$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: hAcEm6nhh68v1qdOgr9KGl/1XggL8S90kOCgDdMlxtQ= Subject key identifier: AD:45:3F:32:3A:A9:E2:01:FB:2A:16:68:B6:02:1F:86:22:55:2E:ED Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 04E9 Signing time: Thu 16 Apr 2026 23:44:05 +0000 Manifest this update: Thu 16 Apr 2026 23:44:05 +0000 Manifest next update: Thu 23 Apr 2026 23:44:05 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: nYLQ8LsrMCJlVCzBZFRiMo4HVv7qNGI02ZjQQ67c7c0=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Apr 16 23:44:05 2026 GMT Not After : Apr 23 23:44:05 2026 GMT Subject: CN=69e17445-6c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:6c:c8:69:54:85:37:65:60:a4:15:c4:20: ae:df:ac:aa:b6:21:77:6f:92:2e:d8:e6:9b:c4:f5: 0c:49:08:92:26:b2:5f:5a:b5:ab:15:65:7a:fa:63: 2f:bb:da:04:1b:45:a2:ba:ca:b1:da:61:59:6e:f6: 0e:3c:90:01:74:df:31:85:15:dc:94:59:a2:45:cb: 22:ee:96:73:b9:5a:e5:78:f8:e5:fd:a8:fc:91:98: 00:4f:f3:39:45:5e:ac:85:01:81:61:fb:b4:21:5d: 6b:27:da:ed:76:5f:73:52:48:15:e8:4d:91:8c:f1: 45:95:d9:2d:02:fe:02:e9:52:56:5b:82:11:dc:d0: c2:76:63:30:08:90:80:1c:c8:6d:ad:8f:bb:d5:f8: 84:3b:cb:9b:d4:79:18:1e:63:57:89:1d:aa:2f:5f: ee:d8:3b:95:b1:3c:e6:b6:7e:f1:cb:ac:6d:52:ec: 6d:7e:cc:b7:7b:d4:a5:e7:a8:11:53:7b:da:25:91: 57:9b:10:1b:d2:4c:69:22:b5:63:56:bd:32:eb:e3: f0:ad:d1:f1:45:9a:c8:b4:df:80:ed:e8:da:0f:19: 0f:58:5f:5e:9d:cb:83:15:9c:16:c8:41:ad:f8:2d: 3e:2d:bd:f8:9f:1f:f3:09:b1:72:a4:ed:13:f6:6f: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:3F:32:3A:A9:E2:01:FB:2A:16:68:B6:02:1F:86:22:55:2E:ED X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:10:71:c1:ef:3c:87:03:30:c5:48:e5:74:36:70:b6:4e:39: 0e:ee:c5:40:7b:d5:7c:da:62:5c:5c:2d:c7:a5:9e:e2:73:64: df:7c:b0:10:cc:b1:3e:fd:11:09:92:62:3f:2c:80:b6:89:8d: a4:26:ae:26:b0:67:32:ff:12:0b:0a:37:6d:33:49:1a:d0:06: d9:fa:03:38:6e:9c:9a:2a:3e:cb:ac:9b:42:d1:51:0f:87:fd: 83:60:82:eb:9c:a2:00:c0:4e:06:76:24:29:fc:68:d1:22:1b: e1:41:e1:e2:4b:8f:19:db:1c:9c:3c:62:45:9e:07:7c:39:9f: 34:3e:9c:54:ea:f3:82:1d:89:88:c0:8b:1f:1e:73:40:3d:f8: 21:aa:09:d3:27:0a:57:12:10:ce:7e:66:3b:9d:52:2c:e8:76: be:60:63:b0:14:6d:cc:ba:dc:c0:a6:5d:4d:c2:9f:e7:42:b0: ea:35:85:aa:7b:a0:9c:1f:6e:14:4b:38:4a:ee:18:69:88:fd: 96:e3:f9:37:08:39:5b:58:92:db:70:a2:3a:e7:2a:bb:a7:b2: ca:59:42:94:75:7f:36:6e:e5:eb:c0:f1:21:92:40:54:21:e6: d5:9a:d7:c7:d1:a5:2e:f9:e1:fc:68:56:5b:54:c2:b7:31:ee: 46:9b:e6:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjYwNDE2MjM0NDA1WhcNMjYwNDIzMjM0NDA1WjAYMRYwFAYD VQQDEw02OWUxNzQ0NS02YzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtktsyGlUhTdlYKQVxCCu36yqtiF3b5Iu2OabxPUMSQiSJrJfWrWrFWV6+mMv u9oEG0Wiusqx2mFZbvYOPJABdN8xhRXclFmiRcsi7pZzuVrlePjl/aj8kZgAT/M5 RV6shQGBYfu0IV1rJ9rtdl9zUkgV6E2RjPFFldktAv4C6VJWW4IR3NDCdmMwCJCA HMhtrY+71fiEO8ub1HkYHmNXiR2qL1/u2DuVsTzmtn7xy6xtUuxtfsy3e9Sl56gR U3vaJZFXmxAb0kxpIrVjVr0y6+PwrdHxRZrItN+A7ejaDxkPWF9encuDFZwWyEGt +C0+Lb34nx/zCbFypO0T9m82JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1FPzI6 qeIB+yoWaLYCH4YiVS7tMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRBxwe88hwMwxUjldDZwtk45Du7FQHvVfNpiXFwtx6We4nNk33ywEMyxPv0R CZJiPyyAtomNpCauJrBnMv8SCwo3bTNJGtAG2foDOG6cmio+y6ybQtFRD4f9g2CC 65yiAMBOBnYkKfxo0SIb4UHh4kuPGdscnDxiRZ4HfDmfND6cVOrzgh2JiMCLHx5z QD34IaoJ0ycKVxIQzn5mO51SLOh2vmBjsBRtzLrcwKZdTcKf50Kw6jWFqnugnB9u FEs4Su4YaYj9luP5Nwg5W1iS23CiOucqu6eyyllClHV/Nm7l68DxIZJAVCHm1ZrX x9GlLvnh/GhWW1TCtzHuRpvmlA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:07:01 2026 by rpki-client