$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: nOWMrisVBPMWc6CZWBL6v8moQU2pLH1qfnR8MWyyQFk= Subject key identifier: 4F:70:48:33:63:25:44:56:65:BD:74:38:93:C0:CE:57:31:51:31:53 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 0124 Signing time: Fri 17 Apr 2026 05:23:18 +0000 Manifest this update: Fri 17 Apr 2026 05:23:18 +0000 Manifest next update: Fri 24 Apr 2026 05:23:18 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: M2i+mBItUaZg/Joxz6IFNQ1sj3Ka2dTmt/XXHaVV+Gs=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: 0/KER6jtg26LthiMhAoQFVwFGIJvGgJoOvUmyRDRsmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Apr 17 05:23:18 2026 GMT Not After : Apr 24 05:23:18 2026 GMT Subject: CN=69e1c3c6-9552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:78:e6:64:b9:bb:67:4c:3a:2b:ae:89:e3: 6b:70:5b:68:b0:7a:12:6f:20:ae:bf:67:bb:65:b3: 2c:c1:11:c9:96:00:bb:e7:a9:9a:3e:16:bd:d0:e7: c2:de:89:db:a4:dd:cb:af:2c:a3:5f:db:2c:5a:ee: cd:da:6a:34:01:ff:89:a6:89:77:17:d1:37:3e:bc: 4f:3c:ff:be:e2:50:c2:da:ce:db:bf:5f:23:e7:5c: e6:89:34:fa:1a:6a:9a:e3:35:b7:80:0e:85:17:40: b8:36:ee:4b:1d:1e:e9:36:58:d8:69:41:84:25:5b: dc:08:b7:5c:a7:11:6d:10:c3:3e:78:37:bb:9e:3e: 39:ba:2d:80:20:0f:c9:55:8d:72:0d:61:c1:ec:e7: b4:fb:f2:0f:90:67:90:ab:db:51:8c:66:a2:96:45: 29:ef:da:db:52:48:57:bf:ba:d9:23:54:85:29:c0: 7e:21:02:3d:e7:97:87:5b:80:81:2a:49:d8:cf:5e: d3:fd:55:82:74:52:af:59:41:d3:5b:c6:18:ab:87: 0d:51:73:fe:bc:b1:03:e3:46:ed:75:61:82:3e:f5: 09:9a:5d:89:39:d7:33:e8:86:e4:32:a3:97:51:42: f2:5c:7b:18:20:ce:3f:47:65:72:32:f0:63:6f:28: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:48:33:63:25:44:56:65:BD:74:38:93:C0:CE:57:31:51:31:53 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:00:3a:4a:06:71:da:a6:30:9e:0f:b9:9c:4b:65:20:2d: 5c:cb:71:08:a0:b3:ea:14:f5:67:8a:c1:0c:d2:64:5a:d3:01: 26:80:ba:fe:9f:f0:8c:e5:49:7d:5f:71:d5:2a:06:67:f1:8e: d0:a8:af:a8:25:db:f6:fb:4f:7b:ba:13:c8:5f:7f:d5:1b:6f: e2:97:b8:41:02:fc:6f:7a:b7:78:a6:ea:df:af:06:a5:f8:a0: 9c:38:5a:ee:e3:60:68:bc:b9:66:e8:e0:e3:ba:eb:51:98:77: 89:d6:73:c9:db:53:de:90:83:10:c3:b1:34:e1:dd:77:10:62: 9e:99:7e:1e:4e:c0:ce:b4:81:a0:77:d7:e7:0e:6c:63:5a:8e: 3d:d0:c2:96:74:29:24:6b:a5:3d:09:32:3f:f7:3a:ec:cc:fa: 96:97:24:05:08:27:c9:1f:62:c0:93:f6:02:3d:f0:14:a1:0e: 62:88:9d:0b:6f:11:f1:af:fa:c9:b4:d9:2b:9d:92:46:2f:a8: c2:d6:62:32:d6:3e:06:b9:22:c2:79:71:aa:9f:48:18:b1:a1: 39:d4:f8:5e:3c:d0:22:5c:8c:dd:b7:de:6a:8a:2d:70:a3:20: 97:ac:d5:2f:d1:ab:7f:30:0c:b7:6b:c9:b9:a5:6b:8a:fe:0b: 77:0f:1a:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjYwNDE3MDUyMzE4WhcNMjYwNDI0MDUyMzE4WjAYMRYwFAYD VQQDEw02OWUxYzNjNi05NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVd45mS5u2dMOiuuieNrcFtosHoSbyCuv2e7ZbMswRHJlgC756maPha90OfC 3onbpN3LryyjX9ssWu7N2mo0Af+Jpol3F9E3PrxPPP++4lDC2s7bv18j51zmiTT6 Gmqa4zW3gA6FF0C4Nu5LHR7pNljYaUGEJVvcCLdcpxFtEMM+eDe7nj45ui2AIA/J VY1yDWHB7Oe0+/IPkGeQq9tRjGailkUp79rbUkhXv7rZI1SFKcB+IQI955eHW4CB KknYz17T/VWCdFKvWUHTW8YYq4cNUXP+vLED40btdWGCPvUJml2JOdcz6IbkMqOX UULyXHsYIM4/R2VyMvBjbyhhdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9wSDNj JURWZb10OJPAzlcxUTFTMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTgAOkoGcdqmMJ4PuZxLZSAtXMtxCKCz6hT1Z4rBDNJkWtMBJoC6/p/wjOVJ fV9x1SoGZ/GO0KivqCXb9vtPe7oTyF9/1Rtv4pe4QQL8b3q3eKbq368GpfignDha 7uNgaLy5Zujg47rrUZh3idZzydtT3pCDEMOxNOHddxBinpl+Hk7AzrSBoHfX5w5s Y1qOPdDClnQpJGulPQkyP/c67Mz6lpckBQgnyR9iwJP2Aj3wFKEOYoidC28R8a/6 ybTZK52SRi+owtZiMtY+Brkiwnlxqp9IGLGhOdT4XjzQIlyM3bfeaootcKMgl6zV L9GrfzAMt2vJuaVriv4Ldw8agw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:52 2026 by rpki-client