$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: tOmWiKEkcNRutQpuGzwezDEOn2c+UNpPalraV+zRHIU= Subject key identifier: 82:73:88:57:0C:95:ED:EC:70:8D:15:99:5B:33:0D:E0:23:C4:AD:7F Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A61 Signing time: Thu 16 Apr 2026 19:33:32 +0000 Manifest this update: Thu 16 Apr 2026 19:33:32 +0000 Manifest next update: Thu 23 Apr 2026 19:33:32 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: iOpxa9gOmZYA8DaDWdXPt0/1UKXlj7Qdjj7YzAUG2yo=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Apr 16 19:33:32 2026 GMT Not After : Apr 23 19:33:32 2026 GMT Subject: CN=69e1398c-4397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:d6:96:ae:a3:6d:61:1d:a9:ee:12:50:02: 29:e4:41:89:58:4c:e3:ee:c6:76:d2:5e:b7:70:e5: c9:78:b3:c9:56:c6:7a:32:5d:ad:9d:9b:5b:31:f4: 96:79:fc:36:a5:47:35:53:44:83:b9:b5:a5:07:65: 8f:67:fd:de:52:41:fb:12:e5:85:db:0c:2c:b1:de: d8:fc:07:2e:d9:2b:bd:34:0b:6d:d3:65:68:4c:e3: 7f:5f:83:b7:bf:76:4f:4e:35:60:aa:04:6b:b6:c2: 37:b9:00:b5:dc:f9:65:46:fb:60:69:ad:2b:76:c9: 03:96:89:ce:1c:b0:de:c2:49:82:e2:bd:df:c5:e8: b2:f5:d7:14:02:18:9f:19:de:16:ea:8d:ab:6f:78: 52:d8:ee:b7:0e:ab:d4:69:31:f2:ad:c5:c5:34:91: f1:35:dd:e0:51:e2:9d:63:87:f8:67:06:a3:8c:e4: 28:5b:58:78:f7:1a:5c:5e:44:13:2c:ea:fe:49:80: 9b:8d:63:c9:4e:d2:25:6e:d4:1b:ea:8f:de:75:c5: 11:cc:38:a5:f8:a6:d2:86:d2:8a:58:d2:7d:2e:ca: 33:76:68:39:5a:ee:4b:ef:f8:c7:5f:0f:cf:ca:8b: 3f:c7:36:0f:72:53:92:bd:b6:1f:29:c8:0c:9b:40: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:88:57:0C:95:ED:EC:70:8D:15:99:5B:33:0D:E0:23:C4:AD:7F X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1b:e7:55:ea:39:c3:6d:c6:a7:33:72:04:9e:d8:a2:9d:a7: 1c:af:a4:27:24:df:82:11:8c:ea:80:65:dd:bb:e1:68:5c:f5: c9:82:f2:65:11:66:06:7d:54:eb:bb:f5:ff:14:63:45:bb:27: 28:9c:c9:5b:a1:f8:5b:28:d6:20:33:ef:a0:d8:38:91:65:24: db:07:1c:3f:a5:1d:55:25:01:bc:dc:0f:a7:a8:bb:6f:24:43: 3d:91:17:4e:0e:e3:b5:bf:34:1c:d7:bc:81:f2:15:47:10:7a: 18:ca:94:34:b9:e8:f7:54:20:44:88:d6:16:e5:af:ba:01:bb: ad:e8:4b:a5:33:47:c5:17:46:af:b3:18:9d:ed:ad:6b:96:93: e4:a5:be:eb:2c:af:2f:ce:76:55:3b:38:dd:a9:5f:40:db:61: 88:a5:d5:ea:cd:1b:db:62:39:c3:ad:97:4b:97:f3:95:37:d8: d7:c6:68:1b:ab:bb:8b:8a:a0:07:40:c7:7d:09:cb:d9:7a:fd: 7c:21:ed:46:c5:67:a7:91:72:d4:92:53:1c:a1:e9:fb:55:d0: aa:e2:a8:1f:28:ae:0a:5d:5c:a2:8f:5a:51:90:64:c9:b8:13: 13:b5:62:06:68:e2:6a:bb:89:50:60:d1:48:12:39:29:2a:12: 20:00:8a:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjYwNDE2MTkzMzMyWhcNMjYwNDIzMTkzMzMyWjAYMRYwFAYD VQQDEw02OWUxMzk4Yy00Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtvWlq6jbWEdqe4SUAIp5EGJWEzj7sZ20l63cOXJeLPJVsZ6Ml2tnZtbMfSW efw2pUc1U0SDubWlB2WPZ/3eUkH7EuWF2wwssd7Y/Acu2Su9NAtt02VoTON/X4O3 v3ZPTjVgqgRrtsI3uQC13PllRvtgaa0rdskDlonOHLDewkmC4r3fxeiy9dcUAhif Gd4W6o2rb3hS2O63DqvUaTHyrcXFNJHxNd3gUeKdY4f4ZwajjOQoW1h49xpcXkQT LOr+SYCbjWPJTtIlbtQb6o/edcURzDil+KbShtKKWNJ9Lsozdmg5Wu5L7/jHXw/P yos/xzYPclOSvbYfKcgMm0BmJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJziFcM le3scI0VmVszDeAjxK1/MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohvnVeo5w23GpzNyBJ7Yop2nHK+kJyTfghGM6oBl3bvhaFz1yYLyZRFmBn1U 67v1/xRjRbsnKJzJW6H4WyjWIDPvoNg4kWUk2wccP6UdVSUBvNwPp6i7byRDPZEX Tg7jtb80HNe8gfIVRxB6GMqUNLno91QgRIjWFuWvugG7rehLpTNHxRdGr7MYne2t a5aT5KW+6yyvL852VTs43alfQNthiKXV6s0b22I5w62XS5fzlTfY18ZoG6u7i4qg B0DHfQnL2Xr9fCHtRsVnp5Fy1JJTHKHp+1XQquKoHyiuCl1coo9aUZBkybgTE7Vi BmjiaruJUGDRSBI5KSoSIACKHA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:14:23 2026 by rpki-client