$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: Z1y4w4FqLhEv99ullwqGEA8dcCO/gBspRCczE/07pu0= Subject key identifier: 79:CF:46:FE:72:11:B7:D9:44:21:C8:36:EE:48:10:81:A3:38:F3:88 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 6D Signing time: Fri 17 Apr 2026 07:37:54 +0000 Manifest this update: Fri 17 Apr 2026 07:37:54 +0000 Manifest next update: Fri 24 Apr 2026 07:37:54 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: f+55giFm8iwLBTpGVbJL/fP69ck39oKuFJwxcsJ1Q6M=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Apr 17 07:37:54 2026 GMT Not After : Apr 24 07:37:54 2026 GMT Subject: CN=69e1e352-8a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:8e:0f:8d:c8:82:4a:6f:bc:54:a2:10:98: 4e:db:28:de:53:a9:41:4b:4c:56:52:68:c7:22:2b: 30:91:6f:b2:8a:d2:8b:08:56:a7:a4:f2:0a:3d:88: 04:1f:b4:0a:ff:b7:67:96:c1:58:cf:87:1c:6e:f0: bb:95:d2:9e:5d:ea:1b:48:3a:08:cc:7f:7f:ff:d5: b5:61:da:9e:10:a4:43:76:b3:42:41:7a:83:42:73: 46:b6:db:18:0d:2f:62:3d:3a:70:ff:5d:9c:2c:9f: 1b:13:50:04:4d:27:26:ec:53:a7:14:f2:a5:fd:c3: 2a:fe:9f:bc:d4:31:db:a6:67:0a:12:2a:c8:69:fa: 24:34:65:81:59:bf:9f:60:b4:e9:db:35:74:68:7a: 9e:f9:31:fc:cd:e9:1e:59:92:d8:62:61:e1:24:ae: 61:5c:d1:d8:f1:af:3f:f7:05:ac:21:49:75:ae:00: 4b:cb:0f:ee:21:9b:7b:1c:71:c7:d5:aa:fc:12:d8: ee:fa:bb:2e:d6:e1:2c:95:84:97:da:b3:a9:1a:0f: 99:79:a4:fd:a9:55:cb:4e:01:fe:f0:cc:1b:78:ed: b1:b1:58:ec:c5:e1:b6:a5:7b:19:00:e4:d1:f0:7a: ef:09:ba:f5:0f:a8:24:c5:c7:01:a4:5c:4a:9f:9f: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CF:46:FE:72:11:B7:D9:44:21:C8:36:EE:48:10:81:A3:38:F3:88 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:d3:91:59:9f:57:7a:20:eb:98:98:e0:5a:1b:b6:c0:10:c6: d6:c8:73:6b:4c:2d:9e:4b:b1:e5:51:3f:69:ad:7e:fa:24:9a: 72:d9:31:64:cb:11:03:c3:cc:48:1a:18:3a:b1:7c:0e:f1:23: 0d:6e:93:12:ed:50:c1:bc:82:bf:a2:59:27:85:be:e9:6a:4f: ea:c7:c0:c5:d7:a6:17:58:b5:f3:53:d7:ea:e1:07:8b:72:23: c8:8a:61:36:2e:65:64:1b:d0:1e:ef:20:98:3c:83:b6:37:99: 8b:30:c1:15:e8:0f:ad:64:97:9a:b7:30:71:f6:3d:1c:d7:da: c1:a4:17:b4:68:bf:40:4e:6f:28:e4:47:ba:ed:75:3d:48:fc: d4:b0:a0:2e:7a:17:b0:79:41:91:26:dd:da:25:06:79:de:16: b7:d0:76:24:f9:dc:d9:75:bb:69:da:75:6a:aa:b3:fb:91:26: 26:02:cd:9f:36:28:48:45:78:fd:58:4e:7f:36:0f:38:44:58: 2b:4a:98:47:1f:c5:3d:bd:24:e8:bf:53:78:e7:65:25:ce:68: a3:0c:43:4e:80:a3:31:2d:f2:fb:38:24:96:fa:ee:b4:c2:10: 28:c9:c6:6a:2c:66:dc:94:18:ae:4d:f3:a8:dd:12:56:ec:6b: be:ae:e5:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNjA0MTcwNzM3NTRaFw0yNjA0MjQwNzM3NTRaMBgxFjAUBgNV BAMTDTY5ZTFlMzUyLThhNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvn44PjciCSm+8VKIQmE7bKN5TqUFLTFZSaMciKzCRb7KK0osIVqek8go9iAQf tAr/t2eWwVjPhxxu8LuV0p5d6htIOgjMf3//1bVh2p4QpEN2s0JBeoNCc0a22xgN L2I9OnD/XZwsnxsTUARNJybsU6cU8qX9wyr+n7zUMdumZwoSKshp+iQ0ZYFZv59g tOnbNXRoep75MfzN6R5ZkthiYeEkrmFc0djxrz/3BawhSXWuAEvLD+4hm3scccfV qvwS2O76uy7W4SyVhJfas6kaD5l5pP2pVctOAf7wzBt47bGxWOzF4balexkA5NHw eu8JuvUPqCTFxwGkXEqfnwIpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUec9G/nIR t9lEIcg27kgQgaM484gwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJ05FZn1d6IOuYmOBaG7bAEMbWyHNrTC2eS7HlUT9prX76JJpy2TFkyxEDw8xI Ghg6sXwO8SMNbpMS7VDBvIK/olknhb7pak/qx8DF16YXWLXzU9fq4QeLciPIimE2 LmVkG9Ae7yCYPIO2N5mLMMEV6A+tZJeatzBx9j0c19rBpBe0aL9ATm8o5Ee67XU9 SPzUsKAueheweUGRJt3aJQZ53ha30HYk+dzZdbtp2nVqqrP7kSYmAs2fNihIRXj9 WE5/Ng84RFgrSphHH8U9vSTov1N452UlzmijDENOgKMxLfL7OCSW+u60whAoycZq LGbclBiuTfOo3RJW7Gu+ruXv -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:40 2026 by rpki-client