$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: HyigdcpGEJCVyoGJxI10vWJKgluklAXlCXZ4HLch6kw= Subject key identifier: 67:57:22:3B:6A:AC:4A:A0:5C:47:61:8F:97:4A:3D:BE:61:F8:9C:B5 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0999 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0984 Signing time: Thu 16 Apr 2026 19:57:14 +0000 Manifest this update: Thu 16 Apr 2026 19:57:13 +0000 Manifest next update: Thu 23 Apr 2026 19:57:13 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: zWS6XfBtNIEgtlEcg9VQTTvT9HxU3PGY+ttQgsXHFiU=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2457 (0x999) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Apr 16 19:57:13 2026 GMT Not After : Apr 23 19:57:13 2026 GMT Subject: CN=69e13f1a-fead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:8c:00:20:b3:c0:0c:8b:1b:28:81:8c:7d: 5c:e9:83:8b:46:94:c1:53:86:80:f4:cb:1d:b2:7c: 23:34:4d:15:15:5e:bf:fd:30:1b:51:b8:fb:fe:8e: d0:d5:9b:52:13:ed:24:8a:1e:5f:98:c5:68:36:cf: 9d:89:0d:fd:ba:88:91:2f:90:0a:be:7b:e8:bc:b7: ff:75:07:9f:3f:9c:bc:03:88:f7:1b:9b:8c:1a:f5: d7:91:d8:7e:15:a8:f3:78:3d:05:a0:b4:13:4f:9d: 6e:0e:01:84:08:32:32:b1:8a:df:f5:d8:f0:38:28: a0:f4:bb:4e:08:5b:0a:00:a4:b0:db:b2:e1:fe:08: 5f:d1:1b:de:c8:90:71:d0:27:60:d9:a4:b3:f3:dd: c4:e0:5b:16:11:17:ba:39:a8:4a:e5:8a:b0:23:99: 4d:22:0e:66:2b:95:77:c8:e0:51:9a:31:3d:45:b6: c3:f2:e8:70:fa:87:b7:2f:ec:02:78:2e:98:cf:b4: 06:37:31:23:50:44:e9:57:98:fe:5e:8b:42:46:77: be:61:49:0f:f2:92:5e:d3:f2:f6:e4:61:e3:37:c7: bd:1d:67:9d:2b:4d:78:47:0c:e4:5c:37:60:6e:5e: 5f:22:78:48:93:e3:66:45:3d:cf:a2:a7:39:30:d0: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:22:3B:6A:AC:4A:A0:5C:47:61:8F:97:4A:3D:BE:61:F8:9C:B5 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:76:7c:02:62:81:0b:c7:c0:f0:36:11:47:0c:62:d9:0e:11: 69:8d:cf:04:a9:e4:39:fe:7f:7c:5c:67:e8:27:fc:02:b2:e5: 53:cc:24:28:57:02:c9:2e:aa:8a:0b:23:34:4b:bc:aa:ed:11: 52:f4:70:a8:83:f6:d3:8c:bd:cb:dc:83:2e:74:b3:83:f3:ad: bf:27:23:55:6f:8a:db:05:2c:2d:59:e4:eb:28:a4:f5:8f:70: 0e:7b:26:e0:6e:ec:4a:ff:22:fa:09:ac:3e:30:7f:82:dd:cb: 95:6a:89:79:b5:37:c9:e7:f4:ee:33:ca:a8:25:1e:e8:dd:8e: b9:34:2b:99:e8:7c:9b:64:ba:84:79:2b:f6:03:59:73:54:4b: 93:0a:28:d2:54:e0:36:ca:0c:88:d7:bf:dc:dd:53:21:6d:ea: bc:00:41:c9:b7:f4:1e:97:b6:ba:ea:21:cb:26:54:4c:5f:8e: c8:e6:41:30:c9:4f:41:d7:b5:4e:b1:47:a3:92:dc:78:ed:8e: 16:13:6a:eb:01:88:96:b8:85:d2:ef:85:de:e5:60:dd:46:c4: 90:bd:27:1d:32:7a:3a:ff:df:7e:14:ba:12:70:a4:e4:eb:73: 40:e9:76:d5:13:5b:b8:b1:b8:b1:47:b3:8b:b9:6f:20:43:5f: bb:70:74:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwNDE2MTk1NzEzWhcNMjYwNDIzMTk1NzEzWjAYMRYwFAYD VQQDEw02OWUxM2YxYS1mZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRmMACCzwAyLGyiBjH1c6YOLRpTBU4aA9MsdsnwjNE0VFV6//TAbUbj7/o7Q 1ZtSE+0kih5fmMVoNs+diQ39uoiRL5AKvnvovLf/dQefP5y8A4j3G5uMGvXXkdh+ FajzeD0FoLQTT51uDgGECDIysYrf9djwOCig9LtOCFsKAKSw27Lh/ghf0RveyJBx 0Cdg2aSz893E4FsWERe6OahK5YqwI5lNIg5mK5V3yOBRmjE9RbbD8uhw+oe3L+wC eC6Yz7QGNzEjUETpV5j+XotCRne+YUkP8pJe0/L25GHjN8e9HWedK014RwzkXDdg bl5fInhIk+NmRT3Poqc5MNAAQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdXIjtq rEqgXEdhj5dKPb5h+Jy1MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADnZ8AmKBC8fA8DYRRwxi2Q4RaY3PBKnkOf5/fFxn6Cf8ArLlU8wkKFcCyS6q igsjNEu8qu0RUvRwqIP204y9y9yDLnSzg/OtvycjVW+K2wUsLVnk6yik9Y9wDnsm 4G7sSv8i+gmsPjB/gt3LlWqJebU3yef07jPKqCUe6N2OuTQrmeh8m2S6hHkr9gNZ c1RLkwoo0lTgNsoMiNe/3N1TIW3qvABBybf0Hpe2uuohyyZUTF+OyOZBMMlPQde1 TrFHo5LceO2OFhNq6wGIlriF0u+F3uVg3UbEkL0nHTJ6Ov/ffhS6EnCk5OtzQOl2 1RNbuLG4sUezi7lvIENfu3B0xA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:30 2026 by rpki-client