$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: 40mUeQ+dloTQRpwkjAtc7rg0TpLtQKLGB84ERFtwESU= Subject key identifier: 3E:61:A3:7E:9C:A1:30:40:BB:72:39:47:FC:C4:80:D9:DA:92:D1:05 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: 0144 Signing time: Fri 17 Apr 2026 04:58:25 +0000 Manifest this update: Fri 17 Apr 2026 04:58:24 +0000 Manifest next update: Fri 24 Apr 2026 04:58:24 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: xvHX7STd5mFoV+B9+QC+HkZ/CjrK5p70AO6yYzNOFsg=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Apr 17 04:58:24 2026 GMT Not After : Apr 24 04:58:24 2026 GMT Subject: CN=69e1bdf1-b3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:d2:71:da:6e:b4:7b:d3:f6:3d:9a:68:96: ab:6e:fe:d4:2b:42:9a:82:55:69:7a:bf:ed:e6:7b: 66:32:da:c6:41:f5:f5:b4:af:ce:c2:97:d8:b8:54: ab:a1:78:a9:ef:8e:aa:b2:8a:9a:e8:da:08:c9:8c: a9:05:1c:4c:40:f2:64:9e:77:43:3e:48:10:49:f9: f8:f9:28:39:65:f7:dc:62:58:78:77:42:3c:07:cb: 55:d3:e4:da:f1:0c:1e:fd:d6:e3:a7:a0:ff:9f:95: 6a:e9:1c:fc:06:e8:11:d1:dc:39:75:d0:fb:01:53: 06:9b:2a:56:35:3e:5f:4b:29:5e:8f:21:14:91:d1: 22:95:78:f0:5a:cb:db:fa:1e:02:97:58:44:d5:ab: 48:d1:3e:30:a0:72:50:c6:b2:38:2e:e7:30:47:95: 78:72:77:74:51:f5:f1:f3:2d:f7:10:46:d3:d2:a6: 88:b9:b6:01:86:c1:00:77:73:94:e4:b4:b3:35:ff: aa:58:41:0a:d5:98:11:e9:86:24:71:68:5f:50:1e: 9a:58:fa:c1:a4:6b:9b:1b:16:6a:ff:a4:3c:2b:c5: eb:79:84:24:1f:ff:3e:57:4c:a0:f6:21:0f:de:d3: 40:c2:a3:91:ae:bd:13:31:6e:52:18:8e:b3:3d:b0: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:61:A3:7E:9C:A1:30:40:BB:72:39:47:FC:C4:80:D9:DA:92:D1:05 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e0:ca:62:ab:c9:40:36:34:38:ac:92:4b:34:98:f2:f0:bb: e3:af:fc:76:ce:f0:1f:8b:3c:5a:8d:06:07:64:4e:f0:49:1f: ca:0b:b5:92:f7:c6:05:eb:f2:f0:c6:3a:46:34:d8:6c:b9:eb: 36:66:b4:6b:14:a8:c7:fd:16:c3:4c:0e:bd:e4:5e:2c:88:ff: e2:21:86:03:bb:b3:4f:fb:4c:6e:3d:74:0b:2f:5b:ad:46:b9: 65:3e:3c:8c:1f:ff:79:da:12:6d:4b:1b:64:61:27:27:16:6c: 01:0f:c7:38:87:8c:6a:22:d8:10:6a:cd:c0:89:a3:70:ff:4e: 71:25:1a:57:0c:d8:87:21:1d:a4:3c:3f:79:ee:f7:2c:ef:8c: 24:0b:50:6a:dd:36:56:9c:6b:05:c6:f4:6a:16:b6:ab:81:31: a0:a0:df:12:79:ff:28:1d:19:2f:18:4c:6b:89:2f:21:8e:95: a6:65:92:74:a6:69:8e:fc:a1:6c:53:9c:a4:69:5f:d4:b3:7f: 5b:7f:f5:11:af:99:3a:67:8e:ed:bd:b2:09:36:00:9f:1e:1f: 7d:a2:f7:1e:1a:d5:b4:b2:ef:1a:31:17:f5:df:64:e6:5e:a0: 1f:85:06:23:12:21:69:4a:14:1d:4b:40:19:90:ff:93:b3:33: a0:74:a1:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjYwNDE3MDQ1ODI0WhcNMjYwNDI0MDQ1ODI0WjAYMRYwFAYD VQQDEw02OWUxYmRmMS1iM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpDScdputHvT9j2aaJarbv7UK0KaglVper/t5ntmMtrGQfX1tK/OwpfYuFSr oXip746qsoqa6NoIyYypBRxMQPJknndDPkgQSfn4+Sg5ZffcYlh4d0I8B8tV0+Ta 8Qwe/dbjp6D/n5Vq6Rz8BugR0dw5ddD7AVMGmypWNT5fSylejyEUkdEilXjwWsvb +h4Cl1hE1atI0T4woHJQxrI4LucwR5V4cnd0UfXx8y33EEbT0qaIubYBhsEAd3OU 5LSzNf+qWEEK1ZgR6YYkcWhfUB6aWPrBpGubGxZq/6Q8K8XreYQkH/8+V0yg9iEP 3tNAwqORrr0TMW5SGI6zPbAzqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5ho36c oTBAu3I5R/zEgNnaktEFMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsODKYqvJQDY0OKySSzSY8vC746/8ds7wH4s8Wo0GB2RO8Ekfygu1kvfGBevy 8MY6RjTYbLnrNma0axSox/0Ww0wOveReLIj/4iGGA7uzT/tMbj10Cy9brUa5ZT48 jB//edoSbUsbZGEnJxZsAQ/HOIeMaiLYEGrNwImjcP9OcSUaVwzYhyEdpDw/ee73 LO+MJAtQat02VpxrBcb0aha2q4ExoKDfEnn/KB0ZLxhMa4kvIY6VpmWSdKZpjvyh bFOcpGlf1LN/W3/1Ea+ZOmeO7b2yCTYAnx4ffaL3HhrVtLLvGjEX9d9k5l6gH4UG IxIhaUoUHUtAGZD/k7MzoHShkA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:48:24 2026 by rpki-client