$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: W62e8CQmrI7FSag18XWHsRQ5aHgsddQkxf7OmirXnoI= Subject key identifier: 0A:E9:31:3D:B9:C8:7D:BE:B9:4A:A4:E3:F2:8F:50:05:33:58:65:21 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: 0147 Signing time: Fri 17 Apr 2026 04:57:21 +0000 Manifest this update: Fri 17 Apr 2026 04:57:21 +0000 Manifest next update: Fri 24 Apr 2026 04:57:21 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: AIpe8eESHQlMxFQhXCtvYF1LpNzNkJOmiQBMh4iMDkw=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: 5VZ6JaxYHvz/jnyWG4tULUFalKqQD2n3eSx0z0cU+H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Apr 17 04:57:21 2026 GMT Not After : Apr 24 04:57:21 2026 GMT Subject: CN=69e1bdb1-4317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:10:9f:6d:cc:b0:aa:f4:56:d7:e5:8b:ed: 35:93:7f:c5:90:3e:9d:f0:5d:8f:fc:e4:d6:59:87: 98:5b:e1:0c:c5:37:70:8d:34:8a:77:13:bc:ae:28: d3:6d:e8:f3:ce:50:69:ea:0c:dc:dc:07:ae:94:25: 24:a4:ad:be:28:b0:9b:c0:39:50:c7:f3:b9:61:f3: e1:0c:02:36:43:d5:36:23:d7:41:33:94:48:a4:82: a1:a3:56:e1:fd:06:6f:d3:91:cc:d7:a3:e4:03:71: 84:79:4b:ef:29:20:8e:83:2d:3d:1d:1f:1e:f3:d7: e3:fe:f2:4a:19:f3:92:2d:47:61:31:97:67:f7:6d: a9:4e:cb:da:e7:33:db:98:a5:a0:5f:65:63:29:86: d8:1f:56:a4:f9:ab:e1:b1:f6:6b:0b:c1:4d:80:0f: d5:f2:fb:68:ca:97:b0:81:1b:53:92:4c:ae:1c:33: 50:a8:5a:c1:23:8c:46:b2:6d:87:20:98:7e:97:a3: 39:7d:9d:70:00:27:6a:b1:e6:eb:0a:f3:d3:49:df: 9e:1c:a6:48:dc:35:35:7d:99:ef:f5:50:7b:60:e4: d7:c5:3a:e7:19:7e:84:45:4b:f1:4e:ea:15:87:bd: e1:1d:a2:30:76:7e:c9:f8:8a:9f:ee:8d:a9:df:f0: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E9:31:3D:B9:C8:7D:BE:B9:4A:A4:E3:F2:8F:50:05:33:58:65:21 X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:95:a8:0c:61:13:94:20:cd:59:a9:85:02:7e:5c:0f:d2:de: 63:26:66:44:f2:30:60:ab:fc:ac:30:23:5c:56:c5:fb:3d:03: 6a:c4:e1:92:70:a2:64:86:02:ec:eb:22:bb:0b:cf:20:a9:5d: e8:32:66:88:fa:c1:81:c2:e1:b6:96:c9:62:8c:66:1b:f4:54: 5e:3a:89:32:cf:02:b4:35:8e:3e:c2:b2:95:3a:2a:7e:6f:ee: 47:a9:9f:1f:54:60:5e:da:4a:bc:3a:79:ad:95:76:76:7f:15: 2e:c6:7a:ff:37:a3:b3:5c:f3:c1:58:a5:7f:56:1a:32:e3:ce: 24:88:98:da:ad:d1:34:31:f5:6e:cb:63:de:b6:48:f6:9f:f0: f4:64:b9:ef:3e:ac:8c:7e:70:2c:75:f8:8b:c5:b4:ff:71:69: 5b:17:d1:fc:4e:67:9b:c3:06:1b:cb:d1:05:ec:0f:e1:6b:1d: 20:ae:32:7b:2e:87:bd:5c:41:d3:59:ce:7b:d1:3d:a6:5d:dd: 65:ac:5d:3b:1d:fd:68:cc:b4:da:f2:11:8b:eb:53:e1:9d:b6: 15:9a:dd:60:a7:d3:0f:bf:1b:e0:f1:d9:76:51:ec:78:61:92: 1a:55:af:16:05:b3:97:78:3a:bf:18:dc:2e:f4:7b:38:24:73: d2:00:fd:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjYwNDE3MDQ1NzIxWhcNMjYwNDI0MDQ1NzIxWjAYMRYwFAYD VQQDEw02OWUxYmRiMS00MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB4Qn23MsKr0Vtfli+01k3/FkD6d8F2P/OTWWYeYW+EMxTdwjTSKdxO8rijT bejzzlBp6gzc3AeulCUkpK2+KLCbwDlQx/O5YfPhDAI2Q9U2I9dBM5RIpIKho1bh /QZv05HM16PkA3GEeUvvKSCOgy09HR8e89fj/vJKGfOSLUdhMZdn922pTsva5zPb mKWgX2VjKYbYH1ak+avhsfZrC8FNgA/V8vtoypewgRtTkkyuHDNQqFrBI4xGsm2H IJh+l6M5fZ1wACdqsebrCvPTSd+eHKZI3DU1fZnv9VB7YOTXxTrnGX6ERUvxTuoV h73hHaIwdn7J+Iqf7o2p3/A0wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArpMT25 yH2+uUqk4/KPUAUzWGUhMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpWoDGETlCDNWamFAn5cD9LeYyZmRPIwYKv8rDAjXFbF+z0DasThknCiZIYC 7OsiuwvPIKld6DJmiPrBgcLhtpbJYoxmG/RUXjqJMs8CtDWOPsKylToqfm/uR6mf H1RgXtpKvDp5rZV2dn8VLsZ6/zejs1zzwVilf1YaMuPOJIiY2q3RNDH1bstj3rZI 9p/w9GS57z6sjH5wLHX4i8W0/3FpWxfR/E5nm8MGG8vRBewP4WsdIK4yey6HvVxB 01nOe9E9pl3dZaxdOx39aMy02vIRi+tT4Z22FZrdYKfTD78b4PHZdlHseGGSGlWv FgWzl3g6vxjcLvR7OCRz0gD9NA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:03:36 2026 by rpki-client