$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json) Hash identifier: fQSy52MnGhlnTbFLznoGtBUHYG63hwtxu/AX7ss0B2Q= Subject key identifier: 42:E9:FE:C8:56:C0:B2:01:D1:4F:F3:84:B0:A6:F4:EB:4B:72:63:40 Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft Manifest number: 5A Signing time: Fri 17 Apr 2026 07:51:35 +0000 Manifest this update: Fri 17 Apr 2026 07:51:35 +0000 Manifest next update: Fri 24 Apr 2026 07:51:35 +0000 Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: UFuUyHYYqjy6wlObJG10UmhB89vWCJS9RsHyGxKs/N0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Validity Not Before: Apr 17 07:51:35 2026 GMT Not After : Apr 24 07:51:35 2026 GMT Subject: CN=69e1e687-e6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:20:b9:c9:39:5e:b6:e9:fe:37:2d:4f:11:67: e6:a7:a4:5e:65:21:c0:3e:8a:f5:0f:3b:2a:e6:e4: 57:3c:54:bf:5b:ca:7e:9b:d5:47:bc:db:85:6c:a3: 99:8d:55:0a:6f:f3:12:3d:cf:ed:f1:29:09:51:66: 43:b2:c9:05:a3:85:83:9e:58:a9:60:98:e5:62:e4: 58:e1:e4:5d:e2:74:d4:ca:ae:28:62:94:01:58:95: 8c:49:9a:3d:5d:d8:57:8a:41:e5:2e:52:34:b8:2d: dd:50:6a:d2:c6:69:1a:59:3e:de:d0:c9:be:ec:e7: 6d:bf:e2:92:a8:e9:85:07:b9:31:c9:95:c1:93:b0: f0:de:af:60:6b:6f:20:fb:86:2d:6c:82:17:3b:18: c8:b4:d8:5d:71:d7:8b:7b:0b:4a:43:68:94:b6:48: b0:a8:bf:3c:72:29:64:6e:0c:8b:c0:b1:ba:6e:32: 39:56:f7:07:80:b2:e8:6a:c5:90:32:01:32:65:86: dd:84:46:0d:65:74:ea:c4:9b:ac:32:5c:88:57:9d: ea:3b:ca:a0:96:68:63:de:86:51:8e:ce:7f:fe:fb: ca:26:f4:54:44:1f:64:1d:8c:ee:27:30:44:86:10: 80:7c:06:20:17:e3:f3:67:5a:d9:6a:a3:f7:65:ab: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:FE:C8:56:C0:B2:01:D1:4F:F3:84:B0:A6:F4:EB:4B:72:63:40 X509v3 Authority Key Identifier: keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:87:fe:f1:4f:79:08:21:88:b9:71:a3:c5:f3:b4:24:f2:7a: 66:85:01:2d:01:82:8e:00:e9:22:51:0b:9c:e7:e0:6a:0e:67: d2:8a:33:fa:db:33:64:e9:68:56:35:62:85:27:60:95:32:47: 99:4a:04:c1:f0:28:0e:2e:32:44:c6:67:85:e5:85:13:c5:7f: 14:a4:f5:ce:99:0a:0f:e4:53:1d:2f:ce:dc:20:5b:79:e1:62: c5:1f:d2:93:78:b9:fd:52:7b:ca:76:3f:6a:1c:af:bb:0c:22: 2c:07:b9:e8:f1:76:2f:bc:48:7e:b2:b7:69:c9:54:b4:a5:70: 27:db:3d:ed:0b:4d:96:b4:8e:e5:47:1d:30:a9:41:90:87:27: 95:9c:ed:d3:3b:bc:18:84:a7:83:26:e8:7a:75:85:35:45:3b: f7:1b:49:5d:b8:37:84:8b:28:44:78:8a:8f:27:73:2c:05:a3: 94:a7:d9:95:90:7f:30:3d:2a:cc:70:81:4d:f6:6d:b0:af:e1: f1:26:01:c5:cf:73:e0:9c:3f:99:2f:35:33:a7:72:f3:a7:d6: e4:12:af:31:34:06:95:b9:fb:7d:4d:f5:b0:66:cb:b5:5f:fc: f7:4c:62:6d:0c:d6:fb:e0:c4:d4:ad:a2:78:8d:ce:cf:b5:9b: 1f:53:8f:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTg1MzExMC8GA1UEBRMoRkQ5MTQ3QUVGNkEzMzBEMThERDRDOUNGRDg2NDJGMEVE QUE3QjkwNzAeFw0yNjA0MTcwNzUxMzVaFw0yNjA0MjQwNzUxMzVaMBgxFjAUBgNV BAMTDTY5ZTFlNjg3LWU2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfILnJOV626f43LU8RZ+anpF5lIcA+ivUPOyrm5Fc8VL9byn6b1Ue824Vso5mN VQpv8xI9z+3xKQlRZkOyyQWjhYOeWKlgmOVi5Fjh5F3idNTKrihilAFYlYxJmj1d 2FeKQeUuUjS4Ld1QatLGaRpZPt7Qyb7s522/4pKo6YUHuTHJlcGTsPDer2BrbyD7 hi1sghc7GMi02F1x14t7C0pDaJS2SLCovzxyKWRuDIvAsbpuMjlW9weAsuhqxZAy ATJlht2ERg1ldOrEm6wyXIhXneo7yqCWaGPehlGOzn/++8om9FREH2QdjO4nMESG EIB8BiAX4/NnWtlqo/dlq01fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQun+yFbA sgHRT/OEsKb060tyY0AwHwYDVR0jBBgwFoAU/ZFHrvajMNGN1MnP2GQvDtqnuQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODUzLzFBQjE1QjhDQkRC MDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1pGSHJ2YWpNTkdOMU1uUDJHUXZEdHFudVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx ODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5H TjFNblAyR1F2RHRxbnVRYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeh/7xT3kIIYi5caPF87Qk8npmhQEtAYKOAOkiUQuc5+BqDmfSijP62zNk6WhW NWKFJ2CVMkeZSgTB8CgOLjJExmeF5YUTxX8UpPXOmQoP5FMdL87cIFt54WLFH9KT eLn9UnvKdj9qHK+7DCIsB7no8XYvvEh+srdpyVS0pXAn2z3tC02WtI7lRx0wqUGQ hyeVnO3TO7wYhKeDJuh6dYU1RTv3G0lduDeEiyhEeIqPJ3MsBaOUp9mVkH8wPSrM cIFN9m2wr+HxJgHFz3PgnD+ZLzUzp3Lzp9bkEq8xNAaVuft9TfWwZsu1X/z3TGJt DNb74MTUraJ4jc7PtZsfU48t -----END CERTIFICATE-----Generated at Fri Apr 17 15:29:44 2026 by rpki-client