$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: OEkd3C3IA7o2h2H8aA9Aim1ViAkYJ9tKUw8JQiR/WEg= Subject key identifier: 89:9A:6E:D5:A9:43:6E:56:B6:84:53:58:34:A7:C2:A1:0F:76:3F:BA Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 5C Signing time: Fri 17 Apr 2026 07:48:06 +0000 Manifest this update: Fri 17 Apr 2026 07:48:05 +0000 Manifest next update: Fri 24 Apr 2026 07:48:05 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: gFLD/D+Hpf2eEcSUMu38TZtXfMnskVPYt1+wl0Uj5eM=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Apr 17 07:48:05 2026 GMT Not After : Apr 24 07:48:05 2026 GMT Subject: CN=69e1e5b6-b872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:ce:8a:e3:41:c8:ff:37:0a:0c:77:32:ba: 42:77:99:34:af:b7:2e:2b:2b:bf:ac:4d:00:ca:52: 54:33:3f:59:e8:aa:86:bb:29:a6:9b:98:f2:5d:7b: 1f:24:8b:b2:90:e4:ed:d0:fb:2f:c2:dc:7e:a2:04: fe:50:22:cd:70:82:f1:a5:6e:ce:d0:16:fc:c1:02: fb:13:0e:29:bf:70:88:3f:18:d8:d1:3a:15:1f:5f: 0e:c9:a0:e1:f9:7e:b1:56:b2:c7:e6:63:55:31:75: 61:19:52:4b:ff:2a:01:2a:01:6a:e1:8d:39:87:7f: 4d:7d:5b:5f:21:c0:81:7f:cc:11:5f:05:56:e0:3a: 17:1c:43:f4:ad:d7:a8:b1:a9:e4:b3:dd:5d:8a:56: 3a:82:3f:b7:d6:ca:2a:f9:42:c8:85:24:37:87:ec: d9:f6:e3:a9:c8:94:4c:36:99:43:6a:85:62:f4:63: fd:af:92:0f:59:da:af:9b:46:84:f6:0a:53:4d:1b: 90:d3:8a:23:46:2c:0d:8a:f5:ba:47:37:d4:66:f3: cf:e5:e3:b6:04:09:81:a6:e2:6c:aa:87:ff:6a:a7: 47:e2:63:58:a3:77:08:92:df:67:8b:a8:21:08:5a: 9f:bd:c2:e2:f1:b8:6a:4b:75:74:21:29:0a:99:14: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9A:6E:D5:A9:43:6E:56:B6:84:53:58:34:A7:C2:A1:0F:76:3F:BA X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:83:d0:9c:a1:aa:26:c0:d6:86:cc:06:42:dd:e7:e9:4e:c5: f0:56:f2:99:60:3e:89:23:9a:a7:a5:b3:42:77:03:04:bf:36: 5c:c6:3a:c1:b9:ab:22:d5:89:08:bd:fc:55:a2:a6:27:35:49: 05:44:47:43:86:50:c4:b2:a2:8c:82:ee:28:97:94:67:f3:50: 60:48:bd:9d:da:ad:9d:1e:61:ef:a5:99:ac:b2:dc:19:e3:55: 21:d1:44:c2:5b:7b:60:59:ab:91:da:76:b7:91:e5:0f:7c:eb: 83:9f:72:2d:29:b3:a1:24:ef:55:67:1f:fd:3d:6c:bb:f6:5e: 5e:be:e2:6d:b5:63:d9:3c:9e:69:fd:d1:35:3d:f4:f6:6f:5e: 9f:94:0f:df:2d:17:c1:5c:cc:07:4b:25:4c:aa:70:b3:5d:a1: 41:a7:11:84:40:82:17:28:dd:6a:84:c6:1e:19:62:dc:7f:75: 49:69:04:a6:1c:4f:fb:48:e9:7f:e5:2f:6b:26:6f:09:47:ea: 42:56:8e:5c:21:46:22:81:74:1d:48:2d:c8:e4:03:a3:c9:af: 24:72:e7:ae:60:99:8b:82:c0:b7:f3:16:6a:fe:9c:4e:4b:7d: 33:dc:c5:2f:74:27:4b:a0:ff:8c:60:58:6a:b9:78:2c:21:4f: 1c:6b:ef:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNjA0MTcwNzQ4MDVaFw0yNjA0MjQwNzQ4MDVaMBgxFjAUBgNV BAMTDTY5ZTFlNWI2LWI4NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLL86K40HI/zcKDHcyukJ3mTSvty4rK7+sTQDKUlQzP1noqoa7KaabmPJdex8k i7KQ5O3Q+y/C3H6iBP5QIs1wgvGlbs7QFvzBAvsTDim/cIg/GNjROhUfXw7JoOH5 frFWssfmY1UxdWEZUkv/KgEqAWrhjTmHf019W18hwIF/zBFfBVbgOhccQ/St16ix qeSz3V2KVjqCP7fWyir5QsiFJDeH7Nn246nIlEw2mUNqhWL0Y/2vkg9Z2q+bRoT2 ClNNG5DTiiNGLA2K9bpHN9Rm88/l47YECYGm4myqh/9qp0fiY1ijdwiS32eLqCEI Wp+9wuLxuGpLdXQhKQqZFJBpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiZpu1alD bla2hFNYNKfCoQ92P7owHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzRBM0REMUIyQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVN NzJXTFg3MFdYSExxbm9zTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3g9CcoaomwNaGzAZC3efpTsXwVvKZYD6JI5qnpbNCdwMEvzZcxjrBuasi1YkI vfxVoqYnNUkFREdDhlDEsqKMgu4ol5Rn81BgSL2d2q2dHmHvpZmsstwZ41Uh0UTC W3tgWauR2na3keUPfOuDn3ItKbOhJO9VZx/9PWy79l5evuJttWPZPJ5p/dE1PfT2 b16flA/fLRfBXMwHSyVMqnCzXaFBpxGEQIIXKN1qhMYeGWLcf3VJaQSmHE/7SOl/ 5S9rJm8JR+pCVo5cIUYigXQdSC3I5AOjya8kcueuYJmLgsC38xZq/pxOS30z3MUv dCdLoP+MYFhquXgsIU8ca+86 -----END CERTIFICATE-----Generated at Sat Apr 18 10:28:41 2026 by rpki-client