$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json) Hash identifier: axzprvGdEUeleSuJgH5DePfZY4mJRS39zJK2x0CLGio= Subject key identifier: BB:23:0B:2D:10:F5:16:04:80:27:9F:92:95:28:49:D7:37:7D:E0:3C Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft Manifest number: 38 Signing time: Fri 17 Apr 2026 08:15:56 +0000 Manifest this update: Fri 17 Apr 2026 08:15:55 +0000 Manifest next update: Fri 24 Apr 2026 08:15:55 +0000 Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: J25nB435fAjYBHEfyR8R0HkO8IyfTVPHQagLbLfMpbM=) 2: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: 8CNnaJx3H61GgnJxhNhOMmVhr6HZscFPEBcc69eMEC4=) 3: EE4BF2EAFB5911F0B335DD54496F56BC.roa (hash: eZzcu3WkSrdQ3SbkATMZ/OTsw4EduF9CCFIQg7N6Nlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Apr 17 08:15:55 2026 GMT Not After : Apr 24 08:15:55 2026 GMT Subject: CN=69e1ec3c-fa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:d2:5b:34:e9:ff:db:c2:df:8a:31:4e:a5: fc:e8:9f:cc:df:37:1c:58:15:5c:4d:20:fb:ed:b0: 90:72:a9:1c:66:d0:1f:ee:d2:e0:bc:7f:e7:9a:14: 3d:97:19:ca:a3:ff:24:e5:93:dc:94:6c:0d:d2:71: 8d:c1:d9:3c:8f:f6:ae:a8:ec:84:c9:74:64:8e:ec: 3e:9d:77:0d:48:02:46:b4:fa:91:d1:9c:85:03:d9: 5e:34:dc:ce:e4:d0:35:b4:38:8d:fa:a0:4e:22:54: 6a:8f:ff:f4:61:73:e6:35:32:db:83:e7:d9:7b:b1: 07:ea:30:bd:b6:4f:60:80:07:2e:37:11:78:00:54: 4f:e8:96:6d:e6:4c:5e:6a:7b:7f:8a:17:bb:61:1b: 51:da:b1:df:ae:6e:fb:b4:d7:8b:a3:47:d9:ec:89: 33:64:a8:a1:38:20:7e:28:1b:65:04:ac:a3:92:4f: da:01:98:57:7d:27:b7:64:da:5c:74:d0:ba:75:91: 91:09:ca:cb:d9:d5:1a:2a:e1:3f:6e:0a:47:75:e3: 01:09:27:50:36:b0:d6:28:9f:7f:be:3a:f0:0f:22: aa:1b:72:6a:dc:de:75:c9:4d:06:ce:d6:0b:de:ac: 9a:0e:24:f1:83:6a:38:2c:e8:d2:39:5c:1e:7a:68: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:0B:2D:10:F5:16:04:80:27:9F:92:95:28:49:D7:37:7D:E0:3C X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2e:9f:79:fa:2b:01:b3:37:41:ad:35:28:e8:0f:c9:c8:70: f9:2a:82:94:09:6b:9a:75:8a:dd:22:77:2a:4e:24:33:6f:30: d9:c4:d6:a8:ba:09:08:fe:6e:04:a8:1c:57:8d:d2:f6:fb:b4: b3:a1:b6:06:09:2f:be:3e:ea:53:a8:1e:76:c9:2f:a0:ee:24: 48:e0:01:68:8b:01:99:cb:f1:a0:16:ac:fa:c8:bd:4f:1a:71: 65:17:eb:12:49:66:e1:e7:ae:5a:19:8a:ed:34:2e:23:aa:b4: ed:c5:58:ca:1d:a8:59:66:08:fa:7f:51:45:e0:3b:b9:bf:90: 9c:49:a2:9a:60:2d:bc:d0:32:e8:54:40:9f:1c:f0:87:15:b6: dd:65:74:38:b1:11:b3:85:10:c9:fe:6c:fc:37:82:5e:6d:95: 49:8f:11:2f:47:0c:0b:ab:ff:dc:a1:ad:66:59:76:e0:a5:12: 24:82:aa:8e:69:52:b9:53:07:37:b0:4e:87:ef:9c:c5:63:23: 93:d0:b2:52:f0:e0:7e:cb:c2:8a:24:4b:ad:ba:2f:a9:be:78: 03:4c:03:c6:9f:45:9e:b9:90:5f:ae:55:62:31:ff:79:34:db: 46:17:5a:a9:0b:bf:b4:16:ae:f7:5d:20:f5:90:88:96:30:07: 7a:6c:4d:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5NTU0NkI3RTBD MUQxMUM1NzAeFw0yNjA0MTcwODE1NTVaFw0yNjA0MjQwODE1NTVaMBgxFjAUBgNV BAMTDTY5ZTFlYzNjLWZhMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC17NJbNOn/28LfijFOpfzon8zfNxxYFVxNIPvtsJByqRxm0B/u0uC8f+eaFD2X Gcqj/yTlk9yUbA3ScY3B2TyP9q6o7ITJdGSO7D6ddw1IAka0+pHRnIUD2V403M7k 0DW0OI36oE4iVGqP//Rhc+Y1MtuD59l7sQfqML22T2CABy43EXgAVE/olm3mTF5q e3+KF7thG1Hasd+ubvu014ujR9nsiTNkqKE4IH4oG2UErKOST9oBmFd9J7dk2lx0 0Lp1kZEJysvZ1Roq4T9uCkd14wEJJ1A2sNYon3++OvAPIqobcmrc3nXJTQbO1gve rJoOJPGDajgs6NI5XB56aFf7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuyMLLRD1 FgSAJ5+SlShJ1zd94DwwHwYDVR0jBBgwFoAUzq7A6H2VhStEwGE5VUa34MHRHFcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzVDMkQxMDY0RUJD OTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhG Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenE3QTZIMlZoU3RFd0dFNVZVYTM0TUhSSEZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC OTA5LzVDMkQxMDY0RUJDOTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0 RXdHRTVWVWEzNE1IUkhGYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXLp95+isBszdBrTUo6A/JyHD5KoKUCWuadYrdIncqTiQzbzDZxNaougkI/m4E qBxXjdL2+7SzobYGCS++PupTqB52yS+g7iRI4AFoiwGZy/GgFqz6yL1PGnFlF+sS SWbh565aGYrtNC4jqrTtxVjKHahZZgj6f1FF4Du5v5CcSaKaYC280DLoVECfHPCH FbbdZXQ4sRGzhRDJ/mz8N4JebZVJjxEvRwwLq//coa1mWXbgpRIkgqqOaVK5Uwc3 sE6H75zFYyOT0LJS8OB+y8KKJEutui+pvngDTAPGn0WeuZBfrlViMf95NNtGF1qp C7+0Fq73XSD1kIiWMAd6bE1J -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:12 2026 by rpki-client