$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: d9CE9rGysFwkbQFWYIskKg2v6a25DWyPUW7P70rHi7c= Subject key identifier: 43:40:95:05:FA:C9:B4:20:B3:C9:75:7A:4A:3D:80:BC:77:98:16:AA Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 2405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 23F2 Signing time: Thu 16 Apr 2026 15:46:13 +0000 Manifest this update: Thu 16 Apr 2026 15:46:12 +0000 Manifest next update: Thu 23 Apr 2026 15:46:12 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: bGocnFyhi++lUIuJfeXoUiFCDgzzSBuuW8t6KN8mudU=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9221 (0x2405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Apr 16 15:46:12 2026 GMT Not After : Apr 23 15:46:12 2026 GMT Subject: CN=69e10445-5835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:85:c8:b9:06:09:4c:93:26:23:40:ca:fe: e5:79:90:24:55:b4:04:93:95:d8:07:44:d4:34:2c: dc:9a:04:e2:93:48:8e:01:80:c7:5c:f5:68:de:4b: 8f:d3:4b:47:15:71:ca:c3:30:3a:5b:34:01:9d:6d: 58:1c:fd:a5:be:3b:0f:d4:0f:61:c4:7a:4b:39:de: cd:d8:6f:17:c2:39:35:97:40:80:1f:37:a5:d1:4b: a4:19:cc:59:b8:5a:f7:be:f4:ad:70:15:b2:a6:ea: e3:63:e3:5f:95:74:84:37:d0:03:2b:54:40:b8:10: 2c:9c:b1:be:f9:41:02:72:ba:f4:d6:aa:e2:b0:fc: 33:3d:cf:a1:d6:12:11:29:b3:cb:fd:1b:a7:45:5f: 96:c5:1c:e1:52:e6:28:de:8c:f9:a7:95:56:9a:ea: 33:e9:9c:41:36:d5:24:dd:ac:0f:e0:66:e9:83:13: 3c:4a:41:ec:d0:7c:8b:88:50:86:f6:26:97:9b:e8: 50:95:50:ec:35:34:6d:a4:fc:bd:b1:fe:2e:d5:90: 0a:f8:7f:b5:29:a3:89:4c:2e:30:d0:c2:01:b6:23: fa:31:4e:41:82:fa:dd:ed:02:93:7a:8f:39:de:78: 08:de:f3:5a:63:cf:69:94:0b:9a:3e:8d:e6:1a:0d: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:40:95:05:FA:C9:B4:20:B3:C9:75:7A:4A:3D:80:BC:77:98:16:AA X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:26:08:62:b3:96:9b:05:a6:72:70:d6:4d:e2:e2:6d:25:e8: e8:ba:90:3f:6a:bc:07:ff:39:55:30:b5:2b:fb:38:cc:42:d1: 58:c0:87:f7:5e:5b:31:7c:41:86:8f:d3:30:0e:06:4b:09:be: 1b:98:84:57:38:1b:74:87:c5:e6:6f:3f:09:91:4c:c1:ad:49: 3b:a4:87:d9:88:9f:90:0b:a7:2a:12:af:a3:fa:3d:8d:43:e8: 10:79:c1:ca:8d:2f:08:58:ad:39:b0:4d:cf:1d:40:c2:e1:ba: 8f:03:02:56:cd:b8:e6:e4:ad:7e:0c:f6:82:32:88:67:22:4b: 72:ba:8a:d4:11:85:1f:c8:ce:db:10:fc:5a:0d:2f:c6:c3:fc: 44:d0:dd:44:04:f0:6a:d8:5a:96:d6:4c:ec:78:21:a8:93:f9: 22:0e:48:98:a1:5f:9d:05:a6:75:f7:cd:6d:c6:fd:c2:22:f8: 47:d3:45:60:2c:9c:04:8d:3a:6d:79:23:64:e0:f5:f4:fc:05: fd:29:51:cf:79:85:5c:46:3c:2d:d7:fc:e2:27:90:56:be:37: bb:7f:dd:b3:fa:db:92:bd:d2:db:8a:9c:51:f5:f1:d7:c7:27: 20:02:56:fc:35:5a:c3:89:8b:1a:e2:c2:a4:71:03:57:92:dd: 0f:fc:de:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjYwNDE2MTU0NjEyWhcNMjYwNDIzMTU0NjEyWjAYMRYwFAYD VQQDEw02OWUxMDQ0NS01ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlw2FyLkGCUyTJiNAyv7leZAkVbQEk5XYB0TUNCzcmgTik0iOAYDHXPVo3kuP 00tHFXHKwzA6WzQBnW1YHP2lvjsP1A9hxHpLOd7N2G8Xwjk1l0CAHzel0UukGcxZ uFr3vvStcBWypurjY+NflXSEN9ADK1RAuBAsnLG++UECcrr01qrisPwzPc+h1hIR KbPL/RunRV+WxRzhUuYo3oz5p5VWmuoz6ZxBNtUk3awP4GbpgxM8SkHs0HyLiFCG 9iaXm+hQlVDsNTRtpPy9sf4u1ZAK+H+1KaOJTC4w0MIBtiP6MU5Bgvrd7QKTeo85 3ngI3vNaY89plAuaPo3mGg2W0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENAlQX6 ybQgs8l1eko9gLx3mBaqMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxyYIYrOWmwWmcnDWTeLibSXo6LqQP2q8B/85VTC1K/s4zELRWMCH915bMXxB ho/TMA4GSwm+G5iEVzgbdIfF5m8/CZFMwa1JO6SH2YifkAunKhKvo/o9jUPoEHnB yo0vCFitObBNzx1AwuG6jwMCVs245uStfgz2gjKIZyJLcrqK1BGFH8jO2xD8Wg0v xsP8RNDdRATwathaltZM7HghqJP5Ig5ImKFfnQWmdffNbcb9wiL4R9NFYCycBI06 bXkjZOD19PwF/SlRz3mFXEY8Ldf84ieQVr43u3/ds/rbkr3S24qcUfXx18cnIAJW /DVaw4mLGuLCpHEDV5LdD/zeNw== -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:57 2026 by rpki-client