$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: B0pVmUf/wIqVpi3bYix44+UqPDaPW8J3eJgE2uD/J2U= Subject key identifier: 24:C8:84:E4:78:5C:EF:D9:71:7C:D8:FD:09:FF:09:59:0E:F6:0F:66 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 01BF Signing time: Fri 17 Apr 2026 03:44:30 +0000 Manifest this update: Fri 17 Apr 2026 03:44:30 +0000 Manifest next update: Fri 24 Apr 2026 03:44:30 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: pYbQ8Q6o/EmdtaWE1zFoPw8bRzPkST812pZoDlq13ZE=) 2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Apr 17 03:44:30 2026 GMT Not After : Apr 24 03:44:30 2026 GMT Subject: CN=69e1ac9e-a539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:d7:e0:e2:c8:d7:73:af:15:56:25:e2:00: 95:4a:82:90:2a:db:d5:39:4b:9b:84:8f:1d:29:4c: 26:55:1b:18:09:f8:1d:ca:7f:c9:75:6c:75:c2:b1: 3c:2a:fc:eb:13:bd:39:ec:cc:1a:4b:c5:b8:88:d7: 23:b7:c1:93:f7:c5:44:0b:cd:65:ce:87:a2:7a:45: c1:ae:e6:f7:a4:bb:18:2a:65:94:81:c0:db:91:dd: fd:e8:08:94:ae:88:fb:62:34:25:7c:d3:6a:a2:9a: cb:0f:0e:94:2a:63:3d:7f:12:3c:94:d6:f8:41:5e: 73:c6:43:c7:31:20:09:0c:88:6e:7f:9e:36:96:ac: 0a:a1:51:02:b6:38:7c:e2:19:d7:2d:cd:b2:52:82: 82:c1:0a:b8:88:f3:98:88:69:c7:85:0d:82:2b:e8: c8:32:d1:79:83:49:a5:eb:4e:4a:2e:f3:97:1e:09: 88:68:de:ff:9e:f6:bb:18:b6:a0:86:e6:9b:ff:3b: 23:a8:5a:7f:01:e8:42:e4:a2:34:a2:48:06:85:03: a0:ed:3d:4e:67:29:7b:69:af:9e:9d:a3:9a:96:71: 57:6c:2b:0a:4f:9a:35:ff:aa:c2:07:8a:5d:d5:d3: 5c:00:86:0d:24:aa:58:db:ed:61:39:c7:59:e6:87: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:84:E4:78:5C:EF:D9:71:7C:D8:FD:09:FF:09:59:0E:F6:0F:66 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:d9:a3:f1:bb:4e:ae:f9:e2:80:19:fa:22:5c:97:fc:6f: 7c:2e:64:93:6e:69:ca:ba:da:d9:a9:cd:f5:74:1f:53:2a:19: 96:36:2f:22:78:7b:3e:cb:16:63:63:d4:95:73:f0:a6:fe:7f: bf:28:d1:f0:a7:de:57:bf:ba:7c:7c:4d:87:23:01:a8:0c:48: c0:c4:ae:4c:52:ac:ae:e9:35:32:c3:3f:ee:1e:52:65:57:fa: 1d:8c:70:79:f6:80:53:37:a8:1b:2b:15:f3:dc:89:f4:8b:3d: c0:03:d2:cc:27:2d:05:12:5c:c3:33:d3:29:24:46:40:78:0b: 0e:23:56:2e:bf:29:d3:31:50:68:26:f6:77:f5:61:0c:5e:31: 45:ce:55:9b:fd:47:52:1f:7a:a8:c8:f6:01:a5:66:c4:57:32: 17:43:97:85:7c:12:38:8e:4b:f6:77:5f:ca:21:a3:86:b5:2e: a6:35:d3:08:72:46:c7:8a:9e:16:d2:20:37:56:0d:e5:83:9a: 47:93:13:1e:7e:c2:eb:a7:f8:48:13:87:33:06:9e:27:87:7d: 14:af:1c:c4:91:8c:9d:31:6e:e4:48:9c:39:71:99:ce:59:0c: fc:5a:33:46:73:60:df:99:13:f4:0b:38:e4:77:49:f2:d9:83: d0:f6:f2:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjYwNDE3MDM0NDMwWhcNMjYwNDI0MDM0NDMwWjAYMRYwFAYD VQQDEw02OWUxYWM5ZS1hNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAja/X4OLI13OvFVYl4gCVSoKQKtvVOUubhI8dKUwmVRsYCfgdyn/JdWx1wrE8 KvzrE7057MwaS8W4iNcjt8GT98VEC81lzoeiekXBrub3pLsYKmWUgcDbkd396AiU roj7YjQlfNNqoprLDw6UKmM9fxI8lNb4QV5zxkPHMSAJDIhuf542lqwKoVECtjh8 4hnXLc2yUoKCwQq4iPOYiGnHhQ2CK+jIMtF5g0ml605KLvOXHgmIaN7/nva7GLag huab/zsjqFp/AehC5KI0okgGhQOg7T1OZyl7aa+enaOalnFXbCsKT5o1/6rCB4pd 1dNcAIYNJKpY2+1hOcdZ5oc8IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTIhOR4 XO/ZcXzY/Qn/CVkO9g9mMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFeLZo/G7Tq754oAZ+iJcl/xvfC5kk25pyrra2anN9XQfUyoZljYvInh7PssW Y2PUlXPwpv5/vyjR8KfeV7+6fHxNhyMBqAxIwMSuTFKsruk1MsM/7h5SZVf6HYxw efaAUzeoGysV89yJ9Is9wAPSzCctBRJcwzPTKSRGQHgLDiNWLr8p0zFQaCb2d/Vh DF4xRc5Vm/1HUh96qMj2AaVmxFcyF0OXhXwSOI5L9ndfyiGjhrUupjXTCHJGx4qe FtIgN1YN5YOaR5MTHn7C66f4SBOHMwaeJ4d9FK8cxJGMnTFu5EicOXGZzlkM/Foz RnNg35kT9As45HdJ8tmD0Pby5g== -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:31 2026 by rpki-client