$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: KIGF6u0obcZvvIEhXqrWPjSmAUG+PMCwEMoCurjTG9g= Subject key identifier: B2:7E:BE:AF:47:A2:65:2B:40:EE:AF:BF:1D:DB:42:29:6A:7F:10:C2 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2E02 Signing time: Thu 16 Apr 2026 15:28:31 +0000 Manifest this update: Thu 16 Apr 2026 15:28:31 +0000 Manifest next update: Thu 23 Apr 2026 15:28:31 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: QYEKQ9XcUrrPLX4uFRKJme/tQMpcWY681InJSUrstLU=) 2: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) 3: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11816 (0x2e28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Apr 16 15:28:31 2026 GMT Not After : Apr 23 15:28:31 2026 GMT Subject: CN=69e1001f-2edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:d4:fd:ad:4e:5c:c4:b5:91:12:03:3a:4d: 10:75:1c:02:6c:fb:91:8e:a2:d7:5e:b2:a0:66:5d: 7b:c7:f2:5a:f2:cd:a3:48:21:cf:c6:0c:c3:2a:3c: ae:76:0b:1d:8a:42:a4:de:e4:21:b0:03:9b:dc:8f: 86:ad:26:b4:ee:d4:d4:c2:01:f2:35:ed:97:b1:29: 27:1c:eb:78:b0:c5:f8:dd:72:c0:7b:1a:96:c8:3c: 39:a0:ba:57:c4:7f:41:6a:63:bd:0b:8d:0b:54:73: 50:cb:e2:a0:0d:ee:06:a7:4d:02:df:df:f2:5a:8f: c6:3d:29:1b:56:7e:83:3e:0a:61:46:c3:2f:e3:a2: 50:7b:5f:06:97:31:17:44:48:1d:84:69:31:30:ea: b7:ae:cf:48:79:26:08:3e:8c:21:f8:66:db:34:bd: 42:26:85:67:a4:de:6d:f1:d2:ee:97:de:6f:52:27: 4b:1d:b1:a7:cd:47:9f:d6:02:16:57:c2:21:62:92: b7:84:df:45:12:16:c4:0e:0a:da:65:82:8e:5c:be: ac:3d:1c:7b:8b:ac:db:03:51:60:4c:ba:93:b5:d7: 46:49:74:64:32:d7:10:f2:3c:5b:7e:27:e8:cb:6e: dd:64:41:68:45:9f:c6:72:4f:88:b0:15:7e:47:45: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:BE:AF:47:A2:65:2B:40:EE:AF:BF:1D:DB:42:29:6A:7F:10:C2 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:ed:e5:e0:c5:31:b7:22:67:1d:d6:63:67:5b:7e:36:a2: c7:15:47:e4:a3:5e:db:eb:71:62:5c:c7:81:b6:80:a3:da:1e: f6:ee:04:6e:cf:9a:4c:cb:65:f7:b3:8a:e0:83:d1:68:95:4c: 6a:b1:c2:e2:c8:3a:d5:14:4a:4a:c8:3b:f6:9f:62:67:ed:b1: 5a:72:ed:73:d4:2e:f4:03:ec:52:9e:4c:45:d5:8f:70:42:82: 20:43:37:47:24:71:59:26:01:21:db:8d:6f:ee:f8:77:c0:b4: 0c:65:d7:43:89:e2:41:fd:e0:d5:b3:e4:56:4a:34:f6:36:70: d7:80:83:8d:56:24:29:6d:31:76:15:b7:eb:54:c3:6d:fd:94: 57:40:90:36:dc:17:61:d5:5c:59:6e:eb:d4:5f:74:42:51:68: 63:9b:1a:7a:0f:7e:66:3e:a9:8d:90:d2:1f:e8:2f:6b:be:cb: d6:67:0e:5f:c1:93:e7:0c:c5:76:f9:4d:0f:64:4a:43:e7:0a: ed:c9:74:a1:b2:38:ea:da:b7:f0:1e:66:3f:88:43:ff:e9:02: 0a:da:4d:05:1a:90:e2:92:c6:48:27:61:8b:3d:32:51:38:3c: fb:f7:17:40:58:bf:63:4b:0c:bb:30:a9:23:b0:5d:f3:d1:c9: b2:4c:66:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwNDE2MTUyODMxWhcNMjYwNDIzMTUyODMxWjAYMRYwFAYD VQQDEw02OWUxMDAxZi0yZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh7U/a1OXMS1kRIDOk0QdRwCbPuRjqLXXrKgZl17x/Ja8s2jSCHPxgzDKjyu dgsdikKk3uQhsAOb3I+GrSa07tTUwgHyNe2XsSknHOt4sMX43XLAexqWyDw5oLpX xH9BamO9C40LVHNQy+KgDe4Gp00C39/yWo/GPSkbVn6DPgphRsMv46JQe18GlzEX REgdhGkxMOq3rs9IeSYIPowh+GbbNL1CJoVnpN5t8dLul95vUidLHbGnzUef1gIW V8IhYpK3hN9FEhbEDgraZYKOXL6sPRx7i6zbA1FgTLqTtddGSXRkMtcQ8jxbfifo y27dZEFoRZ/Gck+IsBV+R0UR+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJ+vq9H omUrQO6vvx3bQilqfxDCMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqyzt5eDFMbciZx3WY2dbfjaixxVH5KNe2+txYlzHgbaAo9oe9u4Ebs+aTMtl 97OK4IPRaJVMarHC4sg61RRKSsg79p9iZ+2xWnLtc9Qu9APsUp5MRdWPcEKCIEM3 RyRxWSYBIduNb+74d8C0DGXXQ4niQf3g1bPkVko09jZw14CDjVYkKW0xdhW361TD bf2UV0CQNtwXYdVcWW7r1F90QlFoY5saeg9+Zj6pjZDSH+gva77L1mcOX8GT5wzF dvlND2RKQ+cK7cl0obI46tq38B5mP4hD/+kCCtpNBRqQ4pLGSCdhiz0yUTg8+/cX QFi/Y0sMuzCpI7Bd89HJskxmRw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:26:48 2026 by rpki-client