$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft File: PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json) Hash identifier: uj/CMCLDUDHdRAulUvIFL2YqB53hiFKSnYFXcaUTAY0= Subject key identifier: 9E:A2:D0:F3:DC:F6:96:47:38:90:71:2E:DE:FE:FC:45:92:8A:BE:40 Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft Manifest number: B8 Signing time: Sun 19 Apr 2026 06:37:24 +0000 Manifest this update: Sun 19 Apr 2026 06:37:23 +0000 Manifest next update: Sun 26 Apr 2026 06:37:23 +0000 Files and hashes: 1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: VydcwrwfHElc/HQ/SSh04a71BsHCCzuR4zqcPupsW+M=) 2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: 0V0IRbzifSTjNSAVOPWTTktiswJ9KarZ5qkmJcePTMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Validity Not Before: Apr 19 06:37:23 2026 GMT Not After : Apr 26 06:37:23 2026 GMT Subject: CN=69e47824-0a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:f2:20:68:2f:47:f3:3a:2e:30:96:51:55: 5c:85:c6:b6:81:2c:f1:d8:01:61:6f:81:13:89:2d: 0c:9e:2f:64:fa:b2:5d:35:4f:c4:ab:d6:c2:18:7a: 80:4f:d4:ee:27:57:1d:f5:84:34:28:1a:dc:46:2b: 43:5b:7a:8a:61:ac:d7:a0:46:95:48:6f:96:6f:84: d0:bb:42:4d:09:4d:de:c8:42:0e:74:88:98:bd:36: 3e:49:c0:a3:4d:11:3a:2c:96:a4:d8:cb:9f:06:18: 72:53:30:5c:e7:d0:53:98:bf:e9:45:c4:54:61:b8: 47:4b:76:6c:bb:57:f7:be:ee:f2:72:b8:9e:18:18: 39:24:94:0d:a9:d6:08:99:53:3c:da:02:d9:7a:b3: 5b:dd:8b:31:f2:03:b4:70:c0:32:c6:26:92:88:5b: c4:a6:38:e2:2d:ff:cc:aa:73:b4:0e:a0:43:b7:c3: 23:49:91:ff:9b:c4:fe:a6:aa:fa:84:9f:b6:f8:1c: d4:b4:c5:2f:c5:cc:1a:64:a0:c4:e7:ae:ce:03:7e: 4b:72:0f:7c:bd:07:72:ce:20:5d:10:f5:89:f6:35: 23:45:67:4c:e3:df:6a:83:7b:cf:1f:e5:14:07:1d: 58:5e:e4:30:7f:72:76:a1:f6:3c:ee:71:29:a0:cc: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:D0:F3:DC:F6:96:47:38:90:71:2E:DE:FE:FC:45:92:8A:BE:40 X509v3 Authority Key Identifier: keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:54:57:b2:48:7e:7d:63:c0:a5:24:fc:13:89:92:72:2c: 0e:89:b8:40:9a:3d:1a:aa:2e:18:46:a3:1d:53:e6:6b:6e:b0: 72:f0:5a:c5:5c:e2:c1:18:c5:4d:9c:c4:6a:74:85:40:47:17: c7:54:af:6f:8d:9d:ee:0a:54:22:f1:f0:9e:f2:24:18:0e:6f: 88:c0:4c:0c:ef:6e:5c:d5:89:6d:cf:9a:2a:8c:ec:d6:b0:6d: c9:47:30:5c:64:2b:f6:6c:e7:89:48:1f:07:c0:01:68:c1:d0: f8:bf:43:48:11:eb:65:2c:df:d0:81:d6:f4:71:57:4a:6d:7b: 0b:d4:54:c5:5c:64:94:0d:87:91:30:f3:17:a4:77:43:50:b9: cc:89:2a:3f:32:2d:d5:f5:66:58:23:c6:f5:71:c0:b1:41:f6: 13:8c:85:01:5d:e8:89:34:a0:8e:47:be:4a:3c:39:8e:e0:c9: 3e:f9:3f:58:ee:14:0e:8b:c4:68:93:34:46:3f:15:86:cc:3b: 4a:aa:01:8f:31:c7:cf:9f:aa:f1:4b:f4:6d:b8:a5:d5:e7:e8: 4a:b0:da:cb:50:5b:0a:f5:04:35:5b:be:7a:8f:96:f2:80:d4: bb:76:7b:7e:0c:28:e1:0b:4b:35:84:db:c9:be:b6:84:a0:99: c2:e2:f9:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjIxMTAvBgNVBAUTKDNGMzFGQjVEOEVGNDdEQUQzOEREOTJFQTFBODlFODg4 NzE0MDNBMzEwHhcNMjYwNDE5MDYzNzIzWhcNMjYwNDI2MDYzNzIzWjAYMRYwFAYD VQQDEw02OWU0NzgyNC0wYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlvyIGgvR/M6LjCWUVVchca2gSzx2AFhb4ETiS0Mni9k+rJdNU/Eq9bCGHqA T9TuJ1cd9YQ0KBrcRitDW3qKYazXoEaVSG+Wb4TQu0JNCU3eyEIOdIiYvTY+ScCj TRE6LJak2MufBhhyUzBc59BTmL/pRcRUYbhHS3Zsu1f3vu7ycrieGBg5JJQNqdYI mVM82gLZerNb3Ysx8gO0cMAyxiaSiFvEpjjiLf/MqnO0DqBDt8MjSZH/m8T+pqr6 hJ+2+BzUtMUvxcwaZKDE567OA35Lcg98vQdyziBdEPWJ9jUjRWdM499qg3vPH+UU Bx1YXuQwf3J2ofY87nEpoMyDKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6i0PPc 9pZHOJBxLt7+/EWSir5AMB8GA1UdIwQYMBaAFD8x+12O9H2tON2S6hqJ6IhxQDox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCMi9DNEYxNTQ3MjIw MTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZhMDQzWkxxR29ub2lIRkFP akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9qRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCMi9DNEYxNTQ3MjIwMTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZh MDQzWkxxR29ub2lIRkFPakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKU9UV7JIfn1jwKUk/BOJknIsDom4QJo9GqouGEajHVPma26wcvBaxVziwRjF TZzEanSFQEcXx1Svb42d7gpUIvHwnvIkGA5viMBMDO9uXNWJbc+aKozs1rBtyUcw XGQr9mzniUgfB8ABaMHQ+L9DSBHrZSzf0IHW9HFXSm17C9RUxVxklA2HkTDzF6R3 Q1C5zIkqPzIt1fVmWCPG9XHAsUH2E4yFAV3oiTSgjke+Sjw5juDJPvk/WO4UDovE aJM0Rj8Vhsw7SqoBjzHHz5+q8Uv0bbil1efoSrDay1BbCvUENVu+eo+W8oDUu3Z7 fgwo4QtLNYTbyb62hKCZwuL5Zg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:35 2026 by rpki-client