$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: 6ieaKGuEln8FpD3qkGJAYd16jdMoj2X9KsGyjfUKUZo= Subject key identifier: 7B:91:59:0D:CC:99:B0:6C:91:C9:46:93:C8:70:B3:84:6B:82:55:02 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 0100 Signing time: Fri 17 Apr 2026 05:53:23 +0000 Manifest this update: Fri 17 Apr 2026 05:53:23 +0000 Manifest next update: Fri 24 Apr 2026 05:53:23 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: MvSaRDyZrDZuZg1UMPNbps6dheaiX0bIySxe9QgVKq4=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Apr 17 05:53:23 2026 GMT Not After : Apr 24 05:53:23 2026 GMT Subject: CN=69e1cad3-8683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:10:8a:9d:53:94:60:d6:89:a8:39:e3:1e: a7:bf:86:6e:c3:a3:3d:d1:62:73:fd:a1:a5:9c:5e: 36:7c:f9:9f:2b:74:f3:6c:e4:28:3c:c2:66:7f:01: ff:dd:b0:16:5b:6b:ed:ed:08:54:90:1c:f7:34:2f: 78:8f:3f:76:8d:27:88:ea:04:5a:29:7b:24:e3:31: a1:43:c1:19:61:9e:4b:ad:01:2b:64:fc:43:f8:57: 26:b7:c7:20:35:61:be:0d:b7:3c:00:a1:58:4f:28: cb:98:38:2f:5d:74:8b:c1:61:d9:93:3b:a2:b9:9a: f1:22:05:cb:08:36:7f:99:77:1a:72:3e:67:5a:3e: c9:c5:d5:bd:39:5e:0a:0c:1c:de:20:33:b3:9f:6d: d3:ab:79:56:90:16:13:82:75:9e:db:7e:b9:21:49: 63:89:0e:93:1f:90:d5:bc:69:78:f9:fc:cf:5b:b9: f0:ce:49:47:9c:56:24:58:35:14:82:86:57:3f:db: 1c:de:c4:1a:13:0b:33:58:7e:b7:0c:9c:e1:13:f5: 40:cc:f5:b0:dc:a4:07:cd:56:73:12:fe:73:ee:c5: 68:ed:c7:13:dc:68:fc:40:77:51:14:92:9d:79:29: b6:2d:be:49:d4:87:6a:0b:58:b9:97:0f:af:7a:aa: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:91:59:0D:CC:99:B0:6C:91:C9:46:93:C8:70:B3:84:6B:82:55:02 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e5:43:47:21:ea:92:58:b1:7f:35:17:4c:19:b5:c6:1c:23: 13:d2:e1:aa:14:51:ce:c1:e9:b8:c0:dc:8b:48:ea:dd:39:fd: 62:56:02:5a:f0:9f:0c:1b:46:b8:51:82:65:43:7f:23:4a:f2: d4:bc:8c:7f:dd:64:b5:26:4f:32:cc:3c:bd:63:c7:b1:00:b8: a1:86:55:d5:85:91:c5:a9:d7:62:8e:1c:fa:bc:6b:a8:b4:e8: 61:86:a8:bf:4a:80:f3:56:e5:39:bf:0d:66:85:17:a9:e4:49: 83:e4:c7:07:2f:11:c2:d9:1d:8d:81:8a:79:97:7f:8b:2e:96: cc:80:02:19:39:b4:66:55:a2:5f:75:6c:67:c5:25:12:05:b5: 45:36:35:db:12:df:b1:50:ab:43:69:79:b4:30:3c:d9:12:d3: 8a:03:40:56:07:c4:1e:64:c8:10:03:5d:fb:82:96:31:3d:ca: a0:a0:cc:6a:6b:0f:d3:5e:e6:6c:23:e9:0d:59:42:ee:9f:9a: df:85:aa:15:cd:0d:f1:ce:4e:ee:4b:fb:5b:a9:07:ad:23:53: 89:33:43:38:04:f8:93:73:b7:08:14:3e:43:3d:d7:8a:c3:0b: f8:2d:65:c1:14:44:0e:d6:c9:48:10:f9:56:fb:99:73:5d:db: 01:10:69:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjYwNDE3MDU1MzIzWhcNMjYwNDI0MDU1MzIzWjAYMRYwFAYD VQQDEw02OWUxY2FkMy04NjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUIQip1TlGDWiag54x6nv4Zuw6M90WJz/aGlnF42fPmfK3TzbOQoPMJmfwH/ 3bAWW2vt7QhUkBz3NC94jz92jSeI6gRaKXsk4zGhQ8EZYZ5LrQErZPxD+Fcmt8cg NWG+Dbc8AKFYTyjLmDgvXXSLwWHZkzuiuZrxIgXLCDZ/mXcacj5nWj7JxdW9OV4K DBzeIDOzn23Tq3lWkBYTgnWe2365IUljiQ6TH5DVvGl4+fzPW7nwzklHnFYkWDUU goZXP9sc3sQaEwszWH63DJzhE/VAzPWw3KQHzVZzEv5z7sVo7ccT3Gj8QHdRFJKd eSm2Lb5J1IdqC1i5lw+veqrJMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuRWQ3M mbBskclGk8hws4RrglUCMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX+VDRyHqklixfzUXTBm1xhwjE9LhqhRRzsHpuMDci0jq3Tn9YlYCWvCfDBtG uFGCZUN/I0ry1LyMf91ktSZPMsw8vWPHsQC4oYZV1YWRxanXYo4c+rxrqLToYYao v0qA81blOb8NZoUXqeRJg+THBy8RwtkdjYGKeZd/iy6WzIACGTm0ZlWiX3VsZ8Ul EgW1RTY12xLfsVCrQ2l5tDA82RLTigNAVgfEHmTIEANd+4KWMT3KoKDMamsP017m bCPpDVlC7p+a34WqFc0N8c5O7kv7W6kHrSNTiTNDOAT4k3O3CBQ+Qz3XisML+C1l wRREDtbJSBD5VvuZc13bARBp3w== -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:56 2026 by rpki-client