$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: 61eVtXh4sD1kEBHbNFyrMhzmelHeX0hnkY+mJxic7NU= Subject key identifier: 86:04:40:C9:5B:8E:1F:8F:C5:BC:DF:CC:56:B3:51:1D:8D:17:EA:66 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 01FF Signing time: Fri 17 Apr 2026 02:52:54 +0000 Manifest this update: Fri 17 Apr 2026 02:52:53 +0000 Manifest next update: Fri 24 Apr 2026 02:52:53 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: SaxVVYxxqFNeixDoTiM0WMvcLQ93joRj6qI8ncCHE8A=) 2: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=) 3: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Apr 17 02:52:53 2026 GMT Not After : Apr 24 02:52:53 2026 GMT Subject: CN=69e1a086-4bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:b9:d6:5d:b3:0a:d0:fd:0e:74:de:17:42: 8b:83:e2:4e:fb:93:73:41:02:6d:3c:c1:bd:bd:04: 28:51:3c:36:df:af:60:b9:84:4a:f4:b2:4f:69:21: f3:e1:e6:88:01:ce:cc:02:48:9f:d2:23:22:31:b7: 6e:c4:df:43:93:c9:11:c6:50:c9:15:2d:c9:4b:f3: be:ae:01:e2:21:ae:43:c2:97:7b:12:bf:0a:60:af: b0:2d:dd:93:f2:d2:51:d2:54:21:a3:cb:07:60:cc: 2a:e6:be:53:04:d9:75:2d:d3:42:eb:2a:67:68:76: 6f:2b:55:33:0b:15:ec:b5:03:6f:38:c3:94:ef:ff: 8a:d4:75:66:8f:22:57:b2:b2:99:e9:21:7f:2e:55: 15:92:5f:c2:e5:bb:d3:23:70:9f:3b:8a:4f:35:ea: 8c:ac:b4:7e:bf:4b:a0:01:cb:62:c6:8f:ae:0d:08: f4:2a:48:47:25:2e:eb:12:ac:60:77:f4:02:75:92: 21:35:b2:e9:32:5c:9b:ca:2a:c5:60:1a:01:55:58: 14:51:5e:39:b5:e3:4d:cb:fe:d2:c6:ad:f1:68:f6: 64:07:12:ee:e3:63:3b:fc:ad:a2:51:52:27:22:2f: 25:3a:6d:42:22:0c:5e:f0:54:28:25:85:99:f0:cb: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:40:C9:5B:8E:1F:8F:C5:BC:DF:CC:56:B3:51:1D:8D:17:EA:66 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9d:48:25:eb:2b:36:c2:e3:43:d7:8a:6c:46:2d:e0:b7:1d: 93:72:23:e3:fe:57:c4:06:df:89:f6:9b:6e:95:c2:b3:20:4b: 60:e1:6a:7b:3b:f2:de:5f:92:a0:1f:75:73:1a:ed:4d:df:19: fe:22:66:f0:28:c8:1f:f2:d1:7c:de:da:7d:1c:4b:90:a4:d3: 61:2b:77:65:6a:41:79:74:dc:57:74:22:01:e5:5b:a7:1e:e7: 3e:a0:9c:00:73:e5:17:5b:f5:cf:61:11:28:c9:06:aa:53:82: 38:4c:49:f8:e4:cf:6b:cc:47:62:b5:60:dc:0e:6e:7a:8b:fc: de:a1:90:be:08:31:bf:c4:90:8b:66:69:a7:cb:28:98:77:20: be:b8:df:bb:76:e1:bd:62:fb:a0:3b:0a:6a:9d:5a:96:fd:b2: 93:4a:0a:e4:69:ed:4f:29:09:c4:d4:cd:92:80:02:fa:78:a3: cc:20:b1:68:0b:aa:08:f6:17:bf:81:e8:89:3d:05:7a:7c:c6: 2e:8f:4b:9f:00:2b:cd:6f:f2:22:78:9f:b7:d5:ed:a6:d3:df: 04:e3:8a:75:20:eb:9b:4f:5d:5b:1b:84:cb:29:c0:48:40:86: c6:57:f1:95:8b:8e:32:fc:60:6f:d3:2a:5a:49:9a:10:ed:f8: c5:90:5e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjYwNDE3MDI1MjUzWhcNMjYwNDI0MDI1MjUzWjAYMRYwFAYD VQQDEw02OWUxYTA4Ni00YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkBi51l2zCtD9DnTeF0KLg+JO+5NzQQJtPMG9vQQoUTw2369guYRK9LJPaSHz 4eaIAc7MAkif0iMiMbduxN9Dk8kRxlDJFS3JS/O+rgHiIa5Dwpd7Er8KYK+wLd2T 8tJR0lQho8sHYMwq5r5TBNl1LdNC6ypnaHZvK1UzCxXstQNvOMOU7/+K1HVmjyJX srKZ6SF/LlUVkl/C5bvTI3CfO4pPNeqMrLR+v0ugActixo+uDQj0KkhHJS7rEqxg d/QCdZIhNbLpMlybyirFYBoBVVgUUV45teNNy/7Sxq3xaPZkBxLu42M7/K2iUVIn Ii8lOm1CIgxe8FQoJYWZ8MtS8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYEQMlb jh+PxbzfzFazUR2NF+pmMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF51IJesrNsLjQ9eKbEYt4Lcdk3Ij4/5XxAbfifabbpXCsyBLYOFqezvy3l+S oB91cxrtTd8Z/iJm8CjIH/LRfN7afRxLkKTTYSt3ZWpBeXTcV3QiAeVbpx7nPqCc AHPlF1v1z2ERKMkGqlOCOExJ+OTPa8xHYrVg3A5ueov83qGQvggxv8SQi2Zpp8so mHcgvrjfu3bhvWL7oDsKap1alv2yk0oK5GntTykJxNTNkoAC+nijzCCxaAuqCPYX v4HoiT0FenzGLo9LnwArzW/yInift9XtptPfBOOKdSDrm09dWxuEyynASECGxlfx lYuOMvxgb9MqWkmaEO34xZBegg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:15:20 2026 by rpki-client