$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: 1oSzWzvnF2yzLbesjPzlaXCbF1gHT1ywEySRy2HJno0= Subject key identifier: 33:EA:8E:95:9C:54:26:A3:C6:B0:10:C9:23:6B:FF:54:5A:E9:C5:AC Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 0646 Signing time: Thu 16 Apr 2026 22:37:16 +0000 Manifest this update: Thu 16 Apr 2026 22:37:16 +0000 Manifest next update: Thu 23 Apr 2026 22:37:16 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: 1SpwKIKjn/mInHqRGs53ir6iJus9WS0XpGN5Vf+1r/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Apr 16 22:37:16 2026 GMT Not After : Apr 23 22:37:16 2026 GMT Subject: CN=69e1649c-930c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:ca:a3:13:88:d7:b1:89:fd:19:07:92:0f: a5:76:de:a2:7d:d3:4b:b0:63:4e:77:54:66:0a:4f: 37:aa:ad:8a:c9:69:66:c4:c0:41:ce:22:ba:b5:fb: 9c:eb:5b:e7:71:84:5f:c3:92:e3:0f:84:63:93:49: 33:d2:2c:27:9a:01:e0:2f:a1:3b:74:46:84:37:71: 24:72:10:df:32:b5:08:a7:4c:3c:37:82:24:4d:76: 7e:72:1b:d6:cd:d8:3c:87:c3:fb:9e:d8:d2:d0:95: 98:b7:9f:f8:db:02:9f:d2:9e:bc:be:a1:da:08:65: 7a:1f:0e:07:54:e2:e0:9b:f6:cb:5b:68:bd:17:f1: 39:cd:1c:c9:56:73:ea:c3:fd:ea:84:0b:b4:75:37: 9a:30:ec:20:d4:4e:41:e2:82:22:39:32:71:19:75: 24:c6:96:67:da:c4:4f:e5:40:94:fc:77:e4:bb:bc: 15:44:1a:34:b5:56:a4:41:81:74:72:11:b0:53:3d: 4d:26:41:2f:72:f1:f8:8a:73:b6:ea:4f:ec:43:6b: cd:b7:52:d6:c0:00:ac:c6:7d:a0:b1:9a:1d:af:3a: 3c:93:70:4a:14:c5:4f:b3:5a:84:d0:4e:8e:b7:68: f5:5a:01:bc:f8:f5:d2:41:7f:72:36:14:69:7b:11: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:8E:95:9C:54:26:A3:C6:B0:10:C9:23:6B:FF:54:5A:E9:C5:AC X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:da:82:c4:fd:fe:b1:0d:12:a4:9e:a4:16:7c:b0:ac:16:aa: 87:f9:dd:db:e4:c6:31:a6:92:ad:ae:58:6a:80:7e:1f:f2:04: 68:a0:0f:24:aa:28:57:ce:19:a6:22:cf:d3:fc:59:43:89:8e: f4:64:b4:c4:28:45:70:02:f1:09:d2:4c:20:6a:6d:49:83:18: 02:85:37:f9:20:cc:0a:8a:d5:8b:e1:32:16:dd:ee:04:79:c8: 05:c8:e4:83:4b:48:18:98:8a:4d:4c:32:48:8f:d4:fc:f2:ef: 1b:4e:3a:a4:5e:7c:a6:fe:46:3d:87:34:58:1c:d0:27:89:af: e4:69:73:f2:1c:16:69:e3:85:7b:7e:56:2c:f4:b4:e4:c7:b0: 62:5f:7e:54:85:7b:3b:dc:76:a4:be:4a:2a:7f:27:0e:29:e0: 69:ea:8d:7f:e3:cf:6a:68:cb:af:70:f7:e1:8e:a3:13:e2:8e: 64:6b:66:08:34:7e:bb:27:80:27:73:63:bf:57:fa:93:9c:f5: 3e:11:cb:4b:8b:c2:62:d1:9d:b3:b9:0d:48:8d:33:08:7e:ae: 77:6d:a3:6f:74:3e:ad:fe:76:9a:96:fb:41:f4:6e:f0:fc:c5: a8:48:46:36:a2:14:55:38:cc:04:49:89:ca:98:ec:9c:06:56: f5:e5:f9:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjYwNDE2MjIzNzE2WhcNMjYwNDIzMjIzNzE2WjAYMRYwFAYD VQQDEw02OWUxNjQ5Yy05MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ3KoxOI17GJ/RkHkg+ldt6ifdNLsGNOd1RmCk83qq2KyWlmxMBBziK6tfuc 61vncYRfw5LjD4Rjk0kz0iwnmgHgL6E7dEaEN3EkchDfMrUIp0w8N4IkTXZ+chvW zdg8h8P7ntjS0JWYt5/42wKf0p68vqHaCGV6Hw4HVOLgm/bLW2i9F/E5zRzJVnPq w/3qhAu0dTeaMOwg1E5B4oIiOTJxGXUkxpZn2sRP5UCU/Hfku7wVRBo0tVakQYF0 chGwUz1NJkEvcvH4inO26k/sQ2vNt1LWwACsxn2gsZodrzo8k3BKFMVPs1qE0E6O t2j1WgG8+PXSQX9yNhRpexFyBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPqjpWc VCajxrAQySNr/1Ra6cWsMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9qCxP3+sQ0SpJ6kFnywrBaqh/nd2+TGMaaSra5YaoB+H/IEaKAPJKooV84Z piLP0/xZQ4mO9GS0xChFcALxCdJMIGptSYMYAoU3+SDMCorVi+EyFt3uBHnIBcjk g0tIGJiKTUwySI/U/PLvG046pF58pv5GPYc0WBzQJ4mv5Glz8hwWaeOFe35WLPS0 5MewYl9+VIV7O9x2pL5KKn8nDingaeqNf+PPamjLr3D34Y6jE+KOZGtmCDR+uyeA J3Njv1f6k5z1PhHLS4vCYtGds7kNSI0zCH6ud22jb3Q+rf52mpb7QfRu8PzFqEhG NqIUVTjMBEmJypjsnAZW9eX5sA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:43 2026 by rpki-client