$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: KoWmhRub3scG8of0Gfx9r/PV9gSmn5jh7gxwBlcpSfo= Subject key identifier: 7C:BA:8E:A8:5E:CB:FB:57:84:DB:C6:54:EC:AF:83:8F:D5:36:D1:01 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: D3 Signing time: Fri 17 Apr 2026 06:28:58 +0000 Manifest this update: Fri 17 Apr 2026 06:28:58 +0000 Manifest next update: Fri 24 Apr 2026 06:28:58 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: oeqB9vaBt+QdSc/FXlt+vOvAYcSZt+0tYGqN6qTWP/Q=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Apr 17 06:28:58 2026 GMT Not After : Apr 24 06:28:58 2026 GMT Subject: CN=69e1d32a-32a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:3b:79:7b:79:2a:50:f7:97:62:81:ae:f8: 94:60:09:6e:9f:31:6e:af:0a:cc:ba:72:b5:ea:00: 93:e9:cb:68:2c:ac:17:93:34:1c:d9:00:d8:09:c6: 1c:19:1c:f6:f8:51:72:be:6a:41:d4:46:d2:44:9f: 7e:b4:68:45:b4:ba:18:36:ad:c7:d6:e7:1e:07:2b: b9:84:7c:7d:ca:67:9c:3d:1f:44:02:12:b0:24:19: 27:1e:2c:d7:a8:c6:1c:c7:6b:2e:0c:18:ae:ce:ef: 24:e0:72:13:c2:d9:d5:52:de:50:ef:f8:25:f7:09: 84:46:80:35:8c:05:29:ad:11:1b:a3:5b:85:ac:98: f4:d9:c1:a0:30:91:df:d0:fa:40:ab:65:75:97:c0: 92:49:89:57:f9:bb:0b:e9:2c:71:5d:7f:63:13:13: 3b:53:03:ab:d4:a3:cd:c3:ef:25:31:89:26:f1:65: d2:d0:85:12:b4:a2:1e:bb:53:dd:ee:ac:08:29:ed: 0d:b7:3c:0a:03:0c:c0:f6:86:36:48:4c:9b:f7:6b: 24:f1:f3:6e:78:52:93:60:2e:99:99:8c:12:32:9c: a4:cc:da:ab:bd:00:d4:25:fb:45:10:3c:57:92:2b: 5f:e4:93:db:ef:f1:73:8e:06:5a:11:9b:73:45:d8: 3e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BA:8E:A8:5E:CB:FB:57:84:DB:C6:54:EC:AF:83:8F:D5:36:D1:01 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:48:ee:b9:36:e1:dd:ce:43:c1:7f:75:78:df:37:8e:30:6a: 71:d1:40:0b:62:dc:45:fb:f2:bc:f2:c1:54:13:73:72:0f:61: e6:01:8c:b2:81:9b:ab:8c:a8:6f:c2:28:68:fc:b5:fc:9d:80: 0f:2b:1b:05:7a:80:f3:4f:60:91:ff:07:8f:b2:96:ed:8c:cb: 62:09:7d:f5:93:c0:20:4a:d3:e5:58:40:e7:ba:15:dd:1b:5a: 8f:e1:e8:b4:ff:ca:04:73:36:ed:8d:21:fc:ad:e2:5e:a9:25: d4:f7:52:87:92:2e:c0:8a:ff:1a:40:a3:91:04:c8:25:86:b7: d0:25:2a:e4:fe:fb:ba:fa:ba:5f:85:42:5a:fb:37:64:37:49: 9b:89:69:d1:00:19:9f:60:9b:e5:ac:ed:c1:c6:84:af:91:94: 68:80:6a:3e:43:db:11:4a:e7:ef:5e:d9:c9:52:7a:3f:ba:3a: 42:e8:19:36:1f:18:6a:9e:76:2a:db:5d:f1:36:94:0d:5f:f5: 40:1a:71:ee:3d:91:27:44:9d:10:d5:c3:f7:1a:61:e1:4f:b2: 1c:5b:49:72:69:34:ff:a7:4d:6b:e2:d5:65:46:1b:2a:a8:cf: 57:40:3c:04:45:76:fb:68:29:7b:50:e0:01:be:d8:08:e0:37: 0d:b6:4a:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc0ODgxMTAvBgNVBAUTKENENDFEQkMxODk3OEREMzg0RDRGNUM4RjhGOTZCNDBF NzFERUU2NDEwHhcNMjYwNDE3MDYyODU4WhcNMjYwNDI0MDYyODU4WjAYMRYwFAYD VQQDEw02OWUxZDMyYS0zMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03c7eXt5KlD3l2KBrviUYAlunzFurwrMunK16gCT6ctoLKwXkzQc2QDYCcYc GRz2+FFyvmpB1EbSRJ9+tGhFtLoYNq3H1uceByu5hHx9ymecPR9EAhKwJBknHizX qMYcx2suDBiuzu8k4HITwtnVUt5Q7/gl9wmERoA1jAUprREbo1uFrJj02cGgMJHf 0PpAq2V1l8CSSYlX+bsL6SxxXX9jExM7UwOr1KPNw+8lMYkm8WXS0IUStKIeu1Pd 7qwIKe0NtzwKAwzA9oY2SEyb92sk8fNueFKTYC6ZmYwSMpykzNqrvQDUJftFEDxX kitf5JPb7/FzjgZaEZtzRdg+2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHy6jqhe y/tXhNvGVOyvg4/VNtEBMB8GA1UdIwQYMBaAFM1B28GJeN04TU9cj4+WtA5x3uZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzQ4OC83OTAzQUJCQ0ZG MTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNUaE5UMXlQajVhMERuSGU1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNU aE5UMXlQajVhMERuSGU1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANEjuuTbh3c5DwX91eN83jjBqcdFAC2LcRfvyvPLBVBNzcg9h5gGMsoGbq4yo b8IoaPy1/J2ADysbBXqA809gkf8Hj7KW7YzLYgl99ZPAIErT5VhA57oV3Rtaj+Ho tP/KBHM27Y0h/K3iXqkl1PdSh5IuwIr/GkCjkQTIJYa30CUq5P77uvq6X4VCWvs3 ZDdJm4lp0QAZn2Cb5aztwcaEr5GUaIBqPkPbEUrn717ZyVJ6P7o6QugZNh8Yap52 Kttd8TaUDV/1QBpx7j2RJ0SdENXD9xph4U+yHFtJcmk0/6dNa+LVZUYbKqjPV0A8 BEV2+2gpe1DgAb7YCOA3DbZKPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:31:02 2026 by rpki-client