$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: HUOdFPoF7BotZuhSsHlMh81Vrf9uEg5hlS1He28oo9E= Subject key identifier: AB:69:D8:9A:10:CC:40:D0:A9:AA:51:6B:CC:54:2A:61:F7:2F:D3:C9 Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 023F Signing time: Fri 17 Apr 2026 02:14:39 +0000 Manifest this update: Fri 17 Apr 2026 02:14:39 +0000 Manifest next update: Fri 24 Apr 2026 02:14:39 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: I6E2NlsOstDr7uI1A1sqkrejP3CGChfErsBxC/q6DIU=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: Apr 17 02:14:39 2026 GMT Not After : Apr 24 02:14:39 2026 GMT Subject: CN=69e1978f-52a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:ae:cc:87:3a:8a:31:47:d1:6c:c4:98:4e: 4d:28:08:a8:4a:87:13:f7:1f:90:aa:12:77:10:e1: 1c:23:a3:5d:b6:0d:f0:3f:20:e9:62:f2:b1:3a:aa: 7f:5f:5c:fb:d3:19:d4:c7:6c:1c:71:b2:eb:c4:84: 89:97:ea:fa:03:57:8f:72:c6:43:11:77:52:8e:90: 95:81:35:ab:85:4e:73:bb:b2:27:e8:66:1a:1a:b3: f0:b8:27:8f:73:82:d2:2d:71:ec:a5:8b:75:fa:bc: c3:ff:77:c8:5e:0b:08:f5:0c:a7:22:ae:5e:0d:cd: 6c:ef:f9:bc:92:a4:1d:e7:68:a8:74:a4:a4:6c:e8: d9:16:7c:24:44:b3:44:23:28:04:e6:96:fb:a8:ee: 47:06:a8:77:5e:36:90:14:71:85:49:5a:1f:43:b3: 7a:ab:1e:ec:ee:73:8f:4b:48:b2:8e:d2:6e:0d:3a: e8:f7:10:ab:11:22:01:0f:66:61:97:99:c9:d0:2b: 98:60:8a:81:2b:4f:4b:49:44:63:38:25:16:d9:55: d1:d3:6c:d9:03:c5:2d:89:9e:8a:12:4a:72:75:dd: 24:28:9a:26:5b:68:f7:7c:20:8f:2d:fd:bb:d2:0b: 28:b4:39:7d:b7:15:35:e7:1a:93:8c:34:ae:b2:b2: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:D8:9A:10:CC:40:D0:A9:AA:51:6B:CC:54:2A:61:F7:2F:D3:C9 X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c4:d4:8a:0b:c0:46:59:cf:43:59:9e:38:b0:6c:b3:4c:6d: d8:35:21:ba:30:e5:b9:fa:ce:11:ca:33:7e:68:48:82:cf:b6: 56:56:4a:ed:2f:d3:a5:25:fe:0b:f6:e0:25:82:f1:f8:91:a2: d0:34:18:0e:b2:e8:a9:c5:6e:a7:29:7f:e6:0c:9f:9f:a3:78: 8e:9b:b4:f3:bd:9c:39:07:fb:13:a0:09:2c:09:26:ef:47:92: 0b:e8:c1:6a:1f:c4:cb:9e:93:e0:ed:0e:d2:db:e2:19:7c:10: d9:d3:98:4a:84:2c:5c:58:dc:03:ee:e3:9c:f2:68:c8:31:04: 41:71:23:47:28:c7:1b:f8:bb:54:dc:1c:1f:a7:7f:07:03:79: c1:19:6e:b4:ff:6c:de:c3:f6:75:8f:86:2c:9a:1d:d2:b7:59: e0:9f:92:48:f1:93:c3:38:8d:89:7f:70:4f:0b:96:75:aa:65: e6:93:20:93:49:94:30:87:14:c1:67:d0:3f:18:8e:f9:f0:d9: 2b:4f:61:f3:d5:23:f7:08:29:4d:69:48:d9:21:46:05:0f:57: f7:f5:e8:d3:14:9e:c6:53:fe:6c:13:9b:93:7a:2b:00:dd:d7: 50:37:bf:47:57:7a:f7:7a:ad:9e:c6:94:a1:7c:62:87:25:a3: d8:c1:b1:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjYwNDE3MDIxNDM5WhcNMjYwNDI0MDIxNDM5WjAYMRYwFAYD VQQDEw02OWUxOTc4Zi01MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6euzIc6ijFH0WzEmE5NKAioSocT9x+QqhJ3EOEcI6Ndtg3wPyDpYvKxOqp/ X1z70xnUx2wccbLrxISJl+r6A1ePcsZDEXdSjpCVgTWrhU5zu7In6GYaGrPwuCeP c4LSLXHspYt1+rzD/3fIXgsI9QynIq5eDc1s7/m8kqQd52iodKSkbOjZFnwkRLNE IygE5pb7qO5HBqh3XjaQFHGFSVofQ7N6qx7s7nOPS0iyjtJuDTro9xCrESIBD2Zh l5nJ0CuYYIqBK09LSURjOCUW2VXR02zZA8UtiZ6KEkpydd0kKJomW2j3fCCPLf27 0gsotDl9txU15xqTjDSusrKWmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtp2JoQ zEDQqapRa8xUKmH3L9PJMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANcTUigvARlnPQ1meOLBss0xt2DUhujDlufrOEcozfmhIgs+2VlZK7S/TpSX+ C/bgJYLx+JGi0DQYDrLoqcVupyl/5gyfn6N4jpu0872cOQf7E6AJLAkm70eSC+jB ah/Ey56T4O0O0tviGXwQ2dOYSoQsXFjcA+7jnPJoyDEEQXEjRyjHG/i7VNwcH6d/ BwN5wRlutP9s3sP2dY+GLJod0rdZ4J+SSPGTwziNiX9wTwuWdapl5pMgk0mUMIcU wWfQPxiO+fDZK09h89Uj9wgpTWlI2SFGBQ9X9/Xo0xSexlP+bBObk3orAN3XUDe/ R1d693qtnsaUoXxihyWj2MGxsQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:45:33 2026 by rpki-client