$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: WlIsCVaO4Jr5v2gJIDwHeokCWsgRKbd5yDxu0+spm8E= Subject key identifier: 47:CC:CC:F4:51:39:32:31:58:F4:9C:48:64:79:D5:F9:72:3A:A9:0B Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 024C Signing time: Fri 17 Apr 2026 02:06:57 +0000 Manifest this update: Fri 17 Apr 2026 02:06:57 +0000 Manifest next update: Fri 24 Apr 2026 02:06:57 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: lS0Q5OfWpvwg6qBLan0lwuaSJTkE2+InwISJdbsNu60=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: zv8nloA9U8eAmryUp26vTAYnavKSs7YqUby16TlyAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Apr 17 02:06:57 2026 GMT Not After : Apr 24 02:06:57 2026 GMT Subject: CN=69e195c1-1ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:de:c2:e5:9f:cb:4d:1f:65:63:62:52:89: 61:e8:5f:39:3c:2a:cd:46:de:24:42:b8:82:a6:64: 65:bd:c5:d0:48:80:e1:6f:18:5d:92:99:c6:f3:5d: 4e:14:13:f1:a6:22:fc:94:b9:2e:30:11:59:7f:3a: 90:4a:c3:6c:1a:13:a9:79:8b:b8:12:f9:9c:0d:7b: e2:74:96:7d:7a:8a:56:33:0b:66:d4:76:74:7b:83: 66:54:67:da:c0:47:f5:18:76:ff:b5:92:58:2b:1b: dd:03:b6:30:b1:0d:80:8a:ff:fe:93:74:f7:6f:98: ed:d3:ae:b9:a8:b5:15:bf:d5:e8:b4:65:a4:71:19: 5c:fd:bc:55:e6:8f:8e:a8:20:6c:76:5b:16:50:a9: 7a:e9:9a:57:e5:bc:ad:0e:15:c3:0b:c4:25:0a:1b: d3:dc:ad:3d:23:69:9f:4b:1f:0f:1f:e7:3b:00:73: f7:d2:5c:6a:9e:46:81:ec:be:08:b2:0e:58:10:94: c1:68:6c:ea:d9:40:87:44:b9:a0:b0:42:33:60:dc: dc:82:a0:bc:c5:5c:26:5b:c6:a0:fc:8a:e9:38:8f: e8:1c:56:b5:2d:bc:e4:e3:3a:ab:e0:fe:0c:aa:1f: e0:f3:10:45:9e:a1:9a:8c:bc:a8:c3:23:38:ee:b1: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CC:CC:F4:51:39:32:31:58:F4:9C:48:64:79:D5:F9:72:3A:A9:0B X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:1b:aa:94:a6:6a:e4:4e:ec:f1:45:32:af:32:af:f0:51: 0f:3a:68:40:26:93:ea:fc:b9:e6:17:19:d7:ba:b5:29:b3:c5: 51:fa:b5:dc:85:25:a4:7f:a9:cb:ed:7c:1f:3b:91:e1:5f:8c: c8:c9:6b:a9:df:3e:b9:63:5e:70:3e:89:db:0a:5e:35:45:74: 3c:b9:60:a3:0d:e9:12:3d:73:fb:71:6d:be:05:e9:4a:b3:cb: a0:dc:3e:9d:01:0e:8f:07:d2:57:f1:b4:f5:24:2d:c9:65:cc: 68:a9:5e:e9:14:c2:30:b2:f4:c0:cf:af:e3:d9:03:f1:44:5c: a9:4d:3c:3f:bb:50:dc:a6:d4:2d:5a:dd:a1:29:e1:93:14:dc: 61:9c:74:cc:bb:2e:64:db:b0:7e:bc:24:b9:ee:e3:42:93:23: 1f:71:fe:e8:ab:ee:95:00:25:4c:1f:8c:c6:8b:e8:3a:b9:00: df:39:67:49:90:d5:5a:78:2c:4c:7b:c1:6f:b2:a2:3d:e3:76: f5:87:72:e5:15:e8:3f:07:7c:6c:6a:2b:e9:e4:90:01:c6:a5: a1:b9:45:75:12:ff:6d:f8:98:28:64:03:51:fd:6e:ff:76:90: 75:30:de:27:87:23:57:9a:61:52:e5:07:8a:32:9b:f0:71:fc: 10:6c:66:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjYwNDE3MDIwNjU3WhcNMjYwNDI0MDIwNjU3WjAYMRYwFAYD VQQDEw02OWUxOTVjMS0xYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3orewuWfy00fZWNiUolh6F85PCrNRt4kQriCpmRlvcXQSIDhbxhdkpnG811O FBPxpiL8lLkuMBFZfzqQSsNsGhOpeYu4EvmcDXvidJZ9eopWMwtm1HZ0e4NmVGfa wEf1GHb/tZJYKxvdA7YwsQ2Aiv/+k3T3b5jt0665qLUVv9XotGWkcRlc/bxV5o+O qCBsdlsWUKl66ZpX5bytDhXDC8QlChvT3K09I2mfSx8PH+c7AHP30lxqnkaB7L4I sg5YEJTBaGzq2UCHRLmgsEIzYNzcgqC8xVwmW8ag/IrpOI/oHFa1Lbzk4zqr4P4M qh/g8xBFnqGajLyowyM47rELWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfMzPRR OTIxWPScSGR51flyOqkLMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+IbqpSmauRO7PFFMq8yr/BRDzpoQCaT6vy55hcZ17q1KbPFUfq13IUlpH+p y+18HzuR4V+MyMlrqd8+uWNecD6J2wpeNUV0PLlgow3pEj1z+3FtvgXpSrPLoNw+ nQEOjwfSV/G09SQtyWXMaKle6RTCMLL0wM+v49kD8URcqU08P7tQ3KbULVrdoSnh kxTcYZx0zLsuZNuwfrwkue7jQpMjH3H+6KvulQAlTB+MxovoOrkA3zlnSZDVWngs THvBb7KiPeN29Ydy5RXoPwd8bGor6eSQAcaloblFdRL/bfiYKGQDUf1u/3aQdTDe J4cjV5phUuUHijKb8HH8EGxmmw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:06 2026 by rpki-client