$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: QZ1wxqeNxevOBXgyAPtExQpnzmKsYv8zQuVQULGTLZY= Subject key identifier: 39:B5:2B:3C:AB:9E:8A:07:5F:3E:1C:F0:B3:E5:10:0A:B2:AC:62:41 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 69 Signing time: Fri 17 Apr 2026 07:37:32 +0000 Manifest this update: Fri 17 Apr 2026 07:37:31 +0000 Manifest next update: Fri 24 Apr 2026 07:37:31 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: gqoe4UJDtkmwZUT7UDnPemPo39daB93SdS7wkhhcEUM=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Apr 17 07:37:31 2026 GMT Not After : Apr 24 07:37:31 2026 GMT Subject: CN=69e1e33b-6e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:8d:75:89:26:ce:ff:ae:46:ad:9c:ad:a4: b6:8a:3b:c3:47:aa:e6:69:1b:0b:bb:9c:3a:e4:b3: 01:18:4b:24:0f:41:81:c3:32:05:6f:be:41:97:21: ba:12:0b:16:8f:7a:be:42:4b:6f:37:fe:39:c2:01: 95:43:dd:bb:fc:95:d0:ff:9a:88:7e:e4:31:4a:f5: 31:89:53:cb:70:5b:d2:a0:0f:8d:6d:f9:64:8f:16: c0:49:9f:05:5e:41:88:0e:1c:d7:50:64:93:77:32: df:59:50:76:07:8f:b3:4f:a5:c1:15:b7:82:a8:e5: 71:50:68:97:f8:85:46:5f:57:d2:03:86:6c:98:ad: 2c:e8:06:dd:90:b8:e8:6e:18:b4:42:15:01:e3:bf: cf:08:5f:ed:56:07:a3:59:02:85:88:20:51:4e:fe: 12:5c:7a:32:ad:f0:50:66:51:86:4e:72:0b:cd:56: 74:de:ea:d0:c8:29:fe:74:18:d6:2f:1e:c9:d2:f1: a1:74:88:eb:20:f6:54:e6:73:1f:10:7c:81:3c:03: 04:16:c1:5d:10:51:c4:01:d8:e3:02:3d:bd:8e:10: b6:06:e5:9a:35:c9:ee:b9:a3:87:b6:26:15:3e:9b: a1:3b:83:2a:6c:08:e2:5d:c1:3b:b4:e5:71:19:8d: 9c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B5:2B:3C:AB:9E:8A:07:5F:3E:1C:F0:B3:E5:10:0A:B2:AC:62:41 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:fe:32:6a:84:ec:29:41:0c:e6:e4:ee:3f:43:be:1b:34: 4c:d4:1e:78:74:6b:d0:17:d2:f5:c4:dc:cc:32:49:3e:22:60: 0a:49:00:67:cb:03:68:1a:07:4b:4b:49:4b:de:95:72:27:19: d4:cc:f0:c6:4d:46:27:a2:c5:71:d5:54:0c:6f:1d:55:99:87: 9f:bf:de:44:4f:7f:7a:9f:7f:19:d5:78:a8:19:90:8d:22:30: e0:fe:41:80:e1:9a:d3:7e:5b:17:df:21:d3:de:87:06:ae:f9: 2c:63:13:9f:87:9a:30:b9:83:46:0b:88:a9:83:9f:d3:6d:fb: ed:da:d8:f6:3c:d2:f0:ff:62:28:58:f8:13:1c:7d:e8:0e:e7: 0a:a1:d3:fd:cd:19:df:2f:c5:ea:51:6a:a9:42:ea:e3:2e:01: 97:1f:4b:2e:39:87:9d:63:48:d6:a1:47:45:d6:be:16:4e:86: f6:f3:fd:75:7f:bb:e5:25:3a:3c:17:30:50:ef:c0:7a:e1:8a: 18:d1:90:d9:fb:07:21:87:a6:70:ec:48:bb:f3:49:f8:2a:51: a5:10:63:47:29:11:84:f2:53:e8:1b:07:d3:4c:3a:27:94:84: 9e:92:87:39:84:34:20:a6:a1:fe:38:b5:a2:ac:ff:d3:d9:f5: 25:8c:6e:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNjA0MTcwNzM3MzFaFw0yNjA0MjQwNzM3MzFaMBgxFjAUBgNV BAMTDTY5ZTFlMzNiLTZlMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtIY11iSbO/65GrZytpLaKO8NHquZpGwu7nDrkswEYSyQPQYHDMgVvvkGXIboS CxaPer5CS283/jnCAZVD3bv8ldD/moh+5DFK9TGJU8twW9KgD41t+WSPFsBJnwVe QYgOHNdQZJN3Mt9ZUHYHj7NPpcEVt4Ko5XFQaJf4hUZfV9IDhmyYrSzoBt2QuOhu GLRCFQHjv88IX+1WB6NZAoWIIFFO/hJcejKt8FBmUYZOcgvNVnTe6tDIKf50GNYv HsnS8aF0iOsg9lTmcx8QfIE8AwQWwV0QUcQB2OMCPb2OELYG5Zo1ye65o4e2JhU+ m6E7gypsCOJdwTu05XEZjZwrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUObUrPKue igdfPhzws+UQCrKsYkEwHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAV1/4yaoTsKUEM5uTuP0O+GzRM1B54dGvQF9L1xNzMMkk+ImAKSQBnywNoGgdL S0lL3pVyJxnUzPDGTUYnosVx1VQMbx1VmYefv95ET396n38Z1XioGZCNIjDg/kGA 4ZrTflsX3yHT3ocGrvksYxOfh5owuYNGC4ipg5/Tbfvt2tj2PNLw/2IoWPgTHH3o DucKodP9zRnfL8XqUWqpQurjLgGXH0suOYedY0jWoUdF1r4WTob28/11f7vlJTo8 FzBQ78B64YoY0ZDZ+wchh6Zw7Ei780n4KlGlEGNHKRGE8lPoGwfTTDonlISekoc5 hDQgpqH+OLWirP/T2fUljG7y -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:58 2026 by rpki-client