$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: 4zf+IJy4vqvmJeFaur4jdU0mhgKNIMsIJtxHEsS3uHs= Subject key identifier: 56:D2:1B:73:BA:86:E4:4B:3B:33:DB:46:C7:71:03:26:91:F2:DE:7E Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0CE1 Signing time: Sat 18 Apr 2026 18:12:45 +0000 Manifest this update: Sat 18 Apr 2026 18:12:45 +0000 Manifest next update: Sat 25 Apr 2026 18:12:45 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: l14n13vMPS+a377LNXG4BDVl+eelFMRHELsvGlG+vjc=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: meOvUnI6mZjXF6pHdFTMnP3Ln7ggpvg5+mk6tSp8zNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Apr 18 18:12:45 2026 GMT Not After : Apr 25 18:12:45 2026 GMT Subject: CN=69e3c99d-8288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:f5:fe:3c:62:57:67:06:64:d3:29:d1:c2: d1:9f:48:15:00:64:ed:d5:2d:fe:0b:c5:5c:f2:18: db:ca:68:bb:34:c5:6b:04:c4:9d:7f:1b:70:b5:41: aa:d9:7d:28:e2:93:46:d5:80:b1:92:f2:82:09:4a: 07:3e:fc:5f:36:6d:24:16:c7:75:86:bf:99:53:20: 5a:7c:00:72:0e:31:7b:4f:f1:5f:4d:98:be:ba:4f: 4b:17:ad:33:60:2a:76:ca:7e:f0:50:2c:a1:3a:ca: fb:a1:d1:cb:be:2f:13:97:69:e5:74:9c:91:8e:c6: 87:94:c6:61:78:85:a0:8a:19:45:00:7c:08:e3:57: 08:4f:c1:67:0f:75:df:44:4f:fc:2a:d4:1e:03:f3: 78:64:c1:80:8a:09:d8:f5:2a:01:46:d9:d9:3c:f5: 34:78:51:f2:4a:ed:75:6c:ec:6d:90:24:5c:8b:9f: a2:90:39:8f:4d:28:4e:ec:a9:e5:c8:74:ff:d5:37: 66:db:c6:75:0e:61:5f:cf:38:84:5c:ae:36:16:83: 7a:c1:b9:cc:d2:19:b5:8a:60:2d:7a:66:84:d6:16: 6b:58:32:63:8e:0c:f8:88:9e:f7:5d:ce:4a:6c:83: 2c:cd:b6:f6:db:19:fe:69:aa:e3:f6:58:31:01:e2: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:1B:73:BA:86:E4:4B:3B:33:DB:46:C7:71:03:26:91:F2:DE:7E X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d9:e7:6c:56:14:df:e5:57:63:3b:ab:f6:81:83:af:b5:2d: f1:d7:a9:ee:ec:cb:42:2b:63:76:f4:5f:98:11:c0:7e:29:4e: 28:e0:e3:38:9c:cf:e1:0b:9f:5c:2f:bb:75:58:9c:06:54:5c: 47:02:1f:5d:8a:1d:57:ef:b0:d2:ae:97:9f:98:cd:81:75:31: 18:09:c2:31:96:9d:b5:69:15:af:09:fe:2f:be:9d:5e:1f:12: 58:1b:7f:3e:65:5c:04:c1:45:46:12:c2:d1:0f:ab:09:8d:cd: 20:6e:1d:e1:9f:74:08:b1:79:da:75:a3:59:44:5f:09:2a:0d: 80:ec:ff:92:b2:c2:a5:b8:09:dc:f6:23:b3:27:40:ad:4c:7d: a2:2d:ff:d2:bf:30:61:cc:89:33:2c:50:87:47:e1:f0:9d:c6: bd:c2:bc:29:98:0d:f1:11:d3:4e:9b:66:4d:08:1a:da:41:e8: 78:dc:09:4c:ef:93:68:ab:1e:f3:3a:00:a2:48:b8:e7:c5:ec: 81:0d:31:ef:14:8a:e6:4d:29:c6:0a:32:48:1a:26:b1:8e:8c: 29:b9:b0:29:76:ea:22:49:c3:43:5c:d9:89:23:39:cf:c8:c5: 7d:f9:70:d6:e4:9f:ad:52:e1:07:a0:b6:f4:f0:12:82:ac:03: 56:a1:a5:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjYwNDE4MTgxMjQ1WhcNMjYwNDI1MTgxMjQ1WjAYMRYwFAYD VQQDEw02OWUzYzk5ZC04Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaD1/jxiV2cGZNMp0cLRn0gVAGTt1S3+C8Vc8hjbymi7NMVrBMSdfxtwtUGq 2X0o4pNG1YCxkvKCCUoHPvxfNm0kFsd1hr+ZUyBafAByDjF7T/FfTZi+uk9LF60z YCp2yn7wUCyhOsr7odHLvi8Tl2nldJyRjsaHlMZheIWgihlFAHwI41cIT8FnD3Xf RE/8KtQeA/N4ZMGAignY9SoBRtnZPPU0eFHySu11bOxtkCRci5+ikDmPTShO7Knl yHT/1Tdm28Z1DmFfzziEXK42FoN6wbnM0hm1imAtemaE1hZrWDJjjgz4iJ73Xc5K bIMszbb22xn+aarj9lgxAeKfeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbSG3O6 huRLOzPbRsdxAyaR8t5+MB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHtnnbFYU3+VXYzur9oGDr7Ut8dep7uzLQitjdvRfmBHAfilOKODjOJzP4Quf XC+7dVicBlRcRwIfXYodV++w0q6Xn5jNgXUxGAnCMZadtWkVrwn+L76dXh8SWBt/ PmVcBMFFRhLC0Q+rCY3NIG4d4Z90CLF52nWjWURfCSoNgOz/krLCpbgJ3PYjsydA rUx9oi3/0r8wYcyJMyxQh0fh8J3GvcK8KZgN8RHTTptmTQga2kHoeNwJTO+TaKse 8zoAoki458XsgQ0x7xSK5k0pxgoySBomsY6MKbmwKXbqIknDQ1zZiSM5z8jFfflw 1uSfrVLhB6C29PASgqwDVqGltw== -----END CERTIFICATE-----Generated at Sun Apr 19 14:04:58 2026 by rpki-client