$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: lAeLkuBEe4n/q2O2Nc+/zITV/LQiEyVptAscswzi47M= Subject key identifier: 2F:46:59:7F:F7:DC:88:C7:78:C7:CA:5F:78:0C:40:D5:DB:3E:77:B2 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0A60 Signing time: Thu 16 Apr 2026 19:32:23 +0000 Manifest this update: Thu 16 Apr 2026 19:32:23 +0000 Manifest next update: Thu 23 Apr 2026 19:32:23 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: 2fJ23QxjX5PIE8pkGnHGdTdJZVGTlcJ/Eq6stkck/s8=) 2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 2G7gFlwR8PIkICBXgCXuNRekc12kQ44lhkEmAObcZzQ=) 3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: 8/8PcrmV+dwN59za9XSdrEpWpmGqQRkF6xxNtxvBqyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2670 (0xa6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Apr 16 19:32:23 2026 GMT Not After : Apr 23 19:32:23 2026 GMT Subject: CN=69e13947-d086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:0b:ee:c1:e8:3c:cc:be:e7:51:c0:28:f4: 38:09:f7:75:7b:df:bb:b3:ef:02:2c:67:ca:b8:da: c5:89:49:f9:3f:90:a1:3a:81:d7:c6:3b:44:ae:d4: 61:a3:b9:d3:12:16:a1:f6:9c:42:ae:70:70:cc:99: ca:5a:99:59:4d:4e:0c:cb:35:6f:58:00:11:52:3c: ee:d5:22:b9:70:86:3c:bd:8b:05:6e:6c:45:67:19: ff:a9:5f:cb:da:6d:4c:04:36:53:92:ba:20:5d:b5: af:e7:1a:7f:d0:35:a4:50:04:b1:13:19:27:6c:2b: 4d:fd:2c:07:0d:25:e1:1d:70:5e:fc:f2:af:74:63: 78:4a:3d:a5:57:f0:da:c6:57:2e:7d:9f:6b:21:05: 53:58:6a:71:b4:39:05:6a:fc:73:f3:09:88:d2:4f: 94:82:d5:7f:c6:b6:94:e7:46:a0:3b:0a:99:71:5c: 68:72:57:c9:38:aa:96:c0:ea:aa:54:fc:e3:7e:ce: 2e:38:4f:04:17:0d:4d:60:07:70:80:32:25:21:57: 7c:b4:7f:30:9f:b0:4b:2d:59:17:c3:4e:d2:1f:6b: cd:e7:e0:ff:ae:dc:65:e6:12:a2:01:7b:70:a6:e6: fa:4e:81:f5:81:d2:f3:e7:c8:9f:3a:bb:89:b1:af: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:59:7F:F7:DC:88:C7:78:C7:CA:5F:78:0C:40:D5:DB:3E:77:B2 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:2a:6c:89:12:19:1b:57:e9:80:2a:22:e3:b9:13:8c:c6:ee: 12:92:34:47:ff:28:90:75:0a:c1:06:e4:bb:6d:7f:43:c4:eb: b0:95:15:25:a7:58:92:e3:49:85:f1:d0:8a:f1:50:1f:6e:55: 4a:4f:6f:83:d1:3a:8e:af:5e:39:92:9d:81:7f:0c:07:d9:89: a7:51:33:76:7a:41:28:b8:bd:98:3e:7e:dd:44:ae:6a:ad:3e: 80:3f:3f:b9:8c:d2:d3:e4:9a:23:7f:16:a7:ad:6f:21:8c:7c: 57:aa:ff:db:b5:d6:24:0a:9e:d0:5e:85:bd:f5:d2:42:3e:67: 5f:12:10:91:07:cd:25:a9:32:f4:33:26:69:42:84:a2:b6:70: 39:72:f0:74:78:81:72:3c:17:12:a1:62:4c:68:ad:8e:23:42: 1a:6a:4d:8a:15:36:d9:aa:31:f7:e0:90:01:c9:fd:91:f8:db: c0:21:67:c2:58:56:fd:c9:c1:1f:a3:d3:78:f2:bc:9e:a0:5d: 5e:87:b3:8f:7e:14:34:21:94:89:bf:62:bc:52:ae:9b:3a:31: 88:08:c1:e6:75:af:c0:46:2e:36:6b:36:a6:1d:aa:68:0d:95: 36:cb:bd:3c:24:89:99:81:a5:9b:b5:4c:0c:ff:19:00:09:4f: ac:6c:6a:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjYwNDE2MTkzMjIzWhcNMjYwNDIzMTkzMjIzWjAYMRYwFAYD VQQDEw02OWUxMzk0Ny1kMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnngL7sHoPMy+51HAKPQ4Cfd1e9+7s+8CLGfKuNrFiUn5P5ChOoHXxjtErtRh o7nTEhah9pxCrnBwzJnKWplZTU4MyzVvWAARUjzu1SK5cIY8vYsFbmxFZxn/qV/L 2m1MBDZTkrogXbWv5xp/0DWkUASxExknbCtN/SwHDSXhHXBe/PKvdGN4Sj2lV/Da xlcufZ9rIQVTWGpxtDkFavxz8wmI0k+UgtV/xraU50agOwqZcVxoclfJOKqWwOqq VPzjfs4uOE8EFw1NYAdwgDIlIVd8tH8wn7BLLVkXw07SH2vN5+D/rtxl5hKiAXtw pub6ToH1gdLz58ifOruJsa/h1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9GWX/3 3IjHeMfKX3gMQNXbPneyMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgCpsiRIZG1fpgCoi47kTjMbuEpI0R/8okHUKwQbku21/Q8TrsJUVJadYkuNJ hfHQivFQH25VSk9vg9E6jq9eOZKdgX8MB9mJp1EzdnpBKLi9mD5+3USuaq0+gD8/ uYzS0+SaI38Wp61vIYx8V6r/27XWJAqe0F6FvfXSQj5nXxIQkQfNJaky9DMmaUKE orZwOXLwdHiBcjwXEqFiTGitjiNCGmpNihU22aox9+CQAcn9kfjbwCFnwlhW/cnB H6PTePK8nqBdXoezj34UNCGUib9ivFKumzoxiAjB5nWvwEYuNms2ph2qaA2VNsu9 PCSJmYGlm7VMDP8ZAAlPrGxqmA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:25 2026 by rpki-client