$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: 35OrtuRwoXza+LFR91oOVR1uzQYkGsHXTS0ViiFbYR4= Subject key identifier: 8C:04:B8:AD:00:36:F6:A0:71:FA:AA:45:E7:EA:11:1F:90:AD:04:FC Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: 013D Signing time: Thu 16 Apr 2026 22:27:40 +0000 Manifest this update: Thu 16 Apr 2026 22:27:38 +0000 Manifest next update: Thu 23 Apr 2026 22:27:38 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: SJ03JSZgcyn3CAGfnYrmduXcUJAS2+l14ndd0lkSn0I=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Apr 16 22:27:38 2026 GMT Not After : Apr 23 22:27:38 2026 GMT Subject: CN=69e1625b-f1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:dc:d1:24:4f:4d:08:63:63:e2:1d:a8:e1: e6:34:bb:d0:0f:47:4c:99:de:34:d6:5d:4d:65:89: e6:e6:9c:77:a4:a6:b5:17:fa:9b:f8:cf:26:a3:a5: 1e:8a:de:41:2a:50:cf:e5:e6:86:98:ae:62:3a:ca: 65:bc:e7:9c:19:1d:e8:b9:d6:91:e2:ea:c4:ed:50: 17:c5:04:6f:ee:d8:d1:12:40:74:03:cd:8d:71:0c: 81:f5:bc:ed:7e:53:8e:10:6f:ac:33:9f:b7:37:7f: ba:aa:90:b0:74:b7:cd:6f:34:e0:bb:7e:3a:f2:f9: bb:8f:fb:b3:42:a0:e7:da:99:ef:07:c2:04:46:d3: 7c:09:71:84:16:55:c5:14:84:0f:da:71:df:62:00: 6a:c1:67:fc:25:0c:70:ef:61:b9:d3:91:20:8c:8f: 59:b8:fa:79:ec:37:15:31:85:02:f3:60:d2:55:1f: 61:7b:70:f8:a3:76:d3:5d:fe:d9:f6:9e:06:11:86: f4:57:47:d0:70:46:1f:8d:51:cf:2c:00:cf:73:60: 86:07:0f:e3:fb:b4:59:59:5d:61:11:30:cc:6d:0f: 1a:82:8a:7b:af:22:c2:4a:c9:2d:d4:40:99:3d:c8: 97:0e:17:7a:f0:ed:81:2b:af:89:bf:23:1d:56:18: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:B8:AD:00:36:F6:A0:71:FA:AA:45:E7:EA:11:1F:90:AD:04:FC X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:1f:01:3f:bf:9f:d6:50:83:b8:90:aa:cf:fb:a4:1b:3d: 86:bb:39:4a:5c:a6:02:79:3b:5f:59:0a:1a:fc:35:cd:ef:e4: e2:35:e4:30:7e:f2:20:bd:f7:17:3d:ff:82:98:52:8b:8a:e4: 61:16:8a:b4:23:ce:42:d4:1e:e2:b7:30:10:53:f4:99:f0:1d: ad:dd:93:a9:7d:67:04:30:46:b2:66:bc:cc:60:a9:9b:be:6f: da:94:f3:dc:bd:af:4c:df:71:b2:33:13:bc:cc:46:c6:ea:7b: 9c:38:1b:13:f4:84:21:1a:d0:b4:75:75:ff:e8:b3:26:bc:fd: f9:38:07:b4:af:65:dd:01:b1:7e:d2:ef:91:90:95:ae:1a:15: 66:92:03:6b:cb:c3:17:28:49:55:85:7a:c6:f8:0d:69:dc:7d: c3:f8:d8:90:3d:c1:5b:09:b7:18:a2:1d:c3:56:26:01:54:88: 36:f1:ad:cc:6c:93:7f:a0:05:56:b2:24:a4:96:7b:53:80:4e: 26:a2:26:12:e5:b1:29:9d:7f:4c:e6:cf:fd:38:15:f8:c3:27: 0b:3c:81:cd:ce:f6:a9:15:90:6a:c6:a4:44:ac:5c:d7:8d:5c: 0e:7b:82:04:d4:f6:b5:64:55:dc:1e:dc:05:fd:c7:f1:73:46: 76:fa:a5:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjYwNDE2MjIyNzM4WhcNMjYwNDIzMjIyNzM4WjAYMRYwFAYD VQQDEw02OWUxNjI1Yi1mMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK3c0SRPTQhjY+IdqOHmNLvQD0dMmd401l1NZYnm5px3pKa1F/qb+M8mo6Ue it5BKlDP5eaGmK5iOsplvOecGR3oudaR4urE7VAXxQRv7tjREkB0A82NcQyB9bzt flOOEG+sM5+3N3+6qpCwdLfNbzTgu3468vm7j/uzQqDn2pnvB8IERtN8CXGEFlXF FIQP2nHfYgBqwWf8JQxw72G505EgjI9ZuPp57DcVMYUC82DSVR9he3D4o3bTXf7Z 9p4GEYb0V0fQcEYfjVHPLADPc2CGBw/j+7RZWV1hETDMbQ8agop7ryLCSskt1ECZ PciXDhd68O2BK6+JvyMdVhhrOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwEuK0A NvagcfqqRefqER+QrQT8MB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGm8fAT+/n9ZQg7iQqs/7pBs9hrs5SlymAnk7X1kKGvw1ze/k4jXkMH7yIL33 Fz3/gphSi4rkYRaKtCPOQtQe4rcwEFP0mfAdrd2TqX1nBDBGsma8zGCpm75v2pTz 3L2vTN9xsjMTvMxGxup7nDgbE/SEIRrQtHV1/+izJrz9+TgHtK9l3QGxftLvkZCV rhoVZpIDa8vDFyhJVYV6xvgNadx9w/jYkD3BWwm3GKIdw1YmAVSINvGtzGyTf6AF VrIkpJZ7U4BOJqImEuWxKZ1/TObP/TgV+MMnCzyBzc72qRWQasakRKxc141cDnuC BNT2tWRV3B7cBf3H8XNGdvqlbw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:48 2026 by rpki-client