$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: JSn+++Etzm9anzGFeJUEzNdGcwtbsO2/v9CeZuUpgI0= Subject key identifier: 9C:DF:C3:66:F3:A8:80:18:70:75:FE:65:11:E6:18:97:0E:9C:21:45 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0CEB Signing time: Thu 16 Apr 2026 18:09:05 +0000 Manifest this update: Thu 16 Apr 2026 18:09:04 +0000 Manifest next update: Thu 23 Apr 2026 18:09:04 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: Up57NDZYl4JBm4XhngC10qsvl9VQqzo3JVuM84BzXTs=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Apr 16 18:09:04 2026 GMT Not After : Apr 23 18:09:04 2026 GMT Subject: CN=69e125c1-a2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:a6:7d:73:02:f4:16:b1:47:a1:3f:f7:93: b6:3c:cf:c1:1f:18:eb:22:10:e2:72:9d:38:5d:64: fe:85:46:1a:94:ac:2f:46:9f:58:d5:e8:79:68:a8: bf:8b:88:93:51:7d:a1:ea:37:24:d7:d0:e7:20:63: 3c:5b:c8:24:95:33:bb:f2:0e:cb:02:ed:ed:33:2f: a6:9f:75:b7:96:c6:65:e1:d4:9f:29:9c:6f:12:8f: 1f:5d:c5:65:ca:8c:5a:36:de:79:69:95:f4:b6:71: a9:be:72:d3:79:ce:4b:3e:15:91:c5:a1:a5:95:36: df:46:20:17:59:97:44:ed:ed:c8:31:a4:7d:5b:29: 7a:93:26:7f:2c:4b:79:72:a1:1f:27:b8:84:84:19: c8:3a:08:1c:5c:aa:49:23:0f:5b:d4:dd:89:67:e0: ef:4d:39:c3:59:6f:16:7e:f6:8b:6f:d5:d7:64:ac: ba:44:cd:f7:55:69:1b:8e:f2:7d:94:39:e9:35:0f: 12:36:c4:d3:e9:ce:f5:ab:fd:09:46:f2:7c:4a:6d: eb:5d:75:88:55:ee:c3:dc:0f:c3:c3:9f:36:36:55: d7:16:1a:be:28:12:d5:a3:e3:b3:5c:df:79:d4:9b: b6:f6:71:51:ab:30:0c:3a:e7:b7:6e:62:f5:a6:8a: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:C3:66:F3:A8:80:18:70:75:FE:65:11:E6:18:97:0E:9C:21:45 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:15:1b:46:1e:56:3c:62:69:f7:5f:2a:be:19:c7:7e:87:46: 85:9b:52:bf:c5:2f:c8:5b:45:b5:36:92:28:97:ed:9d:fd:e0: 8f:da:ab:47:91:12:5c:18:27:b8:b9:86:a6:21:03:93:03:3c: 06:a2:6f:77:0a:d4:94:81:f8:20:d8:8f:71:02:97:fc:8f:8f: 40:1b:11:d7:00:2e:57:bc:70:4a:08:14:2d:e2:93:4c:7f:e0: 47:44:d8:94:e4:0f:d0:79:50:a7:1b:86:b5:e8:1c:49:c6:13: 5c:65:98:af:87:0b:ca:4b:c2:7a:19:f4:b6:ca:80:af:23:91: 9b:b7:e8:8c:5e:17:b1:24:bd:f2:57:34:2e:d0:cf:4c:d3:ce: 80:13:39:be:04:b7:d1:aa:98:67:2b:6f:5d:dd:ef:6b:05:f6: 36:f5:da:e4:02:fa:4d:4a:c7:b3:7a:c9:9e:18:51:6d:7d:b1: b9:2b:18:12:35:ce:94:da:45:23:cf:4d:49:af:5f:21:e4:e9: 65:6d:a2:36:e0:c6:f5:58:51:17:1a:55:58:d4:d3:65:8e:b9: 99:cd:a0:a8:1f:84:00:ee:d7:38:61:09:52:2f:6d:fe:66:44: dc:e9:6d:59:5e:a5:c8:07:b9:16:5b:a8:10:44:33:d9:af:72: ce:a2:a3:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjYwNDE2MTgwOTA0WhcNMjYwNDIzMTgwOTA0WjAYMRYwFAYD VQQDEw02OWUxMjVjMS1hMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DymfXMC9BaxR6E/95O2PM/BHxjrIhDicp04XWT+hUYalKwvRp9Y1eh5aKi/ i4iTUX2h6jck19DnIGM8W8gklTO78g7LAu3tMy+mn3W3lsZl4dSfKZxvEo8fXcVl yoxaNt55aZX0tnGpvnLTec5LPhWRxaGllTbfRiAXWZdE7e3IMaR9Wyl6kyZ/LEt5 cqEfJ7iEhBnIOggcXKpJIw9b1N2JZ+DvTTnDWW8WfvaLb9XXZKy6RM33VWkbjvJ9 lDnpNQ8SNsTT6c71q/0JRvJ8Sm3rXXWIVe7D3A/Dw582NlXXFhq+KBLVo+OzXN95 1Ju29nFRqzAMOue3bmL1porwKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzfw2bz qIAYcHX+ZRHmGJcOnCFFMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjhUbRh5WPGJp918qvhnHfodGhZtSv8UvyFtFtTaSKJftnf3gj9qrR5ESXBgn uLmGpiEDkwM8BqJvdwrUlIH4INiPcQKX/I+PQBsR1wAuV7xwSggULeKTTH/gR0TY lOQP0HlQpxuGtegcScYTXGWYr4cLykvCehn0tsqAryORm7fojF4XsSS98lc0LtDP TNPOgBM5vgS30aqYZytvXd3vawX2NvXa5AL6TUrHs3rJnhhRbX2xuSsYEjXOlNpF I89NSa9fIeTpZW2iNuDG9VhRFxpVWNTTZY65mc2gqB+EAO7XOGEJUi9t/mZE3Olt WV6lyAe5FluoEEQz2a9yzqKjWg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:57 2026 by rpki-client