$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: go7it4wZAMlh1dbB4KMHqZqWZjRL+dGbeVBMo+oCzM0= Subject key identifier: 3A:77:F8:BA:05:BC:6B:30:ED:6F:E3:EC:7D:9A:37:A3:2C:BE:47:15 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0221 Signing time: Fri 17 Apr 2026 02:35:44 +0000 Manifest this update: Fri 17 Apr 2026 02:35:43 +0000 Manifest next update: Fri 24 Apr 2026 02:35:43 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: SH5YFDzNJvjo1NgUOYXcIj5HMHYuTtSfABs/6Bw0/7M=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Apr 17 02:35:43 2026 GMT Not After : Apr 24 02:35:43 2026 GMT Subject: CN=69e19c80-d079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:a0:9b:f7:c9:b6:c2:57:3e:49:0c:a1:8a: 40:c0:b0:cc:db:87:77:21:f4:7e:99:82:b2:c0:99: a6:e0:56:aa:4f:cb:57:24:e9:d7:6e:09:b0:fb:3e: 2e:da:aa:32:c1:cb:df:00:44:26:57:3e:a4:72:2e: e4:d2:2b:24:6e:08:0a:4c:bf:99:14:b8:f8:7c:19: 91:b1:ce:ac:32:31:84:f4:6f:3f:2b:a1:3e:26:17: e4:4e:b2:70:35:27:c8:d3:ea:d8:1d:7e:97:64:e1: a6:83:f9:8f:5e:cf:34:d4:80:3b:e2:a9:84:06:60: 6a:08:5d:be:38:eb:01:68:6e:ed:fb:61:36:61:d6: 3b:5c:49:2f:22:06:66:c2:b8:ae:03:c2:f6:fe:91: b2:a8:97:bf:f7:94:5e:7c:8a:9d:dd:06:1e:ac:d6: 4d:ac:a1:7f:d8:33:20:84:c4:b2:65:35:d6:57:db: 45:3a:f7:d8:44:71:0d:f0:af:11:62:94:8a:57:47: b3:7c:66:d5:7b:34:2e:76:34:b3:7b:99:6b:f6:12: af:70:2a:09:89:8a:c4:1f:5e:6f:6d:81:dd:64:06: 1f:19:a9:28:db:14:16:b6:97:5a:d8:b7:ef:1f:4e: f7:d5:5d:f8:8d:be:e3:87:75:97:d9:6e:89:28:6a: 36:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:F8:BA:05:BC:6B:30:ED:6F:E3:EC:7D:9A:37:A3:2C:BE:47:15 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:2f:20:61:cc:0d:61:fb:56:c0:09:5f:2a:e5:4a:7b:9f:1b: 1f:e0:da:d3:cf:25:9f:22:8a:7c:85:6a:b5:03:d5:ae:0a:63: 80:93:05:bc:bb:ea:92:e4:a9:24:b7:18:6f:7c:a0:b3:4a:b1: 22:1e:9e:65:91:42:af:8d:4e:3e:8e:20:3c:e3:16:53:60:71: 00:89:bd:09:11:7e:43:02:03:fd:36:1e:ae:9d:1a:52:2a:96: 67:91:81:36:b5:49:85:9f:4c:79:55:32:f0:05:ef:ec:87:38: 0b:2a:81:ed:8d:3f:dc:68:3a:3c:c6:98:e5:86:00:83:85:e1: 95:a0:b6:30:9e:0b:dc:8e:84:a2:6f:40:93:55:dc:57:a0:9e: b0:3c:4a:92:e3:db:07:a9:36:ff:d1:ca:82:26:91:67:47:62: 6c:0e:5d:ba:43:9c:30:93:ba:bd:ee:b4:5f:0b:0f:50:bb:2a: 38:da:ca:06:9f:1c:9b:ff:f7:e7:fd:df:61:ed:33:01:ef:c7: ac:48:c0:c7:27:72:5b:59:62:da:d7:c0:64:97:34:9b:15:bf: ad:81:28:e0:45:0e:98:d0:c4:c9:f0:a7:62:7b:95:12:c3:0f: c4:ec:84:18:1a:ce:4e:63:7f:ee:2c:37:40:a5:31:06:6e:e1: 85:b5:91:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNDE3MDIzNTQzWhcNMjYwNDI0MDIzNTQzWjAYMRYwFAYD VQQDEw02OWUxOWM4MC1kMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHegm/fJtsJXPkkMoYpAwLDM24d3IfR+mYKywJmm4FaqT8tXJOnXbgmw+z4u 2qoywcvfAEQmVz6kci7k0iskbggKTL+ZFLj4fBmRsc6sMjGE9G8/K6E+JhfkTrJw NSfI0+rYHX6XZOGmg/mPXs801IA74qmEBmBqCF2+OOsBaG7t+2E2YdY7XEkvIgZm wriuA8L2/pGyqJe/95RefIqd3QYerNZNrKF/2DMghMSyZTXWV9tFOvfYRHEN8K8R YpSKV0ezfGbVezQudjSze5lr9hKvcCoJiYrEH15vbYHdZAYfGako2xQWtpda2Lfv H0731V34jb7jh3WX2W6JKGo2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp3+LoF vGsw7W/j7H2aN6MsvkcVMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtS8gYcwNYftWwAlfKuVKe58bH+Da088lnyKKfIVqtQPVrgpjgJMFvLvqkuSp JLcYb3ygs0qxIh6eZZFCr41OPo4gPOMWU2BxAIm9CRF+QwID/TYerp0aUiqWZ5GB NrVJhZ9MeVUy8AXv7Ic4CyqB7Y0/3Gg6PMaY5YYAg4XhlaC2MJ4L3I6Eom9Ak1Xc V6CesDxKkuPbB6k2/9HKgiaRZ0dibA5dukOcMJO6ve60XwsPULsqONrKBp8cm//3 5/3fYe0zAe/HrEjAxydyW1li2tfAZJc0mxW/rYEo4EUOmNDEyfCnYnuVEsMPxOyE GBrOTmN/7iw3QKUxBm7hhbWRLg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:20 2026 by rpki-client