$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: LxgQQf0D9jS1TaBNbnZKrcCdbCy4SJ3UiOmDJ4UKRco= Subject key identifier: 13:64:92:8C:21:3C:7D:76:04:E3:D7:56:1F:0C:27:88:A6:D5:3C:35 Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 9A Signing time: Fri 17 Apr 2026 07:06:45 +0000 Manifest this update: Fri 17 Apr 2026 07:06:45 +0000 Manifest next update: Fri 24 Apr 2026 07:06:45 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: 3kxz0wX0TA23ffQEwRETw9qVqoWxi5nuryv4Yv1cHHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Apr 17 07:06:45 2026 GMT Not After : Apr 24 07:06:45 2026 GMT Subject: CN=69e1dc05-5a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:3b:00:63:9a:d9:cb:11:f1:7d:c5:88:47: ce:83:a6:f1:97:e0:60:e0:08:95:da:55:ee:62:79: ee:31:7b:e8:86:e9:8e:6e:a9:1d:95:cd:81:86:d4: 96:82:0b:0b:13:a4:47:03:2b:9d:f9:a5:f2:97:14: d4:dd:09:4a:bb:80:83:18:0d:56:24:dd:80:a0:08: ca:f0:e6:d3:2d:f1:84:37:45:04:cd:62:40:04:f0: 5f:96:83:5e:4b:c4:a2:cb:de:e5:ab:00:f9:72:7e: 30:73:6b:b7:92:b1:c5:6e:a6:b3:28:58:e8:da:19: 59:14:f6:b5:7e:78:df:27:52:ca:d4:03:c9:2d:16: f6:46:e3:f2:03:39:fe:90:45:fc:77:b3:34:04:e6: 19:9b:54:9b:35:6f:89:5b:b1:61:28:00:0a:6d:c0: 02:74:72:67:4b:d4:75:81:06:0d:f5:50:04:82:5e: 1b:62:8e:ce:16:fb:35:85:bb:8b:02:ea:c9:09:cf: 44:84:a6:83:b4:d3:b5:c2:fa:7a:ef:73:d3:b1:c4: 2b:cd:71:7d:f1:69:9a:26:8a:b0:19:95:04:25:a9: 91:bc:58:f7:06:99:9d:da:7c:3c:34:87:de:07:39: 85:a8:df:08:84:b1:75:2a:57:f5:73:ae:76:8c:12: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:92:8C:21:3C:7D:76:04:E3:D7:56:1F:0C:27:88:A6:D5:3C:35 X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:54:3a:5a:4b:e6:2b:95:ee:09:d3:9f:27:75:da:01:d7:4d: ff:cb:f1:89:1c:e6:99:6a:13:ce:e8:44:dc:7b:c9:59:22:0c: 1d:ca:ff:fb:7b:88:52:9f:a0:e5:70:84:13:67:63:70:3d:7b: 08:1b:d4:44:40:1d:cc:d6:e1:a2:0f:75:31:74:8e:32:76:dc: 41:6a:54:10:94:c9:ed:93:9b:79:7d:35:55:47:27:8c:e2:2c: 7d:2b:0b:a8:76:d2:d9:e4:e6:3e:0a:32:76:58:80:18:ea:b2: 29:47:76:41:1f:83:f9:3e:05:da:4a:30:70:e9:f8:a4:1d:3d: 6f:97:76:4b:a9:73:5e:73:7e:d1:71:3f:ba:98:46:59:06:19: 47:ec:90:94:76:00:e9:ae:d6:d6:c5:7a:36:c4:4b:33:ab:c5: fb:6d:68:ef:f3:5a:7f:86:29:84:17:cc:85:18:cd:e5:63:c1: 92:08:b2:d9:52:b7:c5:9c:5e:90:c8:6a:5e:b9:12:70:32:58: b8:48:01:3d:c8:54:1c:0e:62:d1:73:14:24:b8:ee:de:0d:19: 76:25:84:5a:ee:6e:7a:0c:b3:a3:5b:1a:c3:8a:68:55:4a:6a: 9a:d6:a2:22:c0:80:b7:63:3a:ce:b2:6f:39:91:f5:57:35:1b: 5d:54:dc:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1QzgxMTAvBgNVBAUTKENGNkYxMkRCREU0QkU5MTM0NTgxNThGNUM3Nzg1Qzcx MjkwODU1NUMwHhcNMjYwNDE3MDcwNjQ1WhcNMjYwNDI0MDcwNjQ1WjAYMRYwFAYD VQQDEw02OWUxZGMwNS01YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIE7AGOa2csR8X3FiEfOg6bxl+Bg4AiV2lXuYnnuMXvohumObqkdlc2BhtSW ggsLE6RHAyud+aXylxTU3QlKu4CDGA1WJN2AoAjK8ObTLfGEN0UEzWJABPBfloNe S8Siy97lqwD5cn4wc2u3krHFbqazKFjo2hlZFPa1fnjfJ1LK1APJLRb2RuPyAzn+ kEX8d7M0BOYZm1SbNW+JW7FhKAAKbcACdHJnS9R1gQYN9VAEgl4bYo7OFvs1hbuL AurJCc9EhKaDtNO1wvp673PTscQrzXF98WmaJoqwGZUEJamRvFj3Bpmd2nw8NIfe BzmFqN8IhLF1Klf1c652jBLe5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNkkowh PH12BOPXVh8MJ4im1Tw1MB8GA1UdIwQYMBaAFM9vEtveS+kTRYFY9cd4XHEpCFVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjVDOC8zQkNEMUJFQTU1 OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZSTkZnVmoxeDNoY2NTa0lW VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjVDOC8zQkNEMUJFQTU1OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZS TkZnVmoxeDNoY2NTa0lWVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKVQ6WkvmK5XuCdOfJ3XaAddN/8vxiRzmmWoTzuhE3HvJWSIMHcr/+3uIUp+g 5XCEE2djcD17CBvUREAdzNbhog91MXSOMnbcQWpUEJTJ7ZObeX01VUcnjOIsfSsL qHbS2eTmPgoydliAGOqyKUd2QR+D+T4F2kowcOn4pB09b5d2S6lzXnN+0XE/uphG WQYZR+yQlHYA6a7W1sV6NsRLM6vF+21o7/Naf4YphBfMhRjN5WPBkgiy2VK3xZxe kMhqXrkScDJYuEgBPchUHA5i0XMUJLju3g0ZdiWEWu5uegyzo1saw4poVUpqmtai IsCAt2M6zrJvOZH1VzUbXVTcVw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:32:53 2026 by rpki-client