$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: adSIVHoy+eYBPZyjWx5e9sswHYz6WYDYKWgByxViYJs= Subject key identifier: 28:2D:B9:A8:68:9C:C5:10:19:1C:52:A3:03:4F:F8:80:1E:B2:B0:98 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 0120 Signing time: Sun 19 Apr 2026 05:24:31 +0000 Manifest this update: Sun 19 Apr 2026 05:24:30 +0000 Manifest next update: Sun 26 Apr 2026 05:24:30 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: ooLGy49N/PsiUA7sEH4o3OwZr8bHQ2bw+oqiA75SDcg=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Apr 19 05:24:30 2026 GMT Not After : Apr 26 05:24:30 2026 GMT Subject: CN=69e4670e-0a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:8c:45:e0:ee:2d:4f:89:27:a3:90:c9:5a: 1e:cd:73:a5:6d:3e:21:c7:81:b0:61:93:93:16:cf: 53:5f:13:f7:b5:69:97:91:62:2c:34:0e:cf:c2:c4: 2a:d2:b6:11:eb:36:52:41:e6:f2:b3:19:84:95:92: dd:f5:e1:16:bd:d4:f2:ba:98:8b:1a:f5:24:a6:64: 2f:33:99:ac:2e:fb:48:8d:e4:7a:ee:65:7e:34:fd: 31:3f:3d:2a:b4:cb:95:7e:37:be:c8:96:53:7e:18: d9:1f:94:e9:57:48:e4:ac:6d:13:e8:9a:f8:bf:ea: 3a:13:47:a6:79:9a:dd:ad:e8:95:a3:c5:fd:0a:82: e1:01:51:4e:8b:72:8a:8b:d0:bf:ef:f2:0c:fd:4f: 80:09:e4:f1:27:0e:d6:99:4d:f9:9c:c1:e0:a1:d7: 90:74:c5:6b:ea:4c:b4:ad:6f:58:ff:b6:70:a9:44: 14:82:31:da:59:bc:cc:2c:6c:98:8f:4a:0c:6c:aa: 2c:9b:97:db:ae:67:71:f6:0d:1b:06:35:70:38:24: 9b:cb:7c:34:68:62:56:1b:c1:7c:58:6a:90:cd:e8: 60:a7:73:de:93:c5:9a:b3:9b:68:4a:06:99:08:e7: 36:2b:00:7f:dc:4d:80:a2:ba:06:ed:ea:77:2a:26: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2D:B9:A8:68:9C:C5:10:19:1C:52:A3:03:4F:F8:80:1E:B2:B0:98 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:d7:f3:bf:a8:bc:8c:b0:30:a5:0b:1a:4e:29:7a:e2:93: 85:94:24:f7:7a:98:be:f9:99:cd:ce:61:69:8b:0b:6a:2b:a5: 57:e4:c1:3d:27:24:6f:c3:e1:ba:58:29:91:c2:bd:95:83:72: 56:cb:60:f5:05:bc:3a:a0:4f:3a:54:d3:97:98:5a:98:14:e8: 16:4e:ab:4f:9b:28:b3:5d:0a:b0:2d:6d:a1:fc:02:3e:b0:dd: fc:df:1e:6f:de:2d:ed:6c:6c:b0:7e:47:a8:e6:06:ea:b9:0b: 26:bc:0d:4d:62:3e:e0:6f:23:f7:34:2f:9c:7f:b4:36:d2:b4: 1d:f2:9a:d3:d4:c6:ec:21:db:97:1b:f9:9d:98:11:e8:d9:96: c3:ee:a2:20:7a:dc:f9:fa:0b:44:b7:12:e4:77:32:ae:eb:00: f8:b5:20:f7:ca:b5:b2:d8:7b:80:f5:e8:8e:ee:3e:56:1a:6e: 60:20:57:ce:07:21:44:3d:e7:d0:3e:ab:73:28:4a:4b:21:c6: 3b:e3:c8:b3:f4:9f:b6:20:0a:7b:0c:7c:f5:9e:12:23:17:5e: af:3f:91:7d:a0:64:cf:ea:99:a3:c3:71:1a:b9:15:bc:f8:1c: 2f:7c:d8:13:a2:00:15:1c:2d:84:60:2d:d5:c2:00:e8:bd:5c: c0:01:ea:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYwNDE5MDUyNDMwWhcNMjYwNDI2MDUyNDMwWjAYMRYwFAYD VQQDEw02OWU0NjcwZS0wYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfOMReDuLU+JJ6OQyVoezXOlbT4hx4GwYZOTFs9TXxP3tWmXkWIsNA7PwsQq 0rYR6zZSQebysxmElZLd9eEWvdTyupiLGvUkpmQvM5msLvtIjeR67mV+NP0xPz0q tMuVfje+yJZTfhjZH5TpV0jkrG0T6Jr4v+o6E0emeZrdreiVo8X9CoLhAVFOi3KK i9C/7/IM/U+ACeTxJw7WmU35nMHgodeQdMVr6ky0rW9Y/7ZwqUQUgjHaWbzMLGyY j0oMbKosm5fbrmdx9g0bBjVwOCSby3w0aGJWG8F8WGqQzehgp3Pek8Was5toSgaZ COc2KwB/3E2AoroG7ep3KibCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgtuaho nMUQGRxSowNP+IAesrCYMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcwbX87+ovIywMKULGk4peuKThZQk93qYvvmZzc5haYsLaiulV+TBPSckb8Ph ulgpkcK9lYNyVstg9QW8OqBPOlTTl5hamBToFk6rT5sos10KsC1tofwCPrDd/N8e b94t7WxssH5HqOYG6rkLJrwNTWI+4G8j9zQvnH+0NtK0HfKa09TG7CHblxv5nZgR 6NmWw+6iIHrc+foLRLcS5HcyrusA+LUg98q1sth7gPXoju4+VhpuYCBXzgchRD3n 0D6rcyhKSyHGO+PIs/SftiAKewx89Z4SIxderz+RfaBkz+qZo8NxGrkVvPgcL3zY E6IAFRwthGAt1cIA6L1cwAHqhg== -----END CERTIFICATE-----Generated at Sun Apr 19 08:54:30 2026 by rpki-client