$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: tphWWa+hNy+R6Wk6TdwX9aGfvRldNdcXbgGx8FAhSiI= Subject key identifier: 44:A6:D3:38:85:22:50:E0:B3:61:BF:32:6B:75:A4:21:82:AE:E5:E3 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 51 Signing time: Fri 17 Apr 2026 08:00:18 +0000 Manifest this update: Fri 17 Apr 2026 08:00:18 +0000 Manifest next update: Fri 24 Apr 2026 08:00:18 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: Gcmrf+uSw0zyHGXopIrLu9qY2/5H2/PDxoLX1I9yUxg=) 2: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) 3: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Apr 17 08:00:18 2026 GMT Not After : Apr 24 08:00:18 2026 GMT Subject: CN=69e1e892-2782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:2a:7f:91:a8:96:6c:d2:86:63:6a:bb:24: f0:3f:93:2a:1a:b1:87:40:9f:01:67:81:cd:3c:4f: 47:e1:cc:7c:a4:69:99:12:3b:33:58:a8:e7:4f:16: b0:a7:d1:3c:9b:fe:99:c3:21:4f:82:52:8b:0e:e6: bc:14:38:31:3b:5d:8e:a3:33:a7:cb:ce:8d:9b:09: 02:7a:34:1a:bf:67:41:7e:ff:06:a3:72:1e:9f:5f: 45:da:ff:3b:e2:ef:de:3c:5f:8e:eb:7b:08:95:86: a7:9f:f7:fb:b1:21:2f:57:d3:ec:cc:42:d0:56:0d: 38:21:26:64:fa:bf:08:35:44:9e:f3:b0:78:57:b5: b4:fb:48:60:f8:9a:a5:81:eb:25:ff:fa:f6:de:9f: c7:73:9c:a3:2c:6a:27:92:96:ab:df:3e:4a:50:4b: 6b:79:16:0c:ee:31:9c:74:05:95:79:67:b7:72:df: 4e:6f:33:36:6f:b2:92:a1:db:02:94:4b:ff:84:7f: 0c:08:ff:6a:d9:c0:95:e1:82:af:48:5c:24:b4:6f: ca:9a:69:bd:d7:7b:ae:fa:4b:38:09:2c:34:c9:0b: d0:6d:2e:6d:19:9d:23:5f:0c:a8:8a:20:d9:02:fa: 55:05:51:a2:5f:6a:29:d3:9e:66:0c:1c:74:64:c1: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A6:D3:38:85:22:50:E0:B3:61:BF:32:6B:75:A4:21:82:AE:E5:E3 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7e:67:8d:fa:d0:00:ee:21:e2:ac:b7:a6:c2:eb:33:64:7a: 4a:f3:20:ea:d7:fb:f1:71:ae:d1:4f:c4:fa:b6:d6:0b:b5:24: 87:d9:23:3a:58:c9:01:2d:e0:7d:63:22:bb:06:57:5c:01:70: 00:e8:79:d9:76:0b:de:4b:99:68:b0:f6:58:56:0a:15:57:ea: 20:99:7f:38:68:53:45:51:d4:9e:e4:4e:5b:36:89:51:ae:7c: 5a:61:18:1e:82:58:0f:e5:38:23:09:05:6b:a7:0b:d9:1e:ee: 76:a0:cb:4e:8b:1b:f7:21:36:5e:8c:30:ce:60:a1:df:32:fd: 8e:78:3d:5d:38:dc:10:ff:66:ac:f8:20:91:61:03:3d:ef:9a: 64:74:cf:81:a3:50:e2:be:d9:5d:72:57:57:20:6c:bf:8f:70: 6f:5e:04:18:92:13:ea:25:51:79:ff:a0:a8:ec:5f:51:aa:91: 2b:c4:7f:8e:69:d0:85:02:04:4f:33:83:bd:72:d0:3b:05:5d: 6e:0d:f9:c9:6a:3c:48:26:de:87:71:9b:fc:e0:c8:88:74:32: c4:5f:79:d5:be:d1:f7:bb:6a:b3:a2:cd:a6:53:79:45:d8:6d: 27:04:ad:a8:80:32:f0:ad:91:4a:9a:05:be:10:e4:83:b6:23: 7d:48:a6:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjA0MTcwODAwMThaFw0yNjA0MjQwODAwMThaMBgxFjAUBgNV BAMTDTY5ZTFlODkyLTI3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbjSp/kaiWbNKGY2q7JPA/kyoasYdAnwFngc08T0fhzHykaZkSOzNYqOdPFrCn 0Tyb/pnDIU+CUosO5rwUODE7XY6jM6fLzo2bCQJ6NBq/Z0F+/wajch6fX0Xa/zvi 7948X47rewiVhqef9/uxIS9X0+zMQtBWDTghJmT6vwg1RJ7zsHhXtbT7SGD4mqWB 6yX/+vben8dznKMsaieSlqvfPkpQS2t5FgzuMZx0BZV5Z7dy305vMzZvspKh2wKU S/+EfwwI/2rZwJXhgq9IXCS0b8qaab3Xe676SzgJLDTJC9BtLm0ZnSNfDKiKINkC +lUFUaJfainTnmYMHHRkwRC1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURKbTOIUi UOCzYb8ya3WkIYKu5eMwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDfmeN+tAA7iHirLemwuszZHpK8yDq1/vxca7RT8T6ttYLtSSH2SM6WMkBLeB9 YyK7BldcAXAA6HnZdgveS5losPZYVgoVV+ogmX84aFNFUdSe5E5bNolRrnxaYRge glgP5TgjCQVrpwvZHu52oMtOixv3ITZejDDOYKHfMv2OeD1dONwQ/2as+CCRYQM9 75pkdM+Bo1DivtldcldXIGy/j3BvXgQYkhPqJVF5/6Co7F9RqpErxH+OadCFAgRP M4O9ctA7BV1uDfnJajxIJt6HcZv84MiIdDLEX3nVvtH3u2qzos2mU3lF2G0nBK2o gDLwrZFKmgW+EOSDtiN9SKZf -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:36 2026 by rpki-client