$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: u6yScxNyIHE9aeT8Tty5+zCqutAuapNA8dhX3enGKSQ= Subject key identifier: F8:27:10:31:19:69:93:61:92:C4:86:D8:41:D4:B0:A9:96:61:6E:7C Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: E3 Signing time: Fri 17 Apr 2026 06:21:21 +0000 Manifest this update: Fri 17 Apr 2026 06:21:20 +0000 Manifest next update: Fri 24 Apr 2026 06:21:20 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: aofPLeFjTvnQ9Dut2reMfdz3r09OInFL+WDmUjDQOMs=) 2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=) 3: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Apr 17 06:21:20 2026 GMT Not After : Apr 24 06:21:20 2026 GMT Subject: CN=69e1d161-a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:31:0f:77:49:12:98:5d:64:19:12:f1:15: 71:6d:f4:7b:6e:3f:72:0d:45:6f:65:bd:a9:00:fe: c8:c4:68:17:44:ec:c7:11:de:63:4a:3b:01:5d:ea: 13:ae:4f:c7:03:5e:59:ad:22:64:d3:ce:6b:f2:d1: 2d:bc:ba:c4:03:ed:cd:d1:13:61:5e:77:8b:83:03: ed:24:9c:61:58:b5:4f:a8:09:5d:02:bc:90:4f:34: 44:c0:2c:e6:f6:0f:67:9f:83:20:19:5b:ea:b6:3a: 69:27:6a:5a:ed:d8:e7:61:ec:e1:fd:66:08:de:40: 9d:01:fa:a0:ec:da:7d:1f:92:d5:2f:68:11:e3:ac: 33:6a:1b:ae:f6:36:5f:8f:b5:04:62:3f:10:02:3e: 0c:ad:ca:75:58:4a:53:3e:1a:8b:83:28:d4:e2:fb: da:78:c1:96:23:6a:f2:d7:8d:33:e6:d7:58:66:2c: bf:d1:d2:a3:c6:02:f3:57:be:a8:3f:e9:af:12:8c: c7:58:c9:97:1e:bf:2f:36:c7:54:6f:a1:2f:ec:21: 49:a9:66:91:6d:61:a0:42:8c:bb:71:6f:a5:2c:3d: 5e:c3:c1:b5:50:97:c6:fb:d7:51:e7:dd:d5:df:ea: 97:68:64:a7:dc:e2:4e:6d:0b:17:b1:ed:71:08:e2: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:27:10:31:19:69:93:61:92:C4:86:D8:41:D4:B0:A9:96:61:6E:7C X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:ce:dc:3a:73:6c:49:f0:dd:08:2f:ec:81:70:78:44:24: d2:a7:cf:3f:2f:95:3f:e5:3c:09:9f:58:c8:f2:0b:e5:aa:0b: cb:c4:04:44:0a:d7:9b:8b:43:b0:5a:a2:3b:e3:68:f0:85:8e: 71:d1:33:ba:91:a8:39:bb:75:49:39:e7:8a:5d:1f:29:32:ce: be:c5:83:d9:31:a5:65:ff:40:ae:a5:6d:7d:01:cf:2e:eb:6f: 0a:83:42:cc:f1:cb:b3:04:ad:30:5d:91:8f:e5:c7:cf:49:7b: d4:03:46:3a:41:bc:48:a3:e3:6b:3f:b2:8a:41:62:d8:c3:0a: 38:0e:b2:eb:0a:a3:31:df:20:3b:69:66:53:08:7a:89:a4:77: 08:05:51:84:41:0f:05:e8:a7:43:22:5c:3d:a6:c7:d3:08:75: 6b:c1:63:60:f8:a4:eb:e4:b2:4c:a5:c8:54:10:84:d8:26:5d: fe:df:9d:99:8c:f2:bd:0c:2b:99:25:2a:1f:c9:2d:7c:59:91: e8:9d:a9:af:71:a6:87:95:75:de:7d:37:b2:26:6c:74:e5:6f: 1b:f1:55:02:1c:c1:40:32:b6:70:b6:ee:83:17:16:bd:1b:ad: d5:b6:09:e2:9a:57:32:89:1c:1a:79:91:de:f0:73:af:dd:16: 52:6e:80:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjYwNDE3MDYyMTIwWhcNMjYwNDI0MDYyMTIwWjAYMRYwFAYD VQQDEw02OWUxZDE2MS1hMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzkxD3dJEphdZBkS8RVxbfR7bj9yDUVvZb2pAP7IxGgXROzHEd5jSjsBXeoT rk/HA15ZrSJk085r8tEtvLrEA+3N0RNhXneLgwPtJJxhWLVPqAldAryQTzREwCzm 9g9nn4MgGVvqtjppJ2pa7djnYezh/WYI3kCdAfqg7Np9H5LVL2gR46wzahuu9jZf j7UEYj8QAj4Mrcp1WEpTPhqLgyjU4vvaeMGWI2ry140z5tdYZiy/0dKjxgLzV76o P+mvEozHWMmXHr8vNsdUb6Ev7CFJqWaRbWGgQoy7cW+lLD1ew8G1UJfG+9dR593V 3+qXaGSn3OJObQsXse1xCOJWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgnEDEZ aZNhksSG2EHUsKmWYW58MB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC7HO3DpzbEnw3Qgv7IFweEQk0qfPPy+VP+U8CZ9YyPIL5aoLy8QERArXm4tD sFqiO+No8IWOcdEzupGoObt1STnnil0fKTLOvsWD2TGlZf9ArqVtfQHPLutvCoNC zPHLswStMF2Rj+XHz0l71ANGOkG8SKPjaz+yikFi2MMKOA6y6wqjMd8gO2lmUwh6 iaR3CAVRhEEPBeinQyJcPabH0wh1a8FjYPik6+SyTKXIVBCE2CZd/t+dmYzyvQwr mSUqH8ktfFmR6J2pr3Gmh5V13n03siZsdOVvG/FVAhzBQDK2cLbugxcWvRut1bYJ 4ppXMokcGnmR3vBzr90WUm6APw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:21 2026 by rpki-client