$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: 5JW/TFc5Vml86iU7Xg7HXb9n2bUSUo+M87tZEy9zY3g= Subject key identifier: 29:C2:5C:06:D4:15:A4:C7:6D:02:FE:62:E2:60:47:70:61:A8:00:FC Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 1060 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 1049 Signing time: Thu 16 Apr 2026 17:20:19 +0000 Manifest this update: Thu 16 Apr 2026 17:20:18 +0000 Manifest next update: Thu 23 Apr 2026 17:20:18 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: T1NAoi0vILN97+mgxqoXZeBMnEiZO1i1ZSu6z+hrz0U=) 2: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=) 4: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4192 (0x1060) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Apr 16 17:20:18 2026 GMT Not After : Apr 23 17:20:18 2026 GMT Subject: CN=69e11a53-306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:db:6f:71:8e:e4:15:77:29:cc:55:10:ee: 09:aa:82:f3:30:6c:0b:f5:dd:f1:e5:35:e2:ac:ba: 71:b7:14:81:17:35:87:70:31:c6:00:b8:ac:9f:6f: 2c:25:50:55:66:af:bb:99:ac:89:c0:3b:a7:64:fe: 10:fb:9c:26:30:54:ca:64:a8:df:ea:42:aa:b8:d6: 55:97:fa:a6:25:85:c4:cc:ae:58:13:e5:c9:9d:e3: ed:ac:48:e7:36:77:59:f4:d7:bc:03:05:56:6a:93: 9a:6e:b8:17:06:47:6f:b6:04:24:4a:9d:c1:d9:34: 80:3d:b0:bc:20:f4:bd:50:5f:32:13:28:c8:d2:de: 16:bf:26:85:b6:b9:ec:5c:ef:95:11:ea:7f:34:40: 27:be:b9:16:17:31:06:40:33:d7:31:1c:ae:68:2f: 4e:a3:5d:23:37:7c:35:c0:02:72:ce:37:41:a2:48: e2:89:c7:3c:54:e7:43:55:31:cf:cc:c9:64:06:74: 6e:64:e0:6b:93:75:39:af:97:10:70:04:e1:bf:de: ef:a1:e4:5b:24:4d:91:6b:c8:2d:80:70:8a:1d:8a: c1:1e:bd:9b:1b:95:31:50:6f:6e:dc:f8:de:b8:f5: 41:11:49:26:b2:72:0f:d4:a3:09:27:c2:cf:84:24: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C2:5C:06:D4:15:A4:C7:6D:02:FE:62:E2:60:47:70:61:A8:00:FC X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:03:a4:2c:89:81:c6:d5:1f:9c:40:86:0a:63:c1:62:06:9a: 3a:2b:d9:f3:b8:a9:39:14:a6:df:4b:bb:bd:74:bb:9f:1c:16: 50:82:c3:7f:8e:ec:ee:2c:1a:50:86:ac:19:cf:65:74:e9:ae: b9:60:ce:d1:df:04:36:4f:7f:d5:7f:c9:01:13:d5:1f:dd:ad: ec:b8:35:f8:32:5d:ce:e7:76:a4:24:70:49:9f:de:b5:90:99: 70:43:22:b6:ed:6e:e8:28:0a:7a:bb:98:85:cb:a7:a7:a6:c8: ab:94:13:24:3f:47:21:21:73:20:84:d8:5b:0f:cc:3e:18:a5: ac:0a:ed:34:ee:e1:bc:50:e6:3f:b2:38:ad:cc:fc:25:c6:c8: b6:63:61:ab:96:b8:55:60:2c:d8:e4:4e:d9:81:b0:55:7c:1e: 6d:e3:64:98:17:30:ab:98:e9:b9:c5:64:3d:3c:42:34:fb:1e: 49:81:cb:82:d8:66:d2:ab:b1:63:98:f2:ef:8c:3e:ac:70:a2: 71:67:18:4f:36:fc:d0:68:d0:bd:3f:06:4f:55:03:22:10:df: 8d:97:f2:17:e7:1c:be:f6:93:e4:26:d6:d8:d1:af:c3:64:69: 2b:4e:0b:c9:54:d1:a4:9d:3b:50:87:1b:9f:98:15:81:5f:98: 65:3e:e2:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjYwNDE2MTcyMDE4WhcNMjYwNDIzMTcyMDE4WjAYMRYwFAYD VQQDEw02OWUxMWE1My0zMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvvbb3GO5BV3KcxVEO4JqoLzMGwL9d3x5TXirLpxtxSBFzWHcDHGALisn28s JVBVZq+7mayJwDunZP4Q+5wmMFTKZKjf6kKquNZVl/qmJYXEzK5YE+XJnePtrEjn NndZ9Ne8AwVWapOabrgXBkdvtgQkSp3B2TSAPbC8IPS9UF8yEyjI0t4WvyaFtrns XO+VEep/NEAnvrkWFzEGQDPXMRyuaC9Oo10jN3w1wAJyzjdBokjiicc8VOdDVTHP zMlkBnRuZOBrk3U5r5cQcAThv97voeRbJE2Ra8gtgHCKHYrBHr2bG5UxUG9u3Pje uPVBEUkmsnIP1KMJJ8LPhCTfywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnCXAbU FaTHbQL+YuJgR3BhqAD8MB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQOkLImBxtUfnECGCmPBYgaaOivZ87ipORSm30u7vXS7nxwWUILDf47s7iwa UIasGc9ldOmuuWDO0d8ENk9/1X/JARPVH92t7Lg1+DJdzud2pCRwSZ/etZCZcEMi tu1u6CgKeruYhcunp6bIq5QTJD9HISFzIITYWw/MPhilrArtNO7hvFDmP7I4rcz8 JcbItmNhq5a4VWAs2ORO2YGwVXwebeNkmBcwq5jpucVkPTxCNPseSYHLgthm0qux Y5jy74w+rHCicWcYTzb80GjQvT8GT1UDIhDfjZfyF+ccvvaT5CbW2NGvw2RpK04L yVTRpJ07UIcbn5gVgV+YZT7iww== -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:22 2026 by rpki-client