$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: hNrZs4zSmcqEYz7JhJ6rNDypJy4JTOfcB9aRADoE/Wc= Subject key identifier: 1D:4D:FC:B4:1F:F7:67:E3:A0:A0:43:BF:71:A4:91:EF:12:BF:C9:9D Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1AC7 Signing time: Thu 16 Apr 2026 16:16:04 +0000 Manifest this update: Thu 16 Apr 2026 16:16:04 +0000 Manifest next update: Thu 23 Apr 2026 16:16:04 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: TWyaR8d78FfST9mEENdH1Cd6Fc1grlX31wZ5kclKVZM=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6889 (0x1ae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Apr 16 16:16:04 2026 GMT Not After : Apr 23 16:16:04 2026 GMT Subject: CN=69e10b44-5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:df:22:25:c6:10:ec:2b:19:9f:77:0f:87: fc:15:85:a1:00:33:5c:d1:05:9c:04:de:d9:24:a8: 2b:38:4e:7e:ad:7a:42:d4:24:09:ad:4b:d3:2d:86: 78:3f:d6:59:91:1c:20:93:48:40:ba:f1:c5:16:72: 2f:48:05:ff:3d:ac:38:91:96:52:0f:1f:e6:1e:7b: 7a:33:8b:d2:c6:05:dd:01:7d:4a:27:6d:fe:e2:5d: a2:27:cb:f7:fa:ed:d5:dc:d2:6c:b0:b1:7c:11:81: a7:0f:2d:0a:6c:c8:b4:d6:59:8a:a9:ad:c8:ba:26: 59:39:69:e4:a0:1f:19:d6:d7:0c:62:9d:ce:ec:b2: 32:67:9e:f6:3b:db:67:6f:2d:33:fd:24:ee:17:ff: 60:bf:5b:68:16:ad:12:45:ea:95:96:16:95:88:bf: f1:f7:62:b4:03:80:d3:15:4b:05:e3:fd:2d:5d:cd: 47:f0:46:03:f4:bd:e0:59:b9:8b:97:19:a3:f5:04: db:80:64:6b:be:4c:f8:e5:7d:49:c6:43:f3:89:57: 77:0a:f2:ed:4e:ea:d1:f1:e1:8c:a9:40:6d:fe:b1: de:a7:ca:81:65:be:94:5b:d2:b0:29:24:a4:e3:34: e0:36:14:4d:c1:58:13:7b:41:5f:e6:96:33:0e:3c: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:FC:B4:1F:F7:67:E3:A0:A0:43:BF:71:A4:91:EF:12:BF:C9:9D X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:00:4a:c1:07:cf:25:19:5b:6e:e2:18:fa:5b:36:de:be:fa: f4:8d:06:8d:4b:94:2f:fa:de:0b:93:84:4d:a3:65:d5:a0:e4: 55:8a:ee:e2:c4:b4:ef:8d:f4:d0:96:1d:c5:51:7e:ae:96:e9: 4d:8c:c6:27:81:55:55:0b:ae:92:00:52:6a:b6:94:b7:e9:f4: 51:50:49:04:a5:cf:d2:14:df:46:e9:c7:14:f2:7f:58:f3:90: 0d:3e:d7:39:3a:12:95:95:e8:72:97:83:af:3a:60:57:6b:13: 23:70:8f:a5:98:bf:ba:6e:a6:77:de:cf:fb:60:6e:ef:62:8a: e3:50:1b:96:e4:6e:b1:5f:72:f2:b8:22:f6:b0:93:00:84:af: e2:0a:2d:dd:25:17:0d:c0:51:82:5a:68:a2:98:73:33:85:5e: 19:e6:3b:9d:f9:3d:8b:d0:b5:2d:08:9d:46:66:fc:19:6a:d8: 71:56:55:cf:f9:ac:0f:57:e7:42:c7:8a:64:bb:57:1b:83:34: c7:11:60:08:97:e8:11:1a:34:d4:01:c7:0b:e8:9b:8d:d5:90: b8:1e:85:d7:03:c3:47:12:16:e4:57:e6:56:2e:6e:64:e3:91: d9:bc:ab:76:83:45:01:0f:f0:9f:15:6b:9f:cb:fa:61:4f:22: b8:b2:18:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwNDE2MTYxNjA0WhcNMjYwNDIzMTYxNjA0WjAYMRYwFAYD VQQDEw02OWUxMGI0NC01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywnfIiXGEOwrGZ93D4f8FYWhADNc0QWcBN7ZJKgrOE5+rXpC1CQJrUvTLYZ4 P9ZZkRwgk0hAuvHFFnIvSAX/Paw4kZZSDx/mHnt6M4vSxgXdAX1KJ23+4l2iJ8v3 +u3V3NJssLF8EYGnDy0KbMi01lmKqa3IuiZZOWnkoB8Z1tcMYp3O7LIyZ572O9tn by0z/STuF/9gv1toFq0SReqVlhaViL/x92K0A4DTFUsF4/0tXc1H8EYD9L3gWbmL lxmj9QTbgGRrvkz45X1JxkPziVd3CvLtTurR8eGMqUBt/rHep8qBZb6UW9KwKSSk 4zTgNhRNwVgTe0Ff5pYzDjweoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1N/LQf 92fjoKBDv3Gkke8Sv8mdMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQwBKwQfPJRlbbuIY+ls23r769I0GjUuUL/reC5OETaNl1aDkVYru4sS07430 0JYdxVF+rpbpTYzGJ4FVVQuukgBSaraUt+n0UVBJBKXP0hTfRunHFPJ/WPOQDT7X OToSlZXocpeDrzpgV2sTI3CPpZi/um6md97P+2Bu72KK41AbluRusV9y8rgi9rCT AISv4got3SUXDcBRglpoophzM4VeGeY7nfk9i9C1LQidRmb8GWrYcVZVz/msD1fn QseKZLtXG4M0xxFgCJfoERo01AHHC+ibjdWQuB6F1wPDRxIW5FfmVi5uZOOR2byr doNFAQ/wnxVrn8v6YU8iuLIYDg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:40:50 2026 by rpki-client