$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: aPDXLVP6LTIg8IzyC+ApIPokanBiMQflfFEHXUAX250= Subject key identifier: 4E:21:13:6D:EA:3C:EA:F7:5B:DA:23:C7:C2:94:6C:C6:9A:4E:46:27 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B5D Signing time: Thu 16 Apr 2026 16:13:47 +0000 Manifest this update: Thu 16 Apr 2026 16:13:47 +0000 Manifest next update: Thu 23 Apr 2026 16:13:47 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: n1WbpmnbkSA5435ROZ/PTlryIQ73R69NZi/+EBmn6HE=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: YEy12V/IFPyj6uO6J/gfg/xV0sPbQoJprUiyrTvCNik=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: J4O6hOYsYTtAWkKIt55lDw3nOXfZwdP5BQXiUqiKBWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7060 (0x1b94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Apr 16 16:13:47 2026 GMT Not After : Apr 23 16:13:47 2026 GMT Subject: CN=69e10abb-6fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:c5:32:3f:84:d9:9a:c0:c5:29:17:73:44: 24:25:9e:cc:e2:9e:57:12:8c:24:3f:7f:71:cf:bc: 62:24:54:d5:fb:7f:df:69:5e:09:2c:05:6c:5e:91: c6:2b:3a:3b:b5:27:43:59:6f:41:31:c0:6c:39:cd: 07:82:2e:d2:f1:7e:30:b7:96:e9:38:42:a3:a4:ef: 83:01:c4:a3:c5:d8:6a:23:b8:8b:4f:c8:0b:c9:b1: 88:e2:76:88:eb:b8:9c:66:1b:73:c2:88:8a:46:ce: aa:09:3c:c3:93:db:db:41:d6:55:1c:d8:fa:03:99: 65:08:72:db:be:8f:c2:7b:f2:77:1a:24:a5:df:55: 27:5e:d4:c6:7c:68:04:75:6c:9d:4d:dd:c9:f9:bb: d5:1a:15:43:1a:41:28:39:3c:5e:cf:36:42:7e:03: 15:5f:89:99:75:4b:e0:53:79:e2:92:82:40:42:d3: 50:7c:65:c0:d3:bd:3f:83:d5:06:ce:2e:b8:63:02: 08:77:64:72:00:47:8b:2c:c6:e2:f8:9d:5c:5b:fc: c5:d0:5e:67:f3:78:a3:db:35:a5:2e:bb:ec:86:8d: 01:96:e9:72:e5:94:9c:b6:20:43:a7:b9:d3:cd:e8: 20:a2:b0:4b:b7:cd:73:b3:ae:d7:a2:b1:f9:b0:04: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:21:13:6D:EA:3C:EA:F7:5B:DA:23:C7:C2:94:6C:C6:9A:4E:46:27 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3b:92:f8:b5:e5:80:f1:7e:eb:e0:07:86:4c:03:84:d3:03: 9f:4e:09:89:5f:23:9d:b0:a6:e8:c0:fd:ca:da:f1:24:3b:17: 47:c1:eb:2d:72:3c:b8:df:63:6d:aa:6e:22:63:bc:0b:1a:8f: 64:45:50:a0:ad:44:57:5c:20:62:ec:c7:bd:e3:88:96:f7:78: 91:4f:2e:e8:a4:23:ec:71:30:0f:d7:4d:3a:d7:c1:b3:1e:04: ad:a9:12:0f:8d:04:03:cc:6d:d2:da:c5:70:9b:13:23:9e:1b: 91:f9:8e:da:eb:bf:fe:da:79:9b:77:04:26:ea:f0:65:fd:8c: ab:47:3d:11:47:2f:cc:78:be:d8:8c:8f:d0:53:60:b1:6a:2c: 44:1d:9e:bc:6d:ea:82:8d:ae:82:6d:25:79:6d:a2:a0:19:38: 66:b8:74:fe:60:4b:23:b1:e8:c2:05:01:5b:27:bc:e9:5e:d0: 87:20:7a:bf:a8:d0:88:7e:01:0e:7b:2b:b2:62:ff:0d:c8:85: 21:4e:0f:fe:33:42:a4:d1:1c:63:e9:5c:75:81:3f:18:74:f7: 70:d0:89:93:ab:bc:68:10:ea:e8:ce:92:4f:c3:ad:d0:f1:93: c1:6e:dd:e4:bd:c6:85:28:94:7b:57:c2:e9:ef:02:f3:8b:76: eb:df:e6:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjYwNDE2MTYxMzQ3WhcNMjYwNDIzMTYxMzQ3WjAYMRYwFAYD VQQDEw02OWUxMGFiYi02ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiTFMj+E2ZrAxSkXc0QkJZ7M4p5XEowkP39xz7xiJFTV+3/faV4JLAVsXpHG Kzo7tSdDWW9BMcBsOc0Hgi7S8X4wt5bpOEKjpO+DAcSjxdhqI7iLT8gLybGI4naI 67icZhtzwoiKRs6qCTzDk9vbQdZVHNj6A5llCHLbvo/Ce/J3GiSl31UnXtTGfGgE dWydTd3J+bvVGhVDGkEoOTxezzZCfgMVX4mZdUvgU3nikoJAQtNQfGXA070/g9UG zi64YwIId2RyAEeLLMbi+J1cW/zF0F5n83ij2zWlLrvsho0Bluly5ZSctiBDp7nT zeggorBLt81zs67XorH5sATy1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4hE23q POr3W9ojx8KUbMaaTkYnMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYzuS+LXlgPF+6+AHhkwDhNMDn04JiV8jnbCm6MD9ytrxJDsXR8HrLXI8uN9j bapuImO8CxqPZEVQoK1EV1wgYuzHveOIlvd4kU8u6KQj7HEwD9dNOtfBsx4ErakS D40EA8xt0trFcJsTI54bkfmO2uu//tp5m3cEJurwZf2Mq0c9EUcvzHi+2IyP0FNg sWosRB2evG3qgo2ugm0leW2ioBk4Zrh0/mBLI7HowgUBWye86V7QhyB6v6jQiH4B DnsrsmL/DciFIU4P/jNCpNEcY+lcdYE/GHT3cNCJk6u8aBDq6M6ST8Ot0PGTwW7d 5L3GhSiUe1fC6e8C84t269/mVg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:16 2026 by rpki-client