22: a2:d7:8c:e6:23:e0:7f:71:87:fa:21:f9:9e:02:41:4a:62:a6: 5d:fa:06:04:f7:8b:0e:b9:24:f6:36:3b:3c:0e:47:31:9e:ca: cc:fc:dc:4f:36:64:da:58:ea:b4:0c:79:41:bc:1c:63:51:d8: ec:47:fe:7c:64:c8:ed:67:45:26:a9:ce:6d:4b:cd:98:50:10: b0:f5:f2:7d:45:99:b9:6a:ee:73:fb:b7:87:17:44:69:13:5c: c2:e9:1f:e1:80:b8:0d:51:96:90:ca:31:9f:d9:b3:46:fd:c5: 39:44:a7:78:01:b0:c0:79:b1:c9:bd:58:6a:44:7c:ef:19:0c: 55:8d:81:81:fe:f5:2d:3d:4b:76:06:d1:f1:76:ad:08:38:cc: 6e:77:90:c8:01:14:11:50:04:2a:66:e0:c0:7b:31:b1:dd:44: 6f:43:7d:f2:c7:85:83:e5:c9:f6:8c:e2:e1:47:02:71:47:46: e0:cd:e9:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNjA0MTcwODA0NTBaFw0yNjA0MjQwODA0NTBaMBgxFjAUBgNV BAMTDTY5ZTFlOWEyLWQzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0N5YV1G6BRWxjdowFyBEeBVjo4btca/ZdLDaHsZmRgabnVlVZnUVkvtF70Hr7 Ouauz7szPfsQdHjOQR2LVI2usmGWbTQmn64tGSqux379gTcWot4brzXpWDrKt4HC LSiz8Vrtw7O0Eh7+QNzNrjNkOCSSsfFRw+dj39egedVWTyX4Iq/P4MvL+ggzCQ2R LAmmrW+/2zZ3cnxnXTtd8VNtB9CuMUs9EPEhI33pUybNUZ4xaici3TDnQiPQFdFT FFkEZ+pauIpyA2uciaKUjeVjT8JyQ1G8Xwd6bFEkqt24IdSUB1NmBaQXP0ZkKdcL NQwZAC00kj0TBmrvOiDNzoZhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWc4xZ1oP FW3DPOVKlQDAxU2q+5UwHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAu0860cZa556dA76VGK7LC1XbkeP8CIe6OKUH1NUqWHdowaS+GDsbVc1ZimiSE wDfGHVaNvBS6QgJh7blpDp0Wv2qg6jyRHCKi14zmI+B/cYf6IfmeAkFKYqZd+gYE 94sOuST2Njs8DkcxnsrM/NxPNmTaWOq0DHlBvBxjUdjsR/58ZMjtZ0Umqc5tS82Y UBCw9fJ9RZm5au5z+7eHF0RpE1zC6R/hgLgNUZaQyjGf2bNG/cU5RKd4AbDAebHJ vVhqRHzvGQxVjYGB/vUtPUt2BtHxdq0IOMxud5DIARQRUAQqZuDAezGx3URvQ33y x4WD5cn2jOLhRwJxR0bgzek2 -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:18 2026 by rpki-client