$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: VkkLXyyjNliHl0YOmUQlm0qnrTzX7r/DHfkiU5rXDQQ= Subject key identifier: 2C:87:DB:A0:9A:06:BB:B9:D1:BF:CE:C7:8B:EF:1C:3B:BE:E6:88:B0 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 01AC Signing time: Fri 17 Apr 2026 04:15:46 +0000 Manifest this update: Fri 17 Apr 2026 04:15:46 +0000 Manifest next update: Fri 24 Apr 2026 04:15:46 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: ppo2flFCYl56YqWTtmW+3+X0WCCDr4LrmUUAWS8PNf8=) 2: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=) 3: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=) 4: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=) 5: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=) 6: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=) 7: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=) 8: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Apr 17 04:15:46 2026 GMT Not After : Apr 24 04:15:46 2026 GMT Subject: CN=69e1b3f2-12e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:b9:85:9b:68:e3:ad:d6:a7:42:50:da:f8: 63:97:31:66:4c:7b:97:a9:f6:05:02:29:3a:ca:da: 43:4b:60:8e:0d:a3:ea:3a:d1:87:ea:2f:37:8d:00: bf:d4:2b:4e:62:a4:b0:61:29:01:49:b0:cc:d6:96: 5e:c5:76:77:9a:d7:48:a5:2b:ad:ca:67:d3:27:68: 30:8c:37:98:fa:95:e5:a8:83:c1:b1:ce:95:4d:0b: e0:a4:c6:51:c4:7b:e8:fb:47:95:0d:4c:de:3e:7b: 21:14:0a:c4:a6:b5:a7:61:b9:3b:5c:25:ac:c5:fe: 65:44:3f:13:74:02:37:8f:ac:df:13:a5:53:2d:1c: 88:9d:f2:1e:4b:5c:58:9d:02:54:7e:e2:74:7c:53: b0:14:12:5e:93:3b:50:57:bb:2a:37:60:12:40:76: 7f:99:cf:d8:6e:06:d7:2f:44:20:96:ca:b6:e9:8b: ce:d4:6b:63:46:41:57:43:a5:10:13:30:68:d4:98: 52:78:28:c3:a1:54:fd:35:81:b9:1f:92:64:4e:a7: 52:5c:d3:5a:7c:1e:b9:3c:fd:f5:66:b3:51:e4:b1: 07:33:71:e8:62:67:55:5b:72:1a:bb:e9:ab:8d:c8: 90:61:e1:d7:53:b1:ff:7e:e3:98:6b:03:81:7d:7c: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:DB:A0:9A:06:BB:B9:D1:BF:CE:C7:8B:EF:1C:3B:BE:E6:88:B0 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:55:98:24:24:7c:3e:52:19:2e:00:ef:e8:24:d9:25:ad:2e: 5f:10:d7:f3:35:90:85:e1:43:c3:8f:b3:46:98:0f:11:28:6d: a5:74:50:67:a5:dc:d9:30:80:36:f1:f8:5d:3b:78:81:08:be: 1c:23:3b:a5:71:23:bf:72:12:ae:8b:1f:54:e4:9b:10:ef:92: b8:6b:b0:e5:47:c1:95:9f:b4:1d:c2:d6:30:a9:60:36:38:0c: 06:31:33:ca:0b:3f:5e:83:8b:53:df:16:19:86:53:49:51:e8: 91:8d:6a:88:62:b2:8b:f0:4e:0d:8d:e7:44:7c:64:c8:a4:e4: 8d:60:30:b4:26:3c:27:64:b0:65:5c:83:e9:82:f6:c8:4c:e1: b3:c6:1b:83:ee:f4:dc:d4:b7:2f:9e:f1:c5:a1:00:8d:df:41: 35:2b:a5:c0:b1:b8:3e:65:1f:ef:39:3d:17:6d:e0:16:f4:c4: bf:bb:99:ed:ad:63:35:fb:68:d8:3d:5b:bb:da:c8:14:b1:fd: 48:14:fc:0c:0b:d0:da:ab:fa:f1:c4:c7:d3:ce:89:54:4b:ce: 44:63:e6:1b:b6:47:49:13:de:ab:54:13:d4:d7:6f:95:c0:75: bb:c2:b9:d9:00:ce:24:9f:ad:94:24:a8:5f:20:8c:f1:e3:ae: c5:26:f4:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjYwNDE3MDQxNTQ2WhcNMjYwNDI0MDQxNTQ2WjAYMRYwFAYD VQQDEw02OWUxYjNmMi0xMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJG5hZto463Wp0JQ2vhjlzFmTHuXqfYFAik6ytpDS2CODaPqOtGH6i83jQC/ 1CtOYqSwYSkBSbDM1pZexXZ3mtdIpSutymfTJ2gwjDeY+pXlqIPBsc6VTQvgpMZR xHvo+0eVDUzePnshFArEprWnYbk7XCWsxf5lRD8TdAI3j6zfE6VTLRyInfIeS1xY nQJUfuJ0fFOwFBJekztQV7sqN2ASQHZ/mc/YbgbXL0Qglsq26YvO1GtjRkFXQ6UQ EzBo1JhSeCjDoVT9NYG5H5JkTqdSXNNafB65PP31ZrNR5LEHM3HoYmdVW3Iau+mr jciQYeHXU7H/fuOYawOBfXwWzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyH26Ca Bru50b/Ox4vvHDu+5oiwMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYVWYJCR8PlIZLgDv6CTZJa0uXxDX8zWQheFDw4+zRpgPEShtpXRQZ6Xc2TCA NvH4XTt4gQi+HCM7pXEjv3ISrosfVOSbEO+SuGuw5UfBlZ+0HcLWMKlgNjgMBjEz ygs/XoOLU98WGYZTSVHokY1qiGKyi/BODY3nRHxkyKTkjWAwtCY8J2SwZVyD6YL2 yEzhs8Ybg+703NS3L57xxaEAjd9BNSulwLG4PmUf7zk9F23gFvTEv7uZ7a1jNfto 2D1bu9rIFLH9SBT8DAvQ2qv68cTH086JVEvORGPmG7ZHSRPeq1QT1NdvlcB1u8K5 2QDOJJ+tlCSoXyCM8eOuxSb04g== -----END CERTIFICATE-----Generated at Fri Apr 17 12:48:27 2026 by rpki-client