$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: A7m25cKLFqLBwVV5T9FqOUZewBzEdrfyrZOe6Q4oYEs= Subject key identifier: 00:00:8F:58:ED:BE:22:B1:14:8A:6F:6F:4A:EA:AA:CE:63:46:AB:70 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 021D Signing time: Fri 17 Apr 2026 02:38:17 +0000 Manifest this update: Fri 17 Apr 2026 02:38:17 +0000 Manifest next update: Fri 24 Apr 2026 02:38:17 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: nRZyH6/YojJNBH2PJrAdn1i/+8WH1pUJYPLve/RuEK8=) 2: 534DAC6AC0B811F099CB7061C4F9AE02.roa (hash: 9I7e8jbUM0QMEQjirieUi3zNB4x8nXGmvPV9S7Ro3FA=) 3: 13208484C09311F0A7D8232BC4F9AE02.roa (hash: zlr6UQBMUyvgAlC88jG9jHU5lVu59fheFcyUu65KIAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Apr 17 02:38:17 2026 GMT Not After : Apr 24 02:38:17 2026 GMT Subject: CN=69e19d19-54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:3b:c3:9c:4f:b0:da:df:33:b4:11:85:18: b2:45:43:aa:c1:ed:ee:34:c5:42:46:02:b7:90:e0: b5:6c:0c:e5:7f:d9:33:c8:71:05:8a:40:94:81:4f: b4:ec:92:00:c9:8c:95:72:80:31:b3:61:6e:03:19: ed:7d:6f:e1:12:bb:5f:b3:d0:6b:51:5b:7b:44:32: 79:05:92:b8:92:c2:c6:6d:5b:bf:5b:ab:a2:49:3a: 10:4a:74:c4:48:8b:32:28:d8:99:ac:fc:cd:b9:9d: fb:49:79:f7:d4:ef:48:44:19:0f:35:5a:be:de:10: 0f:c2:ee:89:19:9f:20:a1:c9:b2:e9:1a:af:24:a5: 91:73:85:31:4d:92:ac:40:40:72:69:44:bf:1b:d6: 45:00:42:5c:ff:4f:88:61:9a:73:33:26:bc:3f:96: cf:80:08:d9:bd:db:a4:9b:34:d2:70:c4:2f:b2:71: fb:de:94:f8:5e:c9:5a:e7:11:93:c1:d3:bf:d7:09: ac:d4:a7:74:f3:44:0e:f0:2d:57:cd:ed:c8:f0:68: dd:69:eb:83:20:ea:07:fc:d6:5e:71:b7:39:03:27: 9f:df:0a:c3:b8:4f:17:42:67:bd:9c:5e:ad:d0:3d: ae:56:5d:72:f5:52:b9:2d:58:12:49:ff:25:36:af: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:00:8F:58:ED:BE:22:B1:14:8A:6F:6F:4A:EA:AA:CE:63:46:AB:70 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:6a:07:e9:b1:20:9f:70:39:90:a5:66:89:e9:4e:f2:e6:67: e0:a5:d5:1f:cf:c9:51:00:11:9e:e1:73:26:27:a9:a5:09:7d: c1:ea:73:b8:3b:83:12:d6:4e:42:24:bf:4b:77:d4:b1:41:71: 36:3f:b1:fe:8d:6e:84:0b:1a:8f:1c:b5:28:8d:66:55:30:4c: 09:86:57:df:d6:5a:dc:a1:5b:eb:19:50:d1:6b:fe:80:81:6f: d3:75:ba:09:0c:24:62:23:bb:8c:68:15:2f:02:f2:21:21:0e: 9e:64:38:c9:b9:52:92:6f:4b:9c:d0:3f:0f:0f:61:eb:c3:9f: c9:8a:8c:e3:ce:54:0f:e1:6a:06:9f:1b:c2:6e:39:87:97:b5: 5c:65:a5:ac:eb:17:12:02:01:a8:76:5c:8d:51:ea:a3:1f:5f: eb:80:66:6a:61:6b:19:dc:57:90:32:03:ab:8e:83:7a:b5:1c: b5:f9:4c:fc:90:5d:08:e0:c3:e4:39:8a:b6:1b:85:4a:da:23: 62:24:53:aa:c8:4e:09:e0:13:3c:f1:99:07:b8:00:69:14:2d: 3c:d7:21:73:43:fa:ad:fd:ce:a8:ef:69:20:f0:4c:64:6c:57: bf:41:16:5f:46:3e:a1:b4:9b:5f:1d:8f:ce:9f:cb:90:a0:8e: c1:60:ea:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwNDE3MDIzODE3WhcNMjYwNDI0MDIzODE3WjAYMRYwFAYD VQQDEw02OWUxOWQxOS01NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbU7w5xPsNrfM7QRhRiyRUOqwe3uNMVCRgK3kOC1bAzlf9kzyHEFikCUgU+0 7JIAyYyVcoAxs2FuAxntfW/hErtfs9BrUVt7RDJ5BZK4ksLGbVu/W6uiSToQSnTE SIsyKNiZrPzNuZ37SXn31O9IRBkPNVq+3hAPwu6JGZ8gocmy6RqvJKWRc4UxTZKs QEByaUS/G9ZFAEJc/0+IYZpzMya8P5bPgAjZvdukmzTScMQvsnH73pT4Xsla5xGT wdO/1wms1Kd080QO8C1Xze3I8GjdaeuDIOoH/NZecbc5Ayef3wrDuE8XQme9nF6t 0D2uVl1y9VK5LVgSSf8lNq/8LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAAj1jt viKxFIpvb0rqqs5jRqtwMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx2oH6bEgn3A5kKVmielO8uZn4KXVH8/JUQARnuFzJieppQl9wepzuDuDEtZO QiS/S3fUsUFxNj+x/o1uhAsajxy1KI1mVTBMCYZX39Za3KFb6xlQ0Wv+gIFv03W6 CQwkYiO7jGgVLwLyISEOnmQ4yblSkm9LnNA/Dw9h68OfyYqM485UD+FqBp8bwm45 h5e1XGWlrOsXEgIBqHZcjVHqox9f64BmamFrGdxXkDIDq46DerUctflM/JBdCODD 5DmKthuFStojYiRTqshOCeATPPGZB7gAaRQtPNchc0P6rf3OqO9pIPBMZGxXv0EW X0Y+obSbXx2Pzp/LkKCOwWDqCQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:22 2026 by rpki-client