$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: fy82fxAjt1rn4mZEVBo0ltkl0skiYP4M5F99Iamh8ks= Subject key identifier: 3C:E6:34:54:B5:23:A2:79:F9:07:D2:FB:24:8C:DA:80:D9:7B:43:D7 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 0123 Signing time: Fri 17 Apr 2026 05:27:56 +0000 Manifest this update: Fri 17 Apr 2026 05:27:55 +0000 Manifest next update: Fri 24 Apr 2026 05:27:55 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: Lxi4dVrXTKil8eyVzmFw7NY7AU3l1lmAuuwJa/o9GK0=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Apr 17 05:27:55 2026 GMT Not After : Apr 24 05:27:55 2026 GMT Subject: CN=69e1c4dc-7dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:5d:f8:6b:57:41:d1:2e:d1:77:5d:9a:97: c1:6d:3d:31:f7:e4:6e:c6:ad:02:0f:d0:f6:6a:05: 8c:70:74:6e:75:d6:76:01:08:33:21:e1:9d:69:96: d6:8a:69:54:69:1f:1f:75:e8:d1:9b:03:d1:e8:3c: 71:82:d0:12:e4:53:f7:eb:48:58:6b:b2:15:23:04: 13:22:2e:4f:5a:94:be:ad:63:ba:a0:ed:9a:0a:f1: 1a:b4:87:e1:0e:40:76:e4:a5:e5:a1:21:af:4a:32: 0f:20:8e:27:32:fa:d1:45:68:35:03:ef:31:04:f7: ed:0a:05:d1:c3:a5:42:19:6b:37:17:44:6c:d1:77: f2:2e:28:b6:42:5b:90:ee:b2:3a:0c:11:fa:0a:37: 26:99:8c:26:3c:23:9a:9d:d0:41:b0:1a:c5:38:26: 4c:96:8c:ab:77:ad:f8:f1:48:c6:b0:31:b5:c1:d8: 4b:f5:8e:dd:f5:b8:eb:62:7c:ed:d7:f4:7c:3b:d6: 5a:a5:cf:17:c1:5e:0f:d9:97:d1:1b:4c:17:8b:d4: 20:23:71:f1:9b:a5:46:bf:48:e9:83:7c:53:f2:36: e6:89:5e:49:0b:12:06:4e:52:b1:aa:86:5b:b8:67: fe:7c:b9:3e:c4:a6:6e:f9:a6:fd:fa:f5:f7:fc:36: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:34:54:B5:23:A2:79:F9:07:D2:FB:24:8C:DA:80:D9:7B:43:D7 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:bc:dd:b1:37:0f:01:08:f3:6f:7b:59:47:5a:79:17:a5:17: 0f:c8:32:4c:01:5a:fe:67:87:f7:ea:44:ef:91:d7:3c:7a:36: 26:f1:d7:40:06:cf:99:32:bd:ce:fc:91:f2:d7:f1:6a:07:c8: 89:4c:3e:d3:81:7a:4f:88:e2:2a:06:1e:38:f2:0c:c2:ff:a4: c9:58:55:8b:30:65:38:bc:74:8c:6d:62:49:32:dd:5e:a5:e1: 4c:ed:3a:a9:5b:89:9a:ed:fa:36:fc:4f:e4:8f:9c:a0:2b:6d: 9d:1d:8c:8a:d7:c0:fb:d9:9a:61:f0:3f:a4:fd:3d:63:63:71: 73:31:86:da:c3:ff:1d:6b:7c:9b:0b:d4:6c:5b:73:be:47:a6: 61:93:30:2b:20:eb:a8:3f:a2:9a:f9:10:18:a9:73:9f:6b:76: fd:4a:23:80:39:ef:51:df:1c:66:bc:44:db:a1:5d:78:c4:6d: f6:d6:e1:48:db:72:d2:c2:dc:49:ba:f1:c6:9f:13:a8:90:94: 6f:b8:63:e1:2e:0e:ec:2b:ea:a3:f3:d2:f3:93:24:63:81:7e: 17:3e:06:c5:d2:be:6b:ce:88:ba:3f:d8:d7:9e:63:e2:6b:35: ce:20:d4:99:8d:b6:88:8d:e8:9c:fe:53:7d:5b:26:40:10:aa: 5c:0d:15:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjYwNDE3MDUyNzU1WhcNMjYwNDI0MDUyNzU1WjAYMRYwFAYD VQQDEw02OWUxYzRkYy03ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSFd+GtXQdEu0XddmpfBbT0x9+Ruxq0CD9D2agWMcHRuddZ2AQgzIeGdaZbW imlUaR8fdejRmwPR6DxxgtAS5FP360hYa7IVIwQTIi5PWpS+rWO6oO2aCvEatIfh DkB25KXloSGvSjIPII4nMvrRRWg1A+8xBPftCgXRw6VCGWs3F0Rs0XfyLii2QluQ 7rI6DBH6CjcmmYwmPCOandBBsBrFOCZMloyrd6348UjGsDG1wdhL9Y7d9bjrYnzt 1/R8O9Zapc8XwV4P2ZfRG0wXi9QgI3Hxm6VGv0jpg3xT8jbmiV5JCxIGTlKxqoZb uGf+fLk+xKZu+ab9+vX3/DZuuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzmNFS1 I6J5+QfS+ySM2oDZe0PXMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARrzdsTcPAQjzb3tZR1p5F6UXD8gyTAFa/meH9+pE75HXPHo2JvHXQAbPmTK9 zvyR8tfxagfIiUw+04F6T4jiKgYeOPIMwv+kyVhVizBlOLx0jG1iSTLdXqXhTO06 qVuJmu36NvxP5I+coCttnR2MitfA+9maYfA/pP09Y2NxczGG2sP/HWt8mwvUbFtz vkemYZMwKyDrqD+imvkQGKlzn2t2/UojgDnvUd8cZrxE26FdeMRt9tbhSNty0sLc Sbrxxp8TqJCUb7hj4S4O7Cvqo/PS85MkY4F+Fz4GxdK+a86Iuj/Y155j4ms1ziDU mY22iI3onP5TfVsmQBCqXA0Vqw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:58:02 2026 by rpki-client