$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: Z0HKdJdnnTHEbuxrfM268zvt4lrGaKqxKnKIDxm4Lcg= Subject key identifier: 1F:FF:8B:88:2F:DA:35:42:76:69:35:C7:D0:DC:8D:7D:02:FF:EC:45 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 0269 Signing time: Fri 17 Apr 2026 01:52:42 +0000 Manifest this update: Fri 17 Apr 2026 01:52:41 +0000 Manifest next update: Fri 24 Apr 2026 01:52:41 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: WUSXKv0qpNCWoUCJMT+pPsC7jQVyuEgrXyH2luTG3tQ=) 2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) 3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Apr 17 01:52:41 2026 GMT Not After : Apr 24 01:52:41 2026 GMT Subject: CN=69e1926a-91b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:5d:57:00:f5:ad:7a:54:94:c7:67:98:0c: 9d:23:0b:be:bc:98:c0:13:66:a8:fb:75:e1:bb:6f: 80:b6:75:fc:93:54:d7:cf:c5:e8:73:5f:dc:d9:9d: a9:31:31:cd:d3:1d:ff:db:92:ae:69:a5:63:0d:cf: 2f:71:30:f5:1c:4b:c2:e9:d8:19:8c:48:67:6a:2f: 1b:17:d7:e7:c5:e1:5c:21:4d:b8:42:54:dc:4e:d6: 0a:26:83:95:20:c4:7d:a7:2f:3f:15:c4:56:83:79: be:b7:bd:13:8b:70:65:a9:1a:9a:23:c3:e4:28:b3: 4e:2b:9a:33:d7:fc:10:23:1f:68:7f:52:27:f9:b3: 3e:92:6c:79:c2:de:79:40:ad:7f:61:00:24:83:cf: 37:76:27:38:bf:a7:f8:7c:5f:4f:f4:21:aa:f0:cb: fe:60:b4:6a:30:b8:9f:cb:c1:56:e6:16:4c:d0:c7: ec:ca:77:25:58:36:36:4b:b5:9a:da:47:7c:90:55: ea:a4:cf:85:2c:5c:7b:80:ad:e8:57:23:2e:a5:79: 3d:29:8a:45:7c:41:7f:0f:48:aa:e0:65:e1:ee:bd: 88:67:50:49:11:d3:82:08:63:a1:dd:33:6e:4b:9b: 76:13:67:86:a7:cd:bf:b3:37:0b:fd:20:94:f1:9a: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FF:8B:88:2F:DA:35:42:76:69:35:C7:D0:DC:8D:7D:02:FF:EC:45 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7c:87:00:6a:ca:b1:9b:72:4c:d6:38:fd:e3:cf:03:f5:82: c3:8d:05:24:82:95:0a:b4:ae:b4:a9:f0:c0:0d:04:38:84:30: 2e:d6:30:80:81:29:40:db:bf:bf:41:3d:2f:ed:19:f3:ab:1f: 50:1c:f6:ff:8f:43:ea:a5:d0:fa:9a:5a:21:bc:b2:66:c8:4e: 0a:2e:ce:ef:80:c8:53:69:b5:13:c8:55:c9:0e:67:f4:b7:50: 41:c0:e2:63:ea:0b:17:c1:79:5e:69:12:63:0f:af:ff:af:16: e0:86:5a:30:a4:84:5a:39:39:12:50:35:f4:1d:48:e4:7a:1b: 23:42:b1:d5:91:6a:0b:b9:3a:c6:be:f4:00:f7:69:db:21:f8: aa:e7:6f:a2:89:8c:a8:8b:3b:3f:35:b8:69:8e:42:02:0e:3c: 88:37:a8:d9:61:dc:d6:e9:c3:1b:4b:06:c1:cd:41:6f:d6:f8: 82:dd:0c:f5:0f:9d:90:d7:c5:8d:61:fa:e3:77:1c:df:a5:95: 03:27:67:3e:8c:6b:ad:af:4d:ed:df:b7:d4:6a:bf:fb:1d:8b: 1b:ab:6c:96:d1:c8:3a:5b:84:bd:73:9d:2e:8c:a5:92:56:4b: 13:c5:9e:06:f6:06:8c:05:07:cc:e2:be:13:ba:59:f7:e4:b0: ec:ef:ec:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwNDE3MDE1MjQxWhcNMjYwNDI0MDE1MjQxWjAYMRYwFAYD VQQDEw02OWUxOTI2YS05MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VNdVwD1rXpUlMdnmAydIwu+vJjAE2ao+3Xhu2+AtnX8k1TXz8Xoc1/c2Z2p MTHN0x3/25KuaaVjDc8vcTD1HEvC6dgZjEhnai8bF9fnxeFcIU24QlTcTtYKJoOV IMR9py8/FcRWg3m+t70Ti3BlqRqaI8PkKLNOK5oz1/wQIx9of1In+bM+kmx5wt55 QK1/YQAkg883dic4v6f4fF9P9CGq8Mv+YLRqMLify8FW5hZM0MfsynclWDY2S7Wa 2kd8kFXqpM+FLFx7gK3oVyMupXk9KYpFfEF/D0iq4GXh7r2IZ1BJEdOCCGOh3TNu S5t2E2eGp82/szcL/SCU8Zqd9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB//i4gv 2jVCdmk1x9DcjX0C/+xFMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbHyHAGrKsZtyTNY4/ePPA/WCw40FJIKVCrSutKnwwA0EOIQwLtYwgIEpQNu/ v0E9L+0Z86sfUBz2/49D6qXQ+ppaIbyyZshOCi7O74DIU2m1E8hVyQ5n9LdQQcDi Y+oLF8F5XmkSYw+v/68W4IZaMKSEWjk5ElA19B1I5HobI0Kx1ZFqC7k6xr70APdp 2yH4qudvoomMqIs7PzW4aY5CAg48iDeo2WHc1unDG0sGwc1Bb9b4gt0M9Q+dkNfF jWH643cc36WVAydnPoxrra9N7d+31Gq/+x2LG6tsltHIOluEvXOdLoylklZLE8We BvYGjAUHzOK+E7pZ9+Sw7O/sxQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:04:02 2026 by rpki-client