$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: y8JA+A1S8PBGoL7AIuQHNOUbslxFbn/AJMFeOEvxgk0= Subject key identifier: D8:F9:6B:FF:62:4B:10:58:51:00:61:D4:F5:A1:AD:1C:A7:0C:84:2C Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 034F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02C9 Signing time: Fri 17 Apr 2026 01:26:20 +0000 Manifest this update: Fri 17 Apr 2026 01:26:19 +0000 Manifest next update: Fri 24 Apr 2026 01:26:19 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: Vt7+Y+linfpiXemVLo+TG1nAacgQPnVrxC2ViZDc16o=) 2: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 3: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) 4: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) 5: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) 6: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 7: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) 8: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Apr 17 01:26:19 2026 GMT Not After : Apr 24 01:26:19 2026 GMT Subject: CN=69e18c3c-bde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:3a:8e:2f:15:06:4f:fe:13:7c:89:e6:1c: 27:5d:01:96:4b:87:17:4d:2c:c5:06:c7:47:23:ef: 86:cb:d7:88:9e:67:b8:0a:e0:87:57:ec:f7:22:b8: 47:e8:2b:a7:c5:3f:8d:46:46:29:9e:96:3e:b1:da: e4:da:f4:5b:f8:33:a6:d2:e1:99:62:7f:70:42:3d: 7a:15:19:72:7c:22:c9:21:eb:69:73:d7:0e:ff:3b: a0:5f:12:d4:89:67:dd:53:1c:7e:d8:6a:18:e3:a6: 66:c5:2c:9c:74:4a:61:1b:ed:db:65:22:f3:d2:9b: 2c:46:6c:4b:13:a8:0d:93:55:37:44:00:39:35:f7: 40:52:aa:21:73:82:f0:48:56:87:34:79:4d:fe:ce: f3:9f:51:37:39:44:56:4e:40:a6:d2:b0:a9:10:5a: 2f:a6:13:0f:62:99:4e:15:52:64:35:8e:5b:f1:9a: 9c:a9:00:a7:4b:41:92:c6:06:7b:f7:e3:b1:1d:fb: 83:2c:d7:0f:3b:a1:9a:ce:2f:5c:36:d7:16:55:c8: df:e5:62:2e:ba:a4:41:82:e0:ac:ee:d1:22:c9:da: af:02:d3:a7:03:a0:6a:b1:c9:4e:91:c0:09:09:56: c1:da:29:be:c1:76:08:31:50:13:62:e4:d1:13:9a: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:6B:FF:62:4B:10:58:51:00:61:D4:F5:A1:AD:1C:A7:0C:84:2C X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4c:28:44:eb:cb:f2:0e:62:ce:af:6b:14:d6:c9:74:6d:23: 69:37:7d:5b:b6:16:a9:95:a3:93:c2:3c:80:82:0d:88:c4:9f: 24:53:4e:00:2c:bd:c9:a4:4a:8a:73:b5:b5:bb:46:b3:fa:8c: 53:23:32:c6:b4:a4:0f:0c:26:59:87:93:a4:ff:14:eb:0d:b6: e4:92:ac:12:05:76:ae:cf:4e:76:cc:a9:18:83:f7:a2:63:c3: 84:3f:6c:a4:79:4b:c7:70:ea:d7:98:e3:47:6b:bb:a4:f8:b9: 27:ec:2e:7e:67:f4:8e:9f:7f:67:bc:5e:08:15:0f:e8:71:b6: 3b:e3:9c:0f:0c:5e:79:d4:be:74:d4:af:db:ea:e6:d9:41:03: 43:08:a4:c6:06:c6:76:3d:e8:d4:35:29:0e:22:86:26:da:95: 75:6a:07:b5:71:63:14:46:8a:ad:b5:a2:02:14:a0:96:14:5b: 7e:48:3c:2f:c5:19:b4:8d:45:7c:4d:a2:b7:8e:55:a2:75:90: ad:82:a4:53:18:ed:6c:e2:5e:02:16:d9:9e:21:01:7b:5e:61: b3:59:f6:36:71:3e:89:09:e1:d4:1a:36:3a:1f:c8:81:d1:b9: 1e:8c:ac:62:86:f0:f6:c0:5e:b0:ef:cf:4b:be:39:93:e1:64: 54:da:ed:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNDE3MDEyNjE5WhcNMjYwNDI0MDEyNjE5WjAYMRYwFAYD VQQDEw02OWUxOGMzYy1iZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC06ji8VBk/+E3yJ5hwnXQGWS4cXTSzFBsdHI++Gy9eInme4CuCHV+z3IrhH 6CunxT+NRkYpnpY+sdrk2vRb+DOm0uGZYn9wQj16FRlyfCLJIetpc9cO/zugXxLU iWfdUxx+2GoY46ZmxSycdEphG+3bZSLz0pssRmxLE6gNk1U3RAA5NfdAUqohc4Lw SFaHNHlN/s7zn1E3OURWTkCm0rCpEFovphMPYplOFVJkNY5b8ZqcqQCnS0GSxgZ7 9+OxHfuDLNcPO6Gazi9cNtcWVcjf5WIuuqRBguCs7tEiydqvAtOnA6BqsclOkcAJ CVbB2im+wXYIMVATYuTRE5om9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNj5a/9i SxBYUQBh1PWhrRynDIQsMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOEwoROvL8g5izq9rFNbJdG0jaTd9W7YWqZWjk8I8gIINiMSfJFNOACy9yaRK inO1tbtGs/qMUyMyxrSkDwwmWYeTpP8U6w225JKsEgV2rs9OdsypGIP3omPDhD9s pHlLx3Dq15jjR2u7pPi5J+wufmf0jp9/Z7xeCBUP6HG2O+OcDwxeedS+dNSv2+rm 2UEDQwikxgbGdj3o1DUpDiKGJtqVdWoHtXFjFEaKrbWiAhSglhRbfkg8L8UZtI1F fE2it45VonWQrYKkUxjtbOJeAhbZniEBe15hs1n2NnE+iQnh1Bo2Oh/IgdG5Hoys Yobw9sBesO/PS745k+FkVNrt/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 07:12:29 2026 by rpki-client