$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: vbgMfMnuaNI7VPe0AprHjSePCbjng3Z/G8Z/SMKNLgA= Subject key identifier: 39:65:D0:9E:50:61:7B:C7:8E:F7:DC:C7:2A:76:4C:FC:37:B4:C1:F0 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01EC Signing time: Fri 17 Apr 2026 03:06:55 +0000 Manifest this update: Fri 17 Apr 2026 03:06:54 +0000 Manifest next update: Fri 24 Apr 2026 03:06:54 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: wJh9eGD1sNodZwXYrbcblf/fLAET3N+PfylL5LaQlJE=) 2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=) 3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Apr 17 03:06:54 2026 GMT Not After : Apr 24 03:06:54 2026 GMT Subject: CN=69e1a3cf-8c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:61:59:fc:94:9d:9e:d0:71:df:bd:71:9e: 87:7b:b8:b8:ea:fb:1e:36:24:62:00:0d:81:46:09: 4b:de:e2:88:d0:a5:6d:4a:25:52:e3:fd:cb:6a:57: fc:ec:45:2b:47:d6:87:42:e9:dd:ed:e7:6a:73:59: 6b:b7:31:d8:45:07:5a:bd:11:cd:38:5c:b6:54:e6: eb:99:3a:a6:63:b3:df:17:1b:e5:36:85:54:71:96: 58:97:7f:f7:90:59:70:76:7e:2b:c3:8c:15:76:aa: 99:30:6d:9f:ad:41:73:78:15:7f:0c:a4:2d:ef:fc: 68:cd:cc:b8:d1:9b:5c:29:01:74:7a:9d:a0:46:4d: e9:39:78:b0:44:3d:4f:0c:60:d6:ce:f9:bb:c3:9d: 4b:8e:86:d5:80:a5:c1:38:fb:03:1b:e6:f5:64:47: 65:d0:6f:0a:33:5d:ae:73:e2:b9:76:26:59:05:e5: c3:44:b4:e3:48:1a:36:39:a8:49:fc:50:e8:ba:3b: 49:01:e0:ad:53:ed:5f:d2:90:28:c5:6d:89:5e:c2: 0d:f4:99:95:0a:71:c8:a8:3f:31:60:74:7a:3c:e2: d3:e9:91:5e:c2:5b:40:8c:34:c2:be:16:9b:43:68: 5f:34:50:1a:fb:89:a6:c3:65:ac:9b:f9:f6:80:e2: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:D0:9E:50:61:7B:C7:8E:F7:DC:C7:2A:76:4C:FC:37:B4:C1:F0 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:20:16:db:bf:3b:2d:c8:88:a8:50:cf:9b:e6:a7:fc:09: 21:a6:57:fe:66:48:36:7c:29:6c:e3:2a:b4:be:3e:b4:53:30: e6:de:0f:c4:5d:1f:fa:b1:7b:85:35:ce:25:70:c4:a7:4e:5d: 92:a0:6c:30:20:5d:37:52:f5:e2:9b:70:c8:40:ac:4a:98:ce: 57:c2:96:e0:b5:d7:77:6e:cd:6f:52:5b:60:e9:82:f0:18:f9: e3:4b:32:12:c5:b3:ab:6f:c4:8c:15:20:1c:0d:45:4e:85:6a: 67:1b:c5:65:7a:1d:eb:f7:8d:1d:14:fa:52:4a:ef:92:65:4f: 8f:ef:0a:04:17:e3:5c:67:7d:53:ae:68:6e:2e:a5:7a:86:18: 00:77:8f:ff:74:a0:e0:d9:39:87:da:78:bc:8f:c3:82:c3:b2: 34:f3:d2:71:18:ff:12:0b:14:7c:f9:a1:93:95:ed:23:e8:2a: f7:54:75:04:50:01:90:d7:8d:e5:3d:95:e1:46:f0:68:4d:d3: af:87:1c:b6:09:0e:a8:94:bb:e9:53:1f:a0:1e:39:cd:d9:ab: 88:2c:a6:a6:ff:87:a2:5e:8f:05:e5:e3:48:34:bc:98:96:33: 98:54:d5:f1:ea:15:64:56:6a:12:60:81:9f:da:1e:3b:e4:03: 4d:2e:5d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwNDE3MDMwNjU0WhcNMjYwNDI0MDMwNjU0WjAYMRYwFAYD VQQDEw02OWUxYTNjZi04YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPRhWfyUnZ7Qcd+9cZ6He7i46vseNiRiAA2BRglL3uKI0KVtSiVS4/3Lalf8 7EUrR9aHQund7edqc1lrtzHYRQdavRHNOFy2VObrmTqmY7PfFxvlNoVUcZZYl3/3 kFlwdn4rw4wVdqqZMG2frUFzeBV/DKQt7/xozcy40ZtcKQF0ep2gRk3pOXiwRD1P DGDWzvm7w51LjobVgKXBOPsDG+b1ZEdl0G8KM12uc+K5diZZBeXDRLTjSBo2OahJ /FDoujtJAeCtU+1f0pAoxW2JXsIN9JmVCnHIqD8xYHR6POLT6ZFewltAjDTCvhab Q2hfNFAa+4mmw2Wsm/n2gOKzkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDll0J5Q YXvHjvfcxyp2TPw3tMHwMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlUAgFtu/Oy3IiKhQz5vmp/wJIaZX/mZINnwpbOMqtL4+tFMw5t4PxF0f+rF7 hTXOJXDEp05dkqBsMCBdN1L14ptwyECsSpjOV8KW4LXXd27Nb1JbYOmC8Bj540sy EsWzq2/EjBUgHA1FToVqZxvFZXod6/eNHRT6UkrvkmVPj+8KBBfjXGd9U65obi6l eoYYAHeP/3Sg4Nk5h9p4vI/DgsOyNPPScRj/EgsUfPmhk5XtI+gq91R1BFABkNeN 5T2V4UbwaE3Tr4cctgkOqJS76VMfoB45zdmriCympv+Hol6PBeXjSDS8mJYzmFTV 8eoVZFZqEmCBn9oeO+QDTS5dyQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:30 2026 by rpki-client