$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: VgG06Aa+miUcnagPw1f/IEkEtUe/oIqiQfkxN322yQE= Subject key identifier: 2C:D5:45:0D:0E:A5:2B:23:01:97:AF:CC:1A:92:20:49:FA:C8:F1:A2 Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: FF Signing time: Fri 17 Apr 2026 06:12:11 +0000 Manifest this update: Fri 17 Apr 2026 06:12:10 +0000 Manifest next update: Fri 24 Apr 2026 06:12:10 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: Xr1FxA4v3Dc/TgyJ+kf4L6MvQT17kAm9iv7Mn4FQ3fE=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) 4: 9CFB6E68291011F1A4B1745D97833773.roa (hash: aehHvD9t7DFT4Rjm26XymMF5OBLncC+QzTFVcD0Y9Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Apr 17 06:12:10 2026 GMT Not After : Apr 24 06:12:10 2026 GMT Subject: CN=69e1cf3a-dd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:a1:31:9d:2e:33:ca:93:44:f1:ea:7f:4a: 28:13:f0:de:30:fb:45:80:a8:eb:08:35:cb:eb:da: fb:fd:71:fd:4f:0d:13:32:36:b2:89:2e:35:5b:b6: ba:68:ff:49:ab:cb:70:2a:7f:fd:a5:47:33:aa:a8: e4:3e:49:fe:95:bb:11:55:83:8f:e7:12:db:52:35: fa:cd:b6:ec:70:7f:04:be:5b:7e:01:21:3c:68:09: 33:69:1f:92:b4:c5:69:a6:76:72:45:3f:c7:e9:16: b0:d3:b7:71:62:6c:cc:d9:69:88:b4:be:81:17:e1: 73:f2:a5:c9:8b:3f:00:2e:63:8b:49:10:fb:1a:c5: 81:58:cf:ea:b9:76:0f:c6:11:5b:93:0f:36:55:e2: 81:ff:c9:11:a4:ed:68:04:eb:ed:60:0e:ed:35:55: e6:7c:d5:b9:41:f0:34:e0:0d:48:28:20:ed:a8:88: fd:43:09:66:5d:17:8c:92:22:4f:31:a4:78:a4:83: 41:d3:c4:f3:67:f8:02:2f:23:42:2a:b5:49:5b:6f: 87:01:7c:2d:63:59:3b:18:88:b8:35:4a:2a:9b:56: 3e:65:21:fb:7f:5b:de:06:b4:de:97:f8:71:0d:9a: 58:ee:ed:0e:1d:ac:3a:64:c4:6f:ca:a8:c3:e1:5d: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:45:0D:0E:A5:2B:23:01:97:AF:CC:1A:92:20:49:FA:C8:F1:A2 X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:dc:3c:d5:00:e8:65:36:24:08:8b:af:a3:60:7d:b4:f1:0d: ae:e4:5c:4b:24:09:1a:09:39:ff:28:86:9e:e6:88:07:2e:4d: 37:b6:5d:f4:dd:a6:41:91:4d:3c:73:f0:1e:80:9a:44:c4:8e: d5:bd:fe:c0:e3:52:a6:42:19:25:67:66:09:d9:c1:ac:45:33: 62:ae:00:7d:6e:64:f5:c6:01:51:5e:f9:52:c9:ba:6d:2b:07: e3:fb:b7:ab:2c:b9:76:1a:80:cc:28:4d:c5:b7:ae:7b:a2:98: ba:be:5f:7a:48:24:fa:7e:6e:f0:dc:8f:2f:b3:05:46:ef:48: 0d:58:80:95:eb:51:56:d8:a1:6c:a8:ad:65:37:e2:24:d4:2f: 32:d2:56:56:3f:e8:fa:49:f1:0e:b2:4e:a4:fc:b2:f6:06:6f: 05:6e:c2:08:28:59:cf:08:04:b5:16:83:0a:ac:9c:8a:a6:b4: c1:ee:3b:32:03:fd:f5:42:67:14:95:dc:60:58:ed:81:12:62: 28:36:1c:63:9d:93:0a:de:a9:bf:f2:57:14:0f:aa:4d:9d:12: 1c:65:bd:9f:d0:1e:62:76:52:4d:a3:62:a1:0e:2d:00:74:a2: c3:89:d6:59:3b:da:12:7c:b6:f5:a3:27:dc:a9:8d:50:45:da: 68:2f:7c:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwNDE3MDYxMjEwWhcNMjYwNDI0MDYxMjEwWjAYMRYwFAYD VQQDEw02OWUxY2YzYS1kZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIOhMZ0uM8qTRPHqf0ooE/DeMPtFgKjrCDXL69r7/XH9Tw0TMjayiS41W7a6 aP9Jq8twKn/9pUczqqjkPkn+lbsRVYOP5xLbUjX6zbbscH8Evlt+ASE8aAkzaR+S tMVppnZyRT/H6Raw07dxYmzM2WmItL6BF+Fz8qXJiz8ALmOLSRD7GsWBWM/quXYP xhFbkw82VeKB/8kRpO1oBOvtYA7tNVXmfNW5QfA04A1IKCDtqIj9QwlmXReMkiJP MaR4pINB08TzZ/gCLyNCKrVJW2+HAXwtY1k7GIi4NUoqm1Y+ZSH7f1veBrTel/hx DZpY7u0OHaw6ZMRvyqjD4V1vJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzVRQ0O pSsjAZevzBqSIEn6yPGiMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtw81QDoZTYkCIuvo2B9tPENruRcSyQJGgk5/yiGnuaIBy5NN7Zd9N2mQZFN PHPwHoCaRMSO1b3+wONSpkIZJWdmCdnBrEUzYq4AfW5k9cYBUV75Usm6bSsH4/u3 qyy5dhqAzChNxbeue6KYur5fekgk+n5u8NyPL7MFRu9IDViAletRVtihbKitZTfi JNQvMtJWVj/o+knxDrJOpPyy9gZvBW7CCChZzwgEtRaDCqyciqa0we47MgP99UJn FJXcYFjtgRJiKDYcY52TCt6pv/JXFA+qTZ0SHGW9n9AeYnZSTaNioQ4tAHSiw4nW WTvaEny29aMn3KmNUEXaaC98sQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:05 2026 by rpki-client