$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: LALmKv+m4YZIzpQgEzsPFQm50nd23h2y798OEo/Lz58= Subject key identifier: 35:CB:0E:93:0F:01:22:49:0A:3E:ED:65:85:DA:70:3C:04:70:6F:4A Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 021F Signing time: Fri 17 Apr 2026 02:33:46 +0000 Manifest this update: Fri 17 Apr 2026 02:33:46 +0000 Manifest next update: Fri 24 Apr 2026 02:33:46 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: RZXcYzaZszUARI+sP75jj1PpSlgVtP/cUVIQqwljvaQ=) 2: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) 3: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Apr 17 02:33:46 2026 GMT Not After : Apr 24 02:33:46 2026 GMT Subject: CN=69e19c0a-8883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:22:ec:55:70:8e:53:d4:6c:df:d6:a3:08: 7f:b8:87:9f:3b:93:b0:8a:e7:b0:6e:e5:90:1e:73: 8e:5a:37:6a:df:7b:e5:18:b2:7f:e3:c5:fd:77:b0: 13:f1:fc:68:15:46:cb:a2:0f:1c:01:bb:f9:ec:d2: 84:de:8f:ef:02:ab:52:14:d8:51:93:57:1e:9e:d6: 46:9f:21:06:11:c6:6f:63:a7:9c:16:48:83:7d:2c: d3:62:53:34:05:05:6a:5e:63:60:70:1b:64:92:2d: 14:50:15:fa:8b:ef:cc:d0:af:33:c9:e1:05:a6:f7: 58:ad:bf:b9:6b:88:23:8d:fe:49:ea:68:42:9c:13: 29:69:6d:61:61:6c:2a:b4:bf:14:ec:e1:77:d8:eb: 9b:16:e9:6f:b5:32:94:6f:14:53:00:33:64:9e:27: bf:d0:e9:1d:2e:70:7d:f6:81:0d:da:cf:6a:71:2c: c7:a8:3c:31:79:9a:09:55:ca:03:1a:50:6c:8e:07: e1:9b:aa:60:9b:cd:56:bf:64:91:4d:44:30:ef:8f: 20:0d:19:b5:90:e7:9d:41:61:c3:97:f7:70:11:78: 36:f5:84:58:58:5e:3b:48:f2:ce:57:21:c1:d9:41: ec:98:97:4e:60:0e:93:48:46:c2:0a:45:92:61:57: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:0E:93:0F:01:22:49:0A:3E:ED:65:85:DA:70:3C:04:70:6F:4A X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:81:cd:1c:45:de:31:0a:1d:e5:69:a0:0f:b7:38:48:98: d4:ee:6c:75:72:b0:51:82:42:bf:a3:73:91:78:3b:68:ae:d9: 92:17:e1:08:5b:d1:d0:c0:9d:cf:18:72:fa:51:fa:c8:51:33: c5:85:fc:b3:23:7e:aa:f5:e5:6a:a1:6b:a1:a9:c2:f2:d6:8c: 34:4b:ce:51:65:b2:e1:85:3e:31:ce:05:d9:d9:3a:b2:09:e5: 6d:49:9f:26:64:4a:34:c9:db:24:0b:31:f0:fb:98:d7:96:5a: 6e:1e:95:de:8a:17:20:29:45:c6:2c:80:1f:b5:2a:fc:0c:d3: aa:85:55:d1:51:81:a5:71:7d:0a:a7:e4:84:90:56:f6:15:d1: a9:cb:58:56:aa:16:3d:27:6b:c4:89:9e:13:e5:82:3f:e4:58: a5:85:33:f8:02:72:e7:83:a9:4d:64:9e:48:0d:82:bb:a7:97: f0:cb:ed:28:3c:58:8f:47:9c:00:f3:f3:d4:df:5b:9c:f8:d9: ea:67:9d:a7:4e:94:5c:63:69:08:6d:17:d7:7f:d2:23:53:2d: cc:af:49:69:5b:3a:d5:61:3a:50:64:d6:51:1a:1c:34:42:47: ee:d8:c2:4e:d7:ab:90:f0:17:ab:80:07:53:27:b1:b8:ca:42: 60:b4:1b:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYwNDE3MDIzMzQ2WhcNMjYwNDI0MDIzMzQ2WjAYMRYwFAYD VQQDEw02OWUxOWMwYS04ODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ewi7FVwjlPUbN/Wowh/uIefO5OwiuewbuWQHnOOWjdq33vlGLJ/48X9d7AT 8fxoFUbLog8cAbv57NKE3o/vAqtSFNhRk1centZGnyEGEcZvY6ecFkiDfSzTYlM0 BQVqXmNgcBtkki0UUBX6i+/M0K8zyeEFpvdYrb+5a4gjjf5J6mhCnBMpaW1hYWwq tL8U7OF32OubFulvtTKUbxRTADNknie/0OkdLnB99oEN2s9qcSzHqDwxeZoJVcoD GlBsjgfhm6pgm81Wv2SRTUQw748gDRm1kOedQWHDl/dwEXg29YRYWF47SPLOVyHB 2UHsmJdOYA6TSEbCCkWSYVdKfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXLDpMP ASJJCj7tZYXacDwEcG9KMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQRSBzRxF3jEKHeVpoA+3OEiY1O5sdXKwUYJCv6NzkXg7aK7ZkhfhCFvR0MCd zxhy+lH6yFEzxYX8syN+qvXlaqFroanC8taMNEvOUWWy4YU+Mc4F2dk6sgnlbUmf JmRKNMnbJAsx8PuY15Zabh6V3ooXIClFxiyAH7Uq/AzTqoVV0VGBpXF9CqfkhJBW 9hXRqctYVqoWPSdrxImeE+WCP+RYpYUz+AJy54OpTWSeSA2Cu6eX8MvtKDxYj0ec APPz1N9bnPjZ6medp06UXGNpCG0X13/SI1MtzK9JaVs61WE6UGTWURocNEJH7tjC TterkPAXq4AHUyexuMpCYLQbjA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:13 2026 by rpki-client