$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: aQXPm5q/stvLy+jr1ZZi8UqlR3l43t9tVMTG11DO+ig= Subject key identifier: 71:B9:95:D8:41:91:42:B3:E8:AB:5D:46:4B:3D:28:19:69:B0:44:B9 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0EDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0ECE Signing time: Thu 16 Apr 2026 17:35:23 +0000 Manifest this update: Thu 16 Apr 2026 17:35:23 +0000 Manifest next update: Thu 23 Apr 2026 17:35:23 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: 8McyOeO8Js5NC9nL7vW49jyrdpbrmHj56C22vIDO/cI=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3805 (0xedd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Apr 16 17:35:23 2026 GMT Not After : Apr 23 17:35:23 2026 GMT Subject: CN=69e11ddb-c91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cb:78:74:fe:4a:67:0f:b7:56:aa:96:13:04: 6b:73:e5:5f:78:03:0f:5c:86:07:2d:14:b7:ce:f2: 84:59:65:d1:14:df:5c:30:04:d7:c0:ac:4d:d2:c5: ff:05:e5:a5:5f:ba:b9:c7:e7:e4:d0:7a:78:25:d8: 29:90:da:08:93:91:e7:b0:6e:f2:18:3c:68:7f:67: 2d:2c:87:9a:fd:4a:11:c6:d6:ed:20:35:4b:58:d9: 6e:c2:2d:75:47:52:a0:c8:b5:43:aa:ee:a6:87:da: 76:39:70:4d:f7:9f:1e:b9:ea:2c:a7:8c:ed:ee:c5: 54:7d:0d:05:84:b4:c3:92:1d:35:e0:2e:a9:e6:77: 76:47:91:6a:8b:5f:2c:a5:07:82:bc:e9:2a:43:e0: f4:18:11:d7:99:14:2b:d1:0a:90:59:40:40:76:6b: 23:9d:ae:07:06:20:d1:20:9f:d0:8e:9c:74:31:f1: a2:fb:0f:4a:30:a7:18:85:87:e7:b5:b8:fd:5c:d9: e9:38:11:bf:ac:68:bb:c8:42:97:95:df:fd:1e:9d: 3d:12:c3:af:f2:ff:08:cf:29:fd:e9:f5:29:0c:37: a2:19:e4:74:46:0a:b3:dd:99:7f:ff:2b:4e:ca:6b: b6:00:24:6b:f3:a6:a1:a7:fe:26:7b:0f:c2:b1:ff: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:95:D8:41:91:42:B3:E8:AB:5D:46:4B:3D:28:19:69:B0:44:B9 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a2:09:2c:48:d2:3a:70:37:32:f2:82:20:1b:5e:19:94:64: 0f:f9:ea:f7:dc:4e:b9:26:35:b6:e9:b5:c1:d2:7b:c9:3e:18: 42:04:06:1a:25:4c:8f:47:54:c9:11:a5:54:9c:41:a4:f3:c5: 9f:af:28:ed:ca:6a:90:8c:22:55:47:31:66:55:ea:4a:e5:94: 51:80:6c:2d:42:26:33:34:e5:6a:37:9e:4f:94:cd:54:7f:90: 64:0d:59:14:1f:21:da:9d:8a:e3:a2:42:20:95:fa:d5:62:fa: 7d:8f:6d:00:a1:2f:70:fe:56:bd:b1:b7:4f:d6:27:93:c3:70: c9:c7:f2:6a:50:e5:aa:f0:7f:10:fb:df:be:7d:9a:d0:14:fb: df:c3:16:bd:7c:c9:e6:4d:30:43:67:fc:f5:c0:e5:a9:28:8e: 9f:38:9a:ed:9c:a3:95:15:19:4e:2d:3e:25:01:83:55:e2:ff: 52:64:28:0d:0f:74:dd:9d:10:fa:66:10:b9:9e:56:30:d4:a5: 48:cb:70:e4:7f:30:b8:dc:3f:a3:35:3f:25:1a:51:b3:e5:0f: 61:3a:ca:75:4f:50:de:35:c1:1c:a6:fe:c9:fc:a4:63:4e:0e: 26:ac:dd:0f:7b:ac:49:11:1c:b8:f9:98:1d:20:c3:43:68:7c: cc:a1:db:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjYwNDE2MTczNTIzWhcNMjYwNDIzMTczNTIzWjAYMRYwFAYD VQQDEw02OWUxMWRkYi1jOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4st4dP5KZw+3VqqWEwRrc+VfeAMPXIYHLRS3zvKEWWXRFN9cMATXwKxN0sX/ BeWlX7q5x+fk0Hp4JdgpkNoIk5HnsG7yGDxof2ctLIea/UoRxtbtIDVLWNluwi11 R1KgyLVDqu6mh9p2OXBN958eueosp4zt7sVUfQ0FhLTDkh014C6p5nd2R5Fqi18s pQeCvOkqQ+D0GBHXmRQr0QqQWUBAdmsjna4HBiDRIJ/Qjpx0MfGi+w9KMKcYhYfn tbj9XNnpOBG/rGi7yEKXld/9Hp09EsOv8v8Izyn96fUpDDeiGeR0Rgqz3Zl//ytO ymu2ACRr86ahp/4mew/Csf+/wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHG5ldhB kUKz6KtdRks9KBlpsES5MB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKIJLEjSOnA3MvKCIBteGZRkD/nq99xOuSY1tum1wdJ7yT4YQgQGGiVMj0dU yRGlVJxBpPPFn68o7cpqkIwiVUcxZlXqSuWUUYBsLUImMzTlajeeT5TNVH+QZA1Z FB8h2p2K46JCIJX61WL6fY9tAKEvcP5WvbG3T9Ynk8NwycfyalDlqvB/EPvfvn2a 0BT738MWvXzJ5k0wQ2f89cDlqSiOnzia7ZyjlRUZTi0+JQGDVeL/UmQoDQ903Z0Q +mYQuZ5WMNSlSMtw5H8wuNw/ozU/JRpRs+UPYTrKdU9Q3jXBHKb+yfykY04OJqzd D3usSREcuPmYHSDDQ2h8zKHb0A== -----END CERTIFICATE-----Generated at Fri Apr 17 12:50:47 2026 by rpki-client