$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: Wss1DrF1mzuoab8flzcePFTRpJGfDEaH1qGhzLF0+Kg= Subject key identifier: 02:41:4B:C2:18:8E:9B:18:65:4A:7E:35:AB:D5:18:34:C0:88:B2:10 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 0951 Signing time: Thu 16 Apr 2026 20:02:11 +0000 Manifest this update: Thu 16 Apr 2026 20:02:10 +0000 Manifest next update: Thu 23 Apr 2026 20:02:10 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: +CUHE4borP6oDx5fsNT3D9PJ18+6L5FpRLteLfFgjlQ=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: 2k5v5V+a2T7nbvDutqVQldFzjmy9JJnSlbIW5tFWkXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Apr 16 20:02:10 2026 GMT Not After : Apr 23 20:02:10 2026 GMT Subject: CN=69e14043-6055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:27:ce:39:ab:44:e3:48:d9:3b:80:80:4c: fc:dd:ad:91:3a:8f:d7:98:17:92:44:38:c6:20:73: 11:8d:2d:53:d2:d5:3d:91:14:49:f3:f8:bb:1b:87: da:9e:9a:dc:c7:89:ba:ea:59:f5:8c:a1:ba:aa:75: a7:a2:3d:5f:d9:b3:4e:40:55:9c:d5:47:d3:8d:3b: 84:0a:f3:5c:18:84:e4:d1:a1:f4:eb:44:77:c1:5c: d2:5c:48:ef:4d:03:8e:4d:04:1b:21:9e:81:28:4b: 3f:58:f4:84:ae:d0:76:dd:3a:11:6c:2c:3b:16:e1: 65:95:12:35:d9:e6:3d:7f:97:03:ae:7d:ef:c6:06: a4:d1:2f:38:90:3e:d3:28:15:09:e2:6a:6a:52:79: 19:e7:eb:47:be:aa:ba:19:fc:00:85:25:15:38:2e: e8:6e:8e:2a:5b:78:c5:b5:86:55:57:69:c3:cc:4e: 3b:82:f4:3d:5a:4d:72:d7:13:43:72:ac:e6:4d:2c: bf:75:67:d3:ce:13:38:30:43:43:cf:f1:94:52:2f: b9:fe:a5:27:84:a0:ec:23:a8:f9:91:78:d0:68:90: ef:9d:3f:cf:4d:18:a0:e9:60:6d:e8:6c:ba:75:23: ff:c4:6f:79:66:49:b6:a9:54:35:82:72:3e:40:85: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:41:4B:C2:18:8E:9B:18:65:4A:7E:35:AB:D5:18:34:C0:88:B2:10 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1d:fc:ac:71:39:c8:13:36:b6:cd:75:8b:59:d2:ed:45:b5: cb:60:e0:e5:d8:03:40:09:33:1a:00:ee:90:82:91:12:57:7f: c5:51:eb:97:24:69:10:cc:1e:97:3f:01:bc:cf:ee:95:7f:7a: 92:e3:58:b2:b2:e7:64:16:65:74:35:69:02:e1:79:48:d6:e6: 68:1c:89:05:78:33:99:da:aa:99:57:61:22:68:7f:58:9a:bc: fe:a2:b0:a6:83:01:cc:91:cb:64:6b:f1:25:d1:da:22:42:43: 50:25:2c:cc:67:3a:cf:d1:03:f3:a9:82:1f:84:64:3f:6e:c8: 07:f6:c2:92:ba:34:7b:11:1b:e7:ea:c6:fa:73:be:c4:2c:6d: db:55:f2:4e:8a:1c:ff:b4:7b:f8:8c:cc:3b:11:84:8b:c0:dc: 71:f3:ca:fc:fe:8d:58:cc:a3:d2:08:d6:a7:b8:40:fd:92:ab: 9d:23:d3:b4:82:d8:6a:94:a7:ae:7a:f1:4d:bc:bd:72:14:d4: 4f:db:13:6c:e0:e9:38:5e:e7:8c:32:fc:3c:f5:1a:f9:0e:2d: 7c:e1:c1:d8:56:46:8f:4d:5d:53:66:ff:63:68:6e:86:83:f8: d9:89:bf:40:40:12:80:30:68:84:90:d1:fe:1f:fc:f8:e2:7b: 6c:65:94:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjYwNDE2MjAwMjEwWhcNMjYwNDIzMjAwMjEwWjAYMRYwFAYD VQQDEw02OWUxNDA0My02MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY0nzjmrRONI2TuAgEz83a2ROo/XmBeSRDjGIHMRjS1T0tU9kRRJ8/i7G4fa nprcx4m66ln1jKG6qnWnoj1f2bNOQFWc1UfTjTuECvNcGITk0aH060R3wVzSXEjv TQOOTQQbIZ6BKEs/WPSErtB23ToRbCw7FuFllRI12eY9f5cDrn3vxgak0S84kD7T KBUJ4mpqUnkZ5+tHvqq6GfwAhSUVOC7obo4qW3jFtYZVV2nDzE47gvQ9Wk1y1xND cqzmTSy/dWfTzhM4MENDz/GUUi+5/qUnhKDsI6j5kXjQaJDvnT/PTRig6WBt6Gy6 dSP/xG95Zkm2qVQ1gnI+QIWwyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJBS8IY jpsYZUp+NavVGDTAiLIQMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASh38rHE5yBM2ts11i1nS7UW1y2Dg5dgDQAkzGgDukIKREld/xVHrlyRpEMwe lz8BvM/ulX96kuNYsrLnZBZldDVpAuF5SNbmaByJBXgzmdqqmVdhImh/WJq8/qKw poMBzJHLZGvxJdHaIkJDUCUszGc6z9ED86mCH4RkP27IB/bCkro0exEb5+rG+nO+ xCxt21XyTooc/7R7+IzMOxGEi8DccfPK/P6NWMyj0gjWp7hA/ZKrnSPTtILYapSn rnrxTby9chTUT9sTbODpOF7njDL8PPUa+Q4tfOHB2FZGj01dU2b/Y2huhoP42Ym/ QEASgDBohJDR/h/8+OJ7bGWUvA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:30 2026 by rpki-client