$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: 6mOWGr9bqhJSw3tQWEt2wrzKnrYcdaJtR9p6/IlkbG8= Subject key identifier: 1A:7F:08:C1:6E:9F:3D:ED:1B:5B:64:0E:2E:F2:FA:C7:0F:6D:28:B3 Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: 70 Signing time: Fri 17 Apr 2026 07:32:28 +0000 Manifest this update: Fri 17 Apr 2026 07:32:28 +0000 Manifest next update: Fri 24 Apr 2026 07:32:28 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: XEtbu3RYJ02WXiHOZBe5Bizo4qCOzHrQ1IJJU7BcHew=) 2: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Apr 17 07:32:28 2026 GMT Not After : Apr 24 07:32:28 2026 GMT Subject: CN=69e1e20c-03de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:81:be:0f:0e:1d:aa:c2:fb:89:ef:48:0b: 9f:35:ff:6c:46:fd:86:2e:cc:c3:cd:fd:da:9e:cd: dc:7d:01:5d:3f:d5:37:22:c9:b1:51:c7:44:8d:47: b3:e8:e4:6f:b1:77:39:6f:84:2f:96:85:69:62:8e: 76:17:0c:71:c6:c2:9f:f0:42:96:99:d1:fa:5c:89: 31:8c:02:26:b4:5e:fd:7c:41:98:27:f9:c2:b7:61: 4a:32:2c:1a:12:f9:e3:7c:01:50:a9:92:df:e1:ec: 43:2c:33:10:ec:70:49:2f:09:b8:bc:cf:58:b3:78: 95:66:2e:43:5b:ec:60:42:bd:21:3a:40:9d:4c:b0: 7d:3a:49:3b:e1:8a:d0:cd:86:66:30:fc:50:10:7a: a7:89:9f:c5:91:c3:91:94:26:44:16:3f:94:38:aa: 3b:9a:87:fa:a7:83:01:a1:ec:85:da:39:43:2e:e9: 13:62:e4:38:b4:c9:e3:89:a2:f9:87:83:82:0a:1b: 21:40:f7:44:19:bf:9f:69:cc:81:ce:18:09:84:62: 77:45:62:e2:67:0b:e1:6a:06:39:92:62:dd:ce:8a: 53:d8:72:cf:1f:ec:fd:d3:dd:21:02:9c:aa:c3:15: c6:90:11:fd:83:2c:d2:b0:96:8d:a9:cf:6b:2b:46: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:08:C1:6E:9F:3D:ED:1B:5B:64:0E:2E:F2:FA:C7:0F:6D:28:B3 X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9c:d3:40:0f:7b:3a:64:31:0e:93:9b:a3:a6:df:0c:cd:14: ae:ac:9f:7b:58:e3:41:44:e8:c1:d0:2e:3f:7b:55:7f:eb:69: 5b:70:8a:1f:5d:c6:3b:03:fd:4b:a6:19:34:9e:48:c2:97:b2: f3:b0:28:b4:57:0a:4b:8c:67:eb:23:43:e1:d7:30:94:db:cf: 61:fb:b9:1c:47:0f:7d:65:2b:82:b7:2f:24:09:f2:6e:cb:7c: 3a:db:8f:7b:a8:33:d6:fb:89:f9:b0:c7:44:c6:3e:c0:f6:44: 5e:0f:e1:1a:d5:2d:cc:d7:11:5a:ae:03:2b:db:18:68:da:c0: d0:c7:09:33:35:d6:ba:66:ce:25:af:db:8e:07:7f:0f:3a:f6: 7f:30:ad:e3:2e:07:62:dc:54:9c:23:96:b2:57:76:7f:57:10: 98:de:47:a0:9b:67:02:26:e7:a0:41:f2:52:83:ab:4a:c9:b4: a8:1f:63:04:fb:6c:4f:95:a1:04:fd:df:33:14:80:61:36:0f: 4a:0a:18:f0:36:46:ab:96:ae:9b:7c:a3:78:44:1b:2c:bc:83: 5b:86:96:35:a4:21:1a:0b:6b:ae:f0:88:be:2e:aa:41:11:63: 82:89:15:c5:27:31:5d:af:23:60:92:2d:05:e6:58:06:53:ce: 50:5e:53:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0IwNzExMC8GA1UEBRMoQ0NFOUM1NjI0QkFDRjlEMDk4NUUzRjJENkUzMUU2QjJE ODZEODJBRTAeFw0yNjA0MTcwNzMyMjhaFw0yNjA0MjQwNzMyMjhaMBgxFjAUBgNV BAMTDTY5ZTFlMjBjLTAzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCK+IG+Dw4dqsL7ie9IC581/2xG/YYuzMPN/dqezdx9AV0/1TciybFRx0SNR7Po 5G+xdzlvhC+WhWlijnYXDHHGwp/wQpaZ0fpciTGMAia0Xv18QZgn+cK3YUoyLBoS +eN8AVCpkt/h7EMsMxDscEkvCbi8z1izeJVmLkNb7GBCvSE6QJ1MsH06STvhitDN hmYw/FAQeqeJn8WRw5GUJkQWP5Q4qjuah/qngwGh7IXaOUMu6RNi5Di0yeOJovmH g4IKGyFA90QZv59pzIHOGAmEYndFYuJnC+FqBjmSYt3OilPYcs8f7P3T3SECnKrD FcaQEf2DLNKwlo2pz2srRuY3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGn8IwW6f Pe0bW2QOLvL6xw9tKLMwHwYDVR0jBBgwFoAUzOnFYkus+dCYXj8tbjHmsthtgq4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjA3L0Q4ODU0NDkyOEZE NTExRjBBNjFDOUIyQkM0RjlBRTAyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvek9uRllrdXMtZENZWGo4dGJqSG1zdGh0Z3E0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 QjA3L0Q4ODU0NDkyOEZENTExRjBBNjFDOUIyQkM0RjlBRTAyL3pPbkZZa3VzLWRD WVhqOHRiakhtc3RodGdxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAunNNAD3s6ZDEOk5ujpt8MzRSurJ97WONBROjB0C4/e1V/62lbcIofXcY7A/1L phk0nkjCl7LzsCi0VwpLjGfrI0Ph1zCU289h+7kcRw99ZSuCty8kCfJuy3w62497 qDPW+4n5sMdExj7A9kReD+Ea1S3M1xFargMr2xho2sDQxwkzNda6Zs4lr9uOB38P OvZ/MK3jLgdi3FScI5ayV3Z/VxCY3kegm2cCJuegQfJSg6tKybSoH2ME+2xPlaEE /d8zFIBhNg9KChjwNkarlq6bfKN4RBssvINbhpY1pCEaC2uu8Ii+LqpBEWOCiRXF JzFdryNgki0F5lgGU85QXlMu -----END CERTIFICATE-----Generated at Sat Apr 18 02:31:27 2026 by rpki-client