$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: lnBVh/SaDdATPxwXbwb1zVYr0Koq/MpG3SPfNtUuqs0= Subject key identifier: C5:C1:4D:BC:90:5E:41:50:67:09:8B:9D:6F:B8:32:63:EA:F9:45:1C Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 06DA Signing time: Thu 16 Apr 2026 22:08:10 +0000 Manifest this update: Thu 16 Apr 2026 22:08:09 +0000 Manifest next update: Thu 23 Apr 2026 22:08:09 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: 4NgudtcUrYAABKfHcmt3iK9U1GKmB2101XjN54Cm/u8=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Apr 16 22:08:09 2026 GMT Not After : Apr 23 22:08:09 2026 GMT Subject: CN=69e15dc9-1989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:ad:17:8d:57:75:1a:eb:22:32:f1:27:9c: 9f:23:a6:5f:25:47:0d:9d:80:c9:59:df:18:e0:26: 5e:6e:65:3e:68:75:89:f0:da:d5:3f:87:e3:fe:33: 9d:ff:38:f8:47:9b:3c:a8:27:57:d8:5c:fc:fd:3a: fc:9f:03:c4:53:8a:03:13:5b:dc:86:45:7a:ac:ac: bc:e7:a2:cf:a4:49:85:de:75:ce:41:cb:5f:2b:53: 9f:39:e7:4e:cc:ff:09:b5:45:11:4d:58:49:bf:84: ae:39:7e:6a:d2:4e:09:5e:f9:09:9d:9a:3f:bb:6e: 2b:d6:10:c3:e9:ee:8e:35:79:65:81:05:1d:a9:67: c4:c7:af:f6:3b:55:4c:03:b8:1b:3a:c2:cf:70:60: 47:6f:76:2c:57:66:e2:ee:a2:c3:cc:7c:ad:bd:f7: 1d:b8:20:aa:31:c5:e0:55:59:42:c8:67:60:ae:5f: 34:3c:be:87:2b:e6:6e:78:63:78:34:9d:72:b1:58: e1:df:80:d5:9e:b3:e7:74:6a:a7:42:e2:69:9d:0a: 59:97:4d:16:be:07:e6:ed:23:68:26:a1:51:f7:0f: cc:64:0e:0e:cf:01:d1:27:ae:be:6c:b4:14:36:7a: 76:af:9c:28:40:74:69:8e:d3:a2:0a:9f:18:44:4e: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C1:4D:BC:90:5E:41:50:67:09:8B:9D:6F:B8:32:63:EA:F9:45:1C X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:fe:38:ff:0b:90:38:bf:8b:6c:6b:36:54:25:d3:be:d3: 1b:86:19:c1:07:7b:55:7b:d0:07:61:9c:58:46:c0:fa:39:3c: e2:fc:0f:ab:10:46:50:2f:f1:6a:12:0a:26:01:bf:5b:38:b8: 1e:aa:d3:c4:01:b9:75:9a:8f:bd:c9:a9:9b:3c:1e:5f:c7:65: d4:3d:58:8b:20:17:f4:81:f8:11:b3:45:56:e0:c0:c2:11:51: 58:5d:15:5e:6d:aa:d0:ba:c0:02:33:83:84:4f:90:f4:d5:30: b9:72:12:83:e2:63:cc:04:fe:73:73:64:2f:5d:13:d9:3c:06: 18:5f:c8:a4:4b:37:88:10:d5:ba:46:e5:65:33:ed:a0:17:45: 3c:8e:99:18:2a:52:ef:ec:94:73:b1:73:0e:27:f2:c5:a5:ca: 68:21:85:36:10:68:71:f3:49:6f:31:ea:32:92:1d:1a:79:26: b2:87:37:87:85:b2:d4:94:03:53:84:95:e6:75:f7:43:40:9a: e2:67:a9:dc:91:26:36:52:8d:f6:df:29:93:3c:41:cd:ac:9b: fb:8e:b1:e2:1b:11:db:0f:6e:e1:f7:28:4b:1a:01:cb:31:98: 64:98:78:87:39:08:50:9e:44:6f:3e:f7:28:e0:86:24:15:3d: 32:8e:7d:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwNDE2MjIwODA5WhcNMjYwNDIzMjIwODA5WjAYMRYwFAYD VQQDEw02OWUxNWRjOS0xOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqOtF41XdRrrIjLxJ5yfI6ZfJUcNnYDJWd8Y4CZebmU+aHWJ8NrVP4fj/jOd /zj4R5s8qCdX2Fz8/Tr8nwPEU4oDE1vchkV6rKy856LPpEmF3nXOQctfK1OfOedO zP8JtUURTVhJv4SuOX5q0k4JXvkJnZo/u24r1hDD6e6ONXllgQUdqWfEx6/2O1VM A7gbOsLPcGBHb3YsV2bi7qLDzHytvfcduCCqMcXgVVlCyGdgrl80PL6HK+ZueGN4 NJ1ysVjh34DVnrPndGqnQuJpnQpZl00Wvgfm7SNoJqFR9w/MZA4OzwHRJ66+bLQU Nnp2r5woQHRpjtOiCp8YRE5ApQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXBTbyQ XkFQZwmLnW+4MmPq+UUcMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCz+OP8LkDi/i2xrNlQl077TG4YZwQd7VXvQB2GcWEbA+jk84vwPqxBGUC/x ahIKJgG/Wzi4HqrTxAG5dZqPvcmpmzweX8dl1D1YiyAX9IH4EbNFVuDAwhFRWF0V Xm2q0LrAAjODhE+Q9NUwuXISg+JjzAT+c3NkL10T2TwGGF/IpEs3iBDVukblZTPt oBdFPI6ZGCpS7+yUc7FzDifyxaXKaCGFNhBocfNJbzHqMpIdGnkmsoc3h4Wy1JQD U4SV5nX3Q0Ca4mep3JEmNlKN9t8pkzxBzayb+46x4hsR2w9u4fcoSxoByzGYZJh4 hzkIUJ5Ebz73KOCGJBU9Mo59lQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:02 2026 by rpki-client