$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: YZ2pxK8SaI/9J94A/duSmwoa8gbhxyXH7gSsjW0a2c8= Subject key identifier: 11:AE:47:2C:01:D7:F0:25:D8:F0:74:4E:EA:B1:45:A7:99:82:C6:5C Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0CDB Signing time: Thu 16 Apr 2026 18:15:48 +0000 Manifest this update: Thu 16 Apr 2026 18:15:47 +0000 Manifest next update: Thu 23 Apr 2026 18:15:47 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: EbBM9dKdrVSwkI59jFvXdBYDuv9SSpmt0JWZMypIeXI=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: AajdPkJ4rEa4vqdqvJqj9eo6LBkmjEKm6+u/Jv10pOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Apr 16 18:15:47 2026 GMT Not After : Apr 23 18:15:47 2026 GMT Subject: CN=69e12754-20e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:c8:92:0d:5b:ab:e3:73:82:a3:1b:6d:aa: 60:e3:5e:c8:61:91:06:27:5e:02:a0:8e:92:a8:53: 7e:93:f8:6d:52:d3:c3:2c:d1:1d:c6:6d:37:e6:48: b9:d6:ca:ac:73:4f:34:41:79:1a:eb:d2:2e:b4:6b: 93:b9:98:6f:76:50:1b:b2:38:58:5d:e4:65:4e:1c: 17:66:58:b7:d8:7e:dd:dc:35:3a:43:ea:cf:7d:b1: bb:ae:27:a3:fa:e5:1b:64:6d:ca:45:91:7b:aa:aa: 6e:d0:1d:af:57:e6:94:19:e7:b4:8e:59:12:ce:66: f2:ee:ae:8f:5a:e8:8f:c3:98:16:b1:e4:1b:bb:14: 44:6c:40:2c:bf:f7:69:89:f7:e3:1b:65:21:b6:9a: 8a:aa:03:3c:38:43:26:45:5c:46:70:64:40:c0:fe: ed:b6:e6:e2:6b:a1:20:d3:de:89:4e:6c:84:26:fe: b8:f6:e9:fc:f7:61:ae:ff:6c:37:d3:b0:91:9b:03: eb:b4:86:35:67:e2:7b:5f:5a:d6:05:db:0b:59:2d: 5f:cc:66:83:0b:71:3e:3e:d1:f3:0b:82:65:59:28: 02:40:ca:75:5d:2b:be:16:ec:a5:79:2d:a1:4d:a0: 7a:26:43:76:fa:81:84:c7:32:d1:3f:f2:d1:2f:16: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AE:47:2C:01:D7:F0:25:D8:F0:74:4E:EA:B1:45:A7:99:82:C6:5C X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:35:46:ec:92:28:fa:4d:2a:97:61:78:47:6c:1c:d5:39: e4:fe:05:bd:a4:c2:bb:ff:5d:9e:33:d1:02:42:90:b4:e9:6b: 6a:d2:e3:55:d8:19:d1:a4:4b:68:09:73:05:76:e1:c3:20:28: ab:ff:b4:df:f4:c5:bf:8e:31:a8:9b:73:0a:47:4d:0d:ff:8e: db:d2:fe:b3:10:0c:14:2b:84:dc:d8:82:ea:77:43:70:5d:c6: 62:4c:93:c7:58:6a:78:bf:4d:78:58:8f:9e:6d:4c:dd:f2:ac: a9:e9:4f:c9:8f:8c:a3:05:0a:c3:89:0c:5d:51:9c:73:e2:66: a7:be:37:29:13:a1:2b:8f:8d:cb:ed:3a:96:a1:67:b5:01:eb: c0:8e:74:f6:01:26:d9:7b:75:46:a0:68:5e:fe:09:6f:64:a9: 7e:f6:a3:91:3b:d1:ef:9d:0e:a6:0a:fb:60:b5:9a:e5:ec:db: 3d:30:b5:d2:d8:c4:90:ec:e3:b5:b4:26:52:cb:91:33:0c:6c: df:4c:02:64:3c:42:a6:56:bf:d8:44:2a:77:83:88:5a:72:b4: f1:80:47:62:5f:a2:af:7e:cc:d6:f9:cb:07:10:96:dc:07:63: da:e5:b3:df:a7:40:65:03:f3:ca:87:ca:1e:10:19:85:51:22: 46:56:93:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjYwNDE2MTgxNTQ3WhcNMjYwNDIzMTgxNTQ3WjAYMRYwFAYD VQQDEw02OWUxMjc1NC0yMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDbIkg1bq+NzgqMbbapg417IYZEGJ14CoI6SqFN+k/htUtPDLNEdxm035ki5 1sqsc080QXka69IutGuTuZhvdlAbsjhYXeRlThwXZli32H7d3DU6Q+rPfbG7riej +uUbZG3KRZF7qqpu0B2vV+aUGee0jlkSzmby7q6PWuiPw5gWseQbuxREbEAsv/dp iffjG2UhtpqKqgM8OEMmRVxGcGRAwP7ttubia6Eg096JTmyEJv649un892Gu/2w3 07CRmwPrtIY1Z+J7X1rWBdsLWS1fzGaDC3E+PtHzC4JlWSgCQMp1XSu+FuyleS2h TaB6JkN2+oGExzLRP/LRLxZuwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGuRywB 1/Al2PB0TuqxRaeZgsZcMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIYM1RuySKPpNKpdheEdsHNU55P4FvaTCu/9dnjPRAkKQtOlratLjVdgZ0aRL aAlzBXbhwyAoq/+03/TFv44xqJtzCkdNDf+O29L+sxAMFCuE3NiC6ndDcF3GYkyT x1hqeL9NeFiPnm1M3fKsqelPyY+MowUKw4kMXVGcc+Jmp743KROhK4+Ny+06lqFn tQHrwI509gEm2Xt1RqBoXv4Jb2SpfvajkTvR750Opgr7YLWa5ezbPTC10tjEkOzj tbQmUsuRMwxs30wCZDxCpla/2EQqd4OIWnK08YBHYl+ir37M1vnLBxCW3Adj2uWz 36dAZQPzyofKHhAZhVEiRlaThg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:28 2026 by rpki-client