$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: pQe0g9IkBtUlXw0ytG8Wef50tIRRQYdCbVbqXWy188Y= Subject key identifier: 04:5B:07:DA:1B:F6:07:08:3A:79:A9:C5:A0:9C:7E:23:25:5D:F2:21 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0BA5 Signing time: Thu 16 Apr 2026 18:58:37 +0000 Manifest this update: Thu 16 Apr 2026 18:58:37 +0000 Manifest next update: Thu 23 Apr 2026 18:58:37 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: 3zsvPXU91zXhwbRZ4T2OwQy7B3iThQqsxVwsCFY0roI=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: Apr 16 18:58:37 2026 GMT Not After : Apr 23 18:58:37 2026 GMT Subject: CN=69e1315d-ff8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:ee:3e:2f:04:2d:aa:fd:4a:98:c6:17:30: 5d:0b:da:aa:22:be:2e:f6:f4:84:89:74:06:c5:a8: 23:01:8d:c3:00:dc:57:a8:b2:1e:4b:6f:3f:8e:36: c0:57:af:e6:91:53:9e:8c:fd:2d:4b:7e:d3:a8:5d: 69:0e:c3:d9:de:fd:9d:4e:46:c2:a9:09:dc:81:39: 59:9d:1e:61:2c:75:a5:45:f0:66:97:38:a2:df:26: 7f:73:13:93:b3:74:fb:ee:41:c6:e5:0e:93:52:50: 1a:e1:94:8c:9b:38:41:29:17:8b:af:40:9a:41:db: ba:ec:bb:4e:8f:10:5c:b9:9b:3c:dd:bc:c2:de:83: 76:72:9e:b7:ce:aa:95:66:fb:1a:e2:37:db:9e:ff: f7:1f:db:03:cb:5d:a4:ef:3c:1e:9a:e9:fc:38:fd: 73:15:14:a4:ad:eb:bc:fd:32:63:32:12:c0:34:69: 81:28:57:23:7a:f9:45:2e:8e:e1:17:21:ea:78:5c: 6b:c6:31:1f:00:b3:15:d3:c5:61:45:7e:1f:bd:99: b6:59:52:58:10:ae:a2:bf:23:21:c8:64:18:3c:c7: d6:58:82:08:f2:53:49:d4:6f:39:8a:05:76:6e:19: 15:7a:5d:34:60:80:29:11:b2:c6:8d:42:6e:8a:ad: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:07:DA:1B:F6:07:08:3A:79:A9:C5:A0:9C:7E:23:25:5D:F2:21 X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:a4:8f:90:f2:da:c0:c7:3b:c9:50:8b:68:c7:c4:c6:c0:eb: 71:10:a8:e8:eb:f4:5a:c2:03:ac:4a:3f:3e:fe:0d:82:d6:cb: f1:9f:74:ca:61:68:5b:8d:92:15:e0:e4:cc:e4:bd:50:9f:c0: f8:a4:6f:9e:0c:12:08:7a:f3:66:2f:a4:34:a2:7c:38:10:9d: 4a:11:77:cf:12:9b:80:bc:33:ab:d0:eb:d1:1f:f1:7f:34:8f: a6:8a:d0:31:01:45:1f:bc:1c:87:78:e1:b8:58:77:e2:a7:10: dc:9a:57:a0:f1:d2:ea:76:38:2a:10:56:bc:8a:a2:83:dc:7a: 4d:64:49:94:6c:20:ca:fd:5d:92:7c:b1:41:5d:ad:3f:fa:c5: 6d:af:ac:f0:38:c8:53:bd:4e:4c:cf:db:54:19:0d:89:9f:bc: 6e:68:33:53:59:60:1b:74:1c:d1:18:f2:12:15:70:bb:69:d8: fb:5f:99:b4:63:d6:3f:96:60:2c:b9:0e:0f:09:55:e0:fc:e1: bd:18:f9:3f:ad:ea:6d:03:3f:e3:4b:3b:d6:83:bb:e3:ff:91: 90:3a:c7:d9:21:27:aa:ac:cb:01:1b:21:8f:eb:e9:3b:9b:98: ed:24:5b:39:2f:16:70:1d:18:41:29:09:8b:c0:cc:9e:c6:d3: e6:70:db:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjYwNDE2MTg1ODM3WhcNMjYwNDIzMTg1ODM3WjAYMRYwFAYD VQQDEw02OWUxMzE1ZC1mZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kjuPi8ELar9SpjGFzBdC9qqIr4u9vSEiXQGxagjAY3DANxXqLIeS28/jjbA V6/mkVOejP0tS37TqF1pDsPZ3v2dTkbCqQncgTlZnR5hLHWlRfBmlzii3yZ/cxOT s3T77kHG5Q6TUlAa4ZSMmzhBKReLr0CaQdu67LtOjxBcuZs83bzC3oN2cp63zqqV Zvsa4jfbnv/3H9sDy12k7zwemun8OP1zFRSkreu8/TJjMhLANGmBKFcjevlFLo7h FyHqeFxrxjEfALMV08VhRX4fvZm2WVJYEK6ivyMhyGQYPMfWWIII8lNJ1G85igV2 bhkVel00YIApEbLGjUJuiq1YVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARbB9ob 9gcIOnmpxaCcfiMlXfIhMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr6SPkPLawMc7yVCLaMfExsDrcRCo6Ov0WsIDrEo/Pv4NgtbL8Z90ymFoW42S FeDkzOS9UJ/A+KRvngwSCHrzZi+kNKJ8OBCdShF3zxKbgLwzq9Dr0R/xfzSPporQ MQFFH7wch3jhuFh34qcQ3JpXoPHS6nY4KhBWvIqig9x6TWRJlGwgyv1dknyxQV2t P/rFba+s8DjIU71OTM/bVBkNiZ+8bmgzU1lgG3Qc0RjyEhVwu2nY+1+ZtGPWP5Zg LLkODwlV4PzhvRj5P63qbQM/40s71oO74/+RkDrH2SEnqqzLARshj+vpO5uY7SRb OS8WcB0YQSkJi8DMnsbT5nDbgA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:53 2026 by rpki-client