$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: +idKlIp7bJVCdpQHoZtrx5lLk7rzsUDeThmenyU4aR0= Subject key identifier: 42:8F:1F:C3:0D:91:B3:24:2E:E7:20:DD:EE:C2:7E:AC:43:EB:B1:A1 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0BB7 Signing time: Thu 16 Apr 2026 18:53:48 +0000 Manifest this update: Thu 16 Apr 2026 18:53:48 +0000 Manifest next update: Thu 23 Apr 2026 18:53:48 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: MHdnr4zf7UNGab5uYMD0fS0Msi0+++dK6Em+aP9qp6Y=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: 4eqOlSLRPKjeL1TFzyh0NXLTAo0Vu3W9omx4TqqCWjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Apr 16 18:53:48 2026 GMT Not After : Apr 23 18:53:48 2026 GMT Subject: CN=69e1303c-70a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:f8:a2:eb:41:39:2b:b2:f3:fd:1e:36:bd: 61:1e:8d:2f:96:42:d9:5c:42:ef:cb:37:62:17:3d: 15:7a:db:28:f1:99:90:d0:e5:7b:60:d2:ff:6e:14: 49:37:7e:da:d7:dd:0b:63:18:e0:b2:63:bb:8f:0d: 13:cb:bf:e4:3f:ad:0f:b5:ef:38:22:8c:ad:06:64: b7:c0:47:9b:49:97:ce:88:02:bb:df:b1:ac:f8:8c: ea:08:09:6e:5e:9e:7b:7b:01:de:8f:e8:ef:a9:18: bb:c4:7e:f3:e2:f0:c5:03:cb:88:91:cc:ff:13:23: 3e:ba:d0:ea:16:4e:db:fb:11:31:ce:69:d7:11:48: 26:d8:89:8d:4f:ab:91:56:99:23:38:d6:79:8c:96: 35:a3:6f:4a:d3:10:cd:db:07:e2:46:b2:18:eb:98: 20:b1:4f:55:5b:a1:49:7d:a3:f8:ce:de:b6:fe:b9: 47:46:99:ff:4b:b0:bd:f0:65:80:c3:b7:1c:b5:3e: b3:ba:bb:15:70:ed:06:ab:3b:06:5d:d5:6e:63:77: fa:9d:7e:c4:ba:73:2e:c5:56:a0:32:18:5d:99:81: 0d:55:38:e7:14:48:0d:4a:83:9b:50:a6:46:e5:42: 98:e6:85:2f:23:96:61:ae:80:b4:d2:a0:42:ad:e7: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:1F:C3:0D:91:B3:24:2E:E7:20:DD:EE:C2:7E:AC:43:EB:B1:A1 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:82:f5:f4:73:88:81:92:23:b5:78:fe:35:c4:ec:61:07:41: 8a:9b:42:2d:d6:49:fd:54:5e:0a:d9:01:16:88:b0:f4:19:2f: 3b:b8:c9:3d:a1:00:8b:61:28:d1:43:e5:5d:91:0f:fb:bd:3c: f6:c1:f8:df:c7:83:df:13:34:bc:59:7a:00:87:3e:fe:11:b8: 78:0c:fd:5d:8e:7c:0d:30:b8:6d:39:65:02:7f:3f:b1:37:ab: 2b:52:39:fa:56:43:d5:ad:46:7b:03:23:f7:c1:b9:27:1d:77: 32:0e:4e:fb:e7:e5:a9:7b:e6:4d:0e:56:35:4e:b4:bc:4d:0d: 0c:80:ae:88:d5:9e:0d:32:0e:4b:28:d9:66:d0:3f:97:d3:f2: 43:20:01:7b:b5:67:21:d1:0d:85:29:c2:a4:7a:53:53:b8:54: 26:9b:78:87:33:06:68:61:90:49:8f:85:e6:ba:de:41:2b:28: 30:47:9f:68:6a:29:fe:35:eb:de:d7:0f:3a:90:a1:fe:19:28: 48:31:5d:34:3c:e8:59:e0:67:4d:da:da:f8:fe:e1:37:7a:c4: 64:d9:86:cb:0c:46:c1:0a:79:c6:cd:be:f3:f2:d1:75:f9:9d: cd:a5:a7:28:6d:75:c8:25:24:0d:93:aa:89:f6:33:75:5d:89: 55:84:df:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjYwNDE2MTg1MzQ4WhcNMjYwNDIzMTg1MzQ4WjAYMRYwFAYD VQQDEw02OWUxMzAzYy03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s34outBOSuy8/0eNr1hHo0vlkLZXELvyzdiFz0Vetso8ZmQ0OV7YNL/bhRJ N37a190LYxjgsmO7jw0Ty7/kP60Pte84IoytBmS3wEebSZfOiAK737Gs+IzqCAlu Xp57ewHej+jvqRi7xH7z4vDFA8uIkcz/EyM+utDqFk7b+xExzmnXEUgm2ImNT6uR VpkjONZ5jJY1o29K0xDN2wfiRrIY65ggsU9VW6FJfaP4zt62/rlHRpn/S7C98GWA w7cctT6zursVcO0GqzsGXdVuY3f6nX7EunMuxVagMhhdmYENVTjnFEgNSoObUKZG 5UKY5oUvI5ZhroC00qBCrefW2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKPH8MN kbMkLucg3e7CfqxD67GhMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdIL19HOIgZIjtXj+NcTsYQdBiptCLdZJ/VReCtkBFoiw9BkvO7jJPaEAi2Eo 0UPlXZEP+7089sH438eD3xM0vFl6AIc+/hG4eAz9XY58DTC4bTllAn8/sTerK1I5 +lZD1a1GewMj98G5Jx13Mg5O++flqXvmTQ5WNU60vE0NDICuiNWeDTIOSyjZZtA/ l9PyQyABe7VnIdENhSnCpHpTU7hUJpt4hzMGaGGQSY+F5rreQSsoMEefaGop/jXr 3tcPOpCh/hkoSDFdNDzoWeBnTdra+P7hN3rEZNmGywxGwQp5xs2+8/LRdfmdzaWn KG11yCUkDZOqifYzdV2JVYTfdQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:47 2026 by rpki-client