$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: vPyAux3xOOO4bz09/HXA55uNKhP8RlheoiaM6ngHMWk= Subject key identifier: 7C:89:36:BE:87:D9:8B:E3:FE:AF:65:44:29:2E:58:D4:73:EA:6A:E3 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 02E5 Signing time: Fri 17 Apr 2026 01:13:02 +0000 Manifest this update: Fri 17 Apr 2026 01:13:01 +0000 Manifest next update: Fri 24 Apr 2026 01:13:01 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: G7SCljYoG9sOGFkaXTOCFxCT3yvSbFLH724rsy/o8ZE=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Apr 17 01:13:01 2026 GMT Not After : Apr 24 01:13:01 2026 GMT Subject: CN=69e1891e-091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:47:b4:fc:55:9a:26:2d:f7:56:53:37:a3: 2d:bb:68:bb:1f:bd:1b:ce:da:ff:52:a9:3b:34:7c: 8c:a1:0d:66:9a:5f:ec:c0:31:5a:15:87:8c:7f:f4: 30:c2:ab:bc:fc:9a:11:71:62:5b:4e:03:9a:06:f9: 71:eb:01:b0:c5:3e:c5:18:7a:5d:65:ae:bc:a4:88: 80:fb:f9:fb:f0:f5:08:f6:1b:5f:84:a0:59:bc:5c: 48:5c:35:15:5b:c1:71:9f:31:8d:60:59:4b:da:b0: ec:25:30:b6:40:7c:5e:b3:b4:43:9f:88:ac:66:8c: fb:63:1e:a4:5b:2d:52:2a:d3:ff:e1:3a:c5:3d:eb: b3:bb:b0:d0:b3:85:62:f2:19:f8:d6:67:57:5b:87: 89:0b:aa:dc:a2:94:d0:09:c6:c0:26:8d:e3:f4:93: 70:24:05:08:3e:c4:c3:00:83:dd:12:53:20:ef:9a: b4:97:9f:82:09:be:ea:43:09:ca:a4:20:b7:41:64: c3:29:f5:72:bf:a3:82:39:ec:f6:e9:06:38:32:5d: 42:2b:7c:d1:88:13:ff:ba:f0:f5:48:8c:61:8b:37: 9a:88:2e:13:05:12:7c:c3:ab:37:bc:17:c4:4b:a0: c1:c4:55:36:5a:8e:b8:5c:3f:65:e7:40:0f:e2:45: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:36:BE:87:D9:8B:E3:FE:AF:65:44:29:2E:58:D4:73:EA:6A:E3 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:32:0b:63:86:90:cc:95:57:27:50:c7:ea:bb:99:47:da:1e: bf:86:5a:60:6f:ca:1f:ac:75:c3:50:a0:bc:ac:4d:70:b3:6e: 32:da:cf:18:b4:cd:f0:40:ee:99:ea:d0:15:27:24:76:6b:a1: b4:be:4f:35:83:f8:03:af:2d:66:98:67:31:50:5a:54:dd:64: 98:d4:2c:48:8c:4d:af:12:b3:cf:72:9a:5b:c3:34:3e:a0:2f: 1f:fc:8b:92:ae:b7:5f:14:1b:67:cf:fa:5e:bc:36:25:10:ac: 2c:3b:e6:42:28:0d:3d:67:56:55:64:cf:04:d1:64:8d:70:0f: e6:eb:0c:b6:0e:4e:be:74:8b:41:24:96:4b:a8:03:4f:ee:26: 55:37:46:7b:13:b0:6b:b9:36:41:b2:c3:05:5a:c2:e4:d2:ad: 0a:cf:fd:db:a9:24:e3:e8:c5:f3:70:f0:ca:ba:8b:1a:32:42: 1e:c1:1e:34:d7:05:f7:f4:3d:f8:88:f6:7b:45:75:cc:3e:8d: b1:a2:81:5e:a4:69:11:41:95:bb:26:08:46:50:5b:5d:e3:f6: 55:f6:66:9a:a3:1e:95:58:f7:a8:8e:bc:a2:43:83:ef:9e:c4: f6:9d:8c:72:ef:db:d7:01:81:1e:c3:bc:16:e9:a1:c3:65:e9: 66:61:bb:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjYwNDE3MDExMzAxWhcNMjYwNDI0MDExMzAxWjAYMRYwFAYD VQQDEw02OWUxODkxZS0wOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdBHtPxVmiYt91ZTN6Mtu2i7H70bztr/Uqk7NHyMoQ1mml/swDFaFYeMf/Qw wqu8/JoRcWJbTgOaBvlx6wGwxT7FGHpdZa68pIiA+/n78PUI9htfhKBZvFxIXDUV W8FxnzGNYFlL2rDsJTC2QHxes7RDn4isZoz7Yx6kWy1SKtP/4TrFPeuzu7DQs4Vi 8hn41mdXW4eJC6rcopTQCcbAJo3j9JNwJAUIPsTDAIPdElMg75q0l5+CCb7qQwnK pCC3QWTDKfVyv6OCOez26QY4Ml1CK3zRiBP/uvD1SIxhizeaiC4TBRJ8w6s3vBfE S6DBxFU2Wo64XD9l50AP4kW6+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyJNr6H 2Yvj/q9lRCkuWNRz6mrjMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUzILY4aQzJVXJ1DH6ruZR9oev4ZaYG/KH6x1w1CgvKxNcLNuMtrPGLTN8EDu merQFSckdmuhtL5PNYP4A68tZphnMVBaVN1kmNQsSIxNrxKzz3KaW8M0PqAvH/yL kq63XxQbZ8/6Xrw2JRCsLDvmQigNPWdWVWTPBNFkjXAP5usMtg5OvnSLQSSWS6gD T+4mVTdGexOwa7k2QbLDBVrC5NKtCs/926kk4+jF83DwyrqLGjJCHsEeNNcF9/Q9 +Ij2e0V1zD6NsaKBXqRpEUGVuyYIRlBbXeP2VfZmmqMelVj3qI68okOD757E9p2M cu/b1wGBHsO8Fumhw2XpZmG7Sw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:00:09 2026 by rpki-client