$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: Llp0tTUr/1/mfIPm79qh0liO2DOq6cAO8OCT3kHMwMs= Subject key identifier: 25:75:3F:7B:D4:8F:89:D7:AC:92:C5:63:8E:1F:C8:30:93:39:CC:97 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 013F Signing time: Fri 17 Apr 2026 05:01:06 +0000 Manifest this update: Fri 17 Apr 2026 05:01:06 +0000 Manifest next update: Fri 24 Apr 2026 05:01:06 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: Y1fBJ5g2TKRc3DIEzLmS5SxS/oEaBYqAyedLmbD9hew=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: KClykHKChBZ5Bx9B5+rZuGfT1EY+y0O+dL2jNFzbRSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Apr 17 05:01:06 2026 GMT Not After : Apr 24 05:01:06 2026 GMT Subject: CN=69e1be92-2ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:24:85:1e:dc:12:a5:00:bd:65:f2:71:a4: a1:14:b8:00:bf:67:eb:0c:11:91:a6:6b:b9:f6:31: 61:9e:64:be:e4:a5:e7:c9:6e:09:ca:15:95:7f:02: 62:8e:9a:46:14:bc:ff:19:fe:b3:49:04:d2:f4:ca: 14:7f:71:ae:82:55:d4:f8:22:b5:ce:8b:4c:26:e1: a3:a4:7a:94:94:26:76:7a:ce:cf:b6:d9:5a:61:a4: df:25:c6:05:b3:86:16:a3:b5:2f:68:75:e2:53:28: 73:bb:7b:1e:ad:24:af:b1:8e:86:97:fe:ff:b1:8d: 1c:9f:8d:60:e2:f9:5b:02:2d:57:f1:63:e2:30:17: ed:67:fb:d0:8b:ec:36:e7:65:66:dc:91:46:10:44: 4a:7c:58:a3:86:1d:4a:15:4b:9f:6f:ae:77:62:61: 95:cd:89:29:9f:f9:a7:ab:8a:f7:a3:9b:22:3f:63: 24:e8:93:57:97:07:3e:37:a8:db:fc:33:5c:cf:de: a5:97:df:d1:78:ba:6d:51:10:86:6a:1f:94:e9:a8: 46:d4:5a:54:14:6b:d5:bf:88:02:bd:d7:ca:89:b4: 8f:03:ad:f9:3d:89:6f:04:a4:d3:e3:a0:7c:bf:43: fb:f1:7a:de:5b:08:c0:f2:3d:a8:12:29:70:a0:09: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:3F:7B:D4:8F:89:D7:AC:92:C5:63:8E:1F:C8:30:93:39:CC:97 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:35:20:b7:40:04:1e:75:ea:5c:0a:71:e0:9f:01:b9:3e: fc:5c:b0:cf:5c:51:d2:4c:80:77:ad:22:83:03:57:d1:52:6b: 9d:b1:f5:af:ed:e7:47:e3:68:a2:b0:e5:75:e8:fb:0f:89:44: 2e:f8:6a:ab:07:5e:b3:69:c1:69:ab:f1:87:a2:85:9a:f4:6f: fa:9b:3c:91:16:92:b5:9f:dd:98:86:9d:9c:6e:77:65:a1:a1: d0:6e:8c:8b:a2:94:17:85:89:60:78:38:61:40:78:f5:bf:91: d2:5b:9d:e7:72:cc:b3:2e:7d:12:eb:d8:0d:7f:58:73:2b:c2: 79:ce:6b:ec:73:82:fd:be:d5:6d:39:ba:64:99:13:d9:74:e1: 73:5e:74:80:62:2c:6d:33:4c:36:07:90:4b:87:58:c2:a4:6c: cb:5b:36:4a:c9:ba:21:36:e0:be:1a:95:f3:da:b4:2b:22:04: 70:93:c4:9e:be:0d:0c:6b:ea:36:9b:5a:90:d0:15:07:b3:dc: 3d:d6:9c:7f:9a:24:78:e6:31:1e:3f:01:25:79:c0:36:6a:2c: b9:9c:cd:1a:0b:12:8f:3c:34:b5:ab:9b:f9:69:d3:f9:5d:5e: 87:63:24:d2:a2:4e:bf:3f:03:d4:fd:12:68:41:14:0e:87:c4: a8:aa:2f:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjYwNDE3MDUwMTA2WhcNMjYwNDI0MDUwMTA2WjAYMRYwFAYD VQQDEw02OWUxYmU5Mi0yZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQUkhR7cEqUAvWXycaShFLgAv2frDBGRpmu59jFhnmS+5KXnyW4JyhWVfwJi jppGFLz/Gf6zSQTS9MoUf3GuglXU+CK1zotMJuGjpHqUlCZ2es7PttlaYaTfJcYF s4YWo7UvaHXiUyhzu3serSSvsY6Gl/7/sY0cn41g4vlbAi1X8WPiMBftZ/vQi+w2 52Vm3JFGEERKfFijhh1KFUufb653YmGVzYkpn/mnq4r3o5siP2Mk6JNXlwc+N6jb /DNcz96ll9/ReLptURCGah+U6ahG1FpUFGvVv4gCvdfKibSPA635PYlvBKTT46B8 v0P78XreWwjA8j2oEilwoAkTBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCV1P3vU j4nXrJLFY44fyDCTOcyXMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd/41ILdABB516lwKceCfAbk+/Fywz1xR0kyAd60igwNX0VJrnbH1r+3nR+No orDldej7D4lELvhqqwdes2nBaavxh6KFmvRv+ps8kRaStZ/dmIadnG53ZaGh0G6M i6KUF4WJYHg4YUB49b+R0lud53LMsy59EuvYDX9YcyvCec5r7HOC/b7VbTm6ZJkT 2XThc150gGIsbTNMNgeQS4dYwqRsy1s2Ssm6ITbgvhqV89q0KyIEcJPEnr4NDGvq NptakNAVB7PcPdacf5okeOYxHj8BJXnANmosuZzNGgsSjzw0taub+WnT+V1eh2Mk 0qJOvz8D1P0SaEEUDofEqKovZw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:24:10 2026 by rpki-client