$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: w5A+DUrHVCzLiyWyl8qqASNBLc4wcbDyz1KVGkt3zYE= Subject key identifier: AF:32:3B:01:44:29:4D:B5:A4:D8:AB:A2:C7:E9:3A:B5:0E:0C:6D:4D Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 0143 Signing time: Fri 17 Apr 2026 04:59:11 +0000 Manifest this update: Fri 17 Apr 2026 04:59:10 +0000 Manifest next update: Fri 24 Apr 2026 04:59:10 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: CzhJTPqzmC2dBPX/qAz4QKA2U8To5C2ubDxLVeFXXkg=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: rQPLuDedWDyQSG967e0npTQmvnHAr1Plxeiiz+JB7Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Apr 17 04:59:10 2026 GMT Not After : Apr 24 04:59:10 2026 GMT Subject: CN=69e1be1f-bc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:f8:23:5a:8c:d2:e6:4a:8a:b7:4c:82:3c: 08:66:10:2b:50:7b:df:78:2f:c9:7d:51:ed:ed:22: 24:d6:f0:bc:96:56:e1:b8:ba:c1:4e:17:cf:4f:9c: 09:6e:89:c2:b0:cc:e0:97:38:10:47:a3:8a:f1:07: c2:6b:9d:a7:0a:35:e7:c3:53:df:8d:5d:04:8e:a7: 11:d0:c5:99:1c:80:46:d6:d2:fb:af:c8:43:52:01: cf:3c:e2:b6:48:6d:01:8d:9d:75:0e:c8:24:4c:0f: 64:d8:11:b7:be:2b:75:54:fd:91:76:44:f3:5e:07: a2:d0:6c:0c:f0:0f:f8:f7:ed:d1:28:bb:ea:77:c4: 4b:1f:cc:72:93:2b:84:91:69:6f:dd:55:71:87:e6: fb:7b:63:33:31:3d:bd:51:a8:e1:5b:53:74:0c:42: 3a:8e:d5:1e:a0:9c:47:8f:60:65:c1:51:28:3a:27: 5c:3e:e0:6c:e0:f2:50:28:56:90:5b:cf:32:4d:84: 47:dc:f0:79:b8:c6:41:63:e3:05:e0:3f:54:91:65: 5d:70:f3:87:39:30:a3:55:d4:c3:bc:ee:d8:97:77: a0:f9:6c:82:58:f0:33:96:27:b4:f4:5a:66:26:88: dd:8a:5a:cc:6e:55:a8:88:79:5d:52:60:71:25:a7: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:3B:01:44:29:4D:B5:A4:D8:AB:A2:C7:E9:3A:B5:0E:0C:6D:4D X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8c:be:f5:28:62:7a:26:fa:d1:e5:af:91:1c:54:5e:76:0d: 81:d6:40:3b:d6:07:a4:66:3d:6a:9a:24:1c:fd:e3:9c:5a:78: 33:17:af:ae:57:5d:fc:f5:d5:30:92:7f:96:ea:44:68:45:b2: 00:27:59:22:b0:b2:a5:6d:da:84:ff:17:d6:76:92:93:97:6f: 1e:87:1c:35:46:63:b0:da:d0:43:92:37:cd:4f:69:f7:6b:6c: ca:1c:48:79:9d:99:a8:ca:9d:38:d4:d5:e2:24:14:ad:c9:3b: 04:b0:40:be:21:0e:1f:06:c9:3e:3f:ed:ea:4b:6e:d1:bd:34: 0b:63:f0:f7:96:81:1d:c8:96:75:1c:83:f2:2f:33:18:fa:b0: 4b:81:0f:50:63:57:2b:e3:d2:5d:cf:8e:71:29:09:c6:6d:a6: ca:d4:cf:1a:08:7f:f4:ba:72:c4:23:f6:2b:58:e0:3a:e6:57: a0:47:4b:c4:61:a7:c9:b1:dc:a4:71:bb:a5:bb:a6:fc:60:84: b2:ef:4e:df:ee:25:69:bb:5a:56:a2:43:1c:53:3e:61:0a:f4: d3:6b:9f:16:5b:41:34:10:93:1b:35:65:1f:0b:fa:f0:0e:b6: 4f:56:fc:86:1c:9e:d2:a0:4e:eb:a3:70:87:11:03:a0:63:9e: ee:7a:04:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjYwNDE3MDQ1OTEwWhcNMjYwNDI0MDQ1OTEwWjAYMRYwFAYD VQQDEw02OWUxYmUxZi1iYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEL4I1qM0uZKirdMgjwIZhArUHvfeC/JfVHt7SIk1vC8llbhuLrBThfPT5wJ bonCsMzglzgQR6OK8QfCa52nCjXnw1PfjV0EjqcR0MWZHIBG1tL7r8hDUgHPPOK2 SG0BjZ11DsgkTA9k2BG3vit1VP2RdkTzXgei0GwM8A/49+3RKLvqd8RLH8xykyuE kWlv3VVxh+b7e2MzMT29UajhW1N0DEI6jtUeoJxHj2BlwVEoOidcPuBs4PJQKFaQ W88yTYRH3PB5uMZBY+MF4D9UkWVdcPOHOTCjVdTDvO7Yl3eg+WyCWPAzlie09Fpm JojdilrMblWoiHldUmBxJaes4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8yOwFE KU21pNirosfpOrUODG1NMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHYy+9Shieib60eWvkRxUXnYNgdZAO9YHpGY9apokHP3jnFp4Mxevrldd/PXV MJJ/lupEaEWyACdZIrCypW3ahP8X1naSk5dvHoccNUZjsNrQQ5I3zU9p92tsyhxI eZ2ZqMqdONTV4iQUrck7BLBAviEOHwbJPj/t6ktu0b00C2Pw95aBHciWdRyD8i8z GPqwS4EPUGNXK+PSXc+OcSkJxm2mytTPGgh/9LpyxCP2K1jgOuZXoEdLxGGnybHc pHG7pbum/GCEsu9O3+4labtaVqJDHFM+YQr002ufFltBNBCTGzVlHwv68A62T1b8 hhye0qBO66NwhxEDoGOe7noEfw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:10 2026 by rpki-client