$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: 5wKrX2H6wE5ayv1Pz+HJSfjOznBSaHb8t4VoIWDWZLw= Subject key identifier: D9:98:76:1E:A6:B2:95:F7:4E:9B:99:58:C9:41:32:7F:3F:0A:35:DB Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0DAB Signing time: Thu 16 Apr 2026 17:50:29 +0000 Manifest this update: Thu 16 Apr 2026 17:50:28 +0000 Manifest next update: Thu 23 Apr 2026 17:50:28 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: Glx76ZXo3e4YTswobLr471+ERY2meo7ZhZTv1Gbdf9c=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: DgN4HYG0Ge4rNgYzbp7pU5juBkf2LCQihGrPJdM6ERY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Apr 16 17:50:28 2026 GMT Not After : Apr 23 17:50:28 2026 GMT Subject: CN=69e12165-bcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:08:22:cc:49:da:98:91:81:97:02:19:b1: 39:53:87:9c:22:a4:a0:74:5d:a8:f0:8f:c2:09:21: a0:3c:81:df:d4:f4:cc:b6:d8:28:19:21:df:0e:c7: ef:a8:76:3a:e1:1a:4a:c6:b3:b9:12:0f:7e:54:0b: da:06:0a:de:95:f6:90:d8:ad:57:ea:8b:e6:7f:af: 96:3e:a9:a5:b2:f3:e8:61:ad:54:df:54:46:ae:e6: 2a:c3:4c:13:f2:28:c4:d0:bb:6f:c3:d8:30:42:75: e8:0f:07:c2:99:28:bb:db:66:58:bb:2d:dc:04:5a: 59:29:ae:54:f8:11:53:f9:5d:af:ed:28:d7:89:27: c7:03:39:0c:e3:0e:c6:82:0b:a0:e7:b0:8b:8a:54: 3d:aa:b6:72:e7:87:fe:20:63:d3:97:1b:72:ab:2a: c4:48:9e:b8:0c:82:58:fd:48:40:3a:ee:2e:42:dc: 4b:bc:ca:c4:99:50:f4:9b:fe:d8:47:6a:ec:3e:99: 66:74:ae:6c:04:15:93:95:c3:83:90:42:6a:6d:11: 2f:85:f4:00:db:30:89:04:3c:14:08:8d:d5:9e:38: 1b:86:10:df:8e:57:f9:14:51:f6:88:24:34:4f:7d: 53:a8:9b:51:89:29:7d:1a:20:ce:79:49:ad:8d:6e: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:98:76:1E:A6:B2:95:F7:4E:9B:99:58:C9:41:32:7F:3F:0A:35:DB X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:ba:37:80:6f:df:f1:0a:4a:bd:a9:25:93:1c:b7:fb:2a: b6:cf:6e:15:1e:7d:03:9a:d6:01:75:7c:96:30:12:29:d7:bc: 10:fe:4b:6b:f1:d2:8b:c2:64:e1:43:7a:02:e0:30:c6:d6:0d: c7:84:fc:47:f8:3c:8b:d4:e8:cb:32:5e:6f:48:83:e8:70:a8: 5b:ef:9e:19:90:2a:f6:5a:d7:e6:a8:a4:ea:a5:21:6b:e7:60: e2:71:07:4b:de:d7:9a:3e:5f:2a:23:69:44:1e:ae:0a:25:c2: e6:3a:a7:1f:5a:4d:9e:77:d1:5e:77:33:c9:84:04:57:ba:59: 89:cd:fd:5c:32:eb:de:d1:4a:af:33:30:35:14:e7:f7:94:3a: a8:b0:b0:7a:ea:09:66:31:92:c9:aa:64:66:74:bb:93:44:e9: 0a:68:aa:23:b1:41:cd:36:6d:cf:fe:57:f9:fa:a6:52:06:61: 90:7e:dd:0a:a3:1a:c9:1b:53:cd:cf:19:0b:b7:85:2c:25:bd: 09:db:88:03:c9:4f:a2:6b:37:64:b6:0d:25:53:bc:77:c2:81: dd:05:69:75:ab:49:e4:d7:54:28:50:70:8c:bc:85:82:05:b6: 66:9f:57:57:f1:ad:73:1f:d5:20:52:cd:c1:1d:34:c3:cd:26: 94:36:9a:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYwNDE2MTc1MDI4WhcNMjYwNDIzMTc1MDI4WjAYMRYwFAYD VQQDEw02OWUxMjE2NS1iY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEgIIsxJ2piRgZcCGbE5U4ecIqSgdF2o8I/CCSGgPIHf1PTMttgoGSHfDsfv qHY64RpKxrO5Eg9+VAvaBgrelfaQ2K1X6ovmf6+WPqmlsvPoYa1U31RGruYqw0wT 8ijE0Ltvw9gwQnXoDwfCmSi722ZYuy3cBFpZKa5U+BFT+V2v7SjXiSfHAzkM4w7G ggug57CLilQ9qrZy54f+IGPTlxtyqyrESJ64DIJY/UhAOu4uQtxLvMrEmVD0m/7Y R2rsPplmdK5sBBWTlcODkEJqbREvhfQA2zCJBDwUCI3VnjgbhhDfjlf5FFH2iCQ0 T31TqJtRiSl9GiDOeUmtjW7vDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmYdh6m spX3TpuZWMlBMn8/CjXbMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1a6N4Bv3/EKSr2pJZMct/sqts9uFR59A5rWAXV8ljASKde8EP5La/HSi8Jk 4UN6AuAwxtYNx4T8R/g8i9ToyzJeb0iD6HCoW++eGZAq9lrX5qik6qUha+dg4nEH S97Xmj5fKiNpRB6uCiXC5jqnH1pNnnfRXnczyYQEV7pZic39XDLr3tFKrzMwNRTn 95Q6qLCweuoJZjGSyapkZnS7k0TpCmiqI7FBzTZtz/5X+fqmUgZhkH7dCqMayRtT zc8ZC7eFLCW9CduIA8lPoms3ZLYNJVO8d8KB3QVpdatJ5NdUKFBwjLyFggW2Zp9X V/Gtcx/VIFLNwR00w80mlDaamA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:03 2026 by rpki-client