$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: waegUGF93bhWe+X9JgdwVfNapxYXYYt2t64ymWKgLKQ= Subject key identifier: 7B:22:FF:32:AF:3F:E5:FC:C7:42:91:4D:28:1A:53:5E:C7:BA:C3:5F Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 025F Signing time: Fri 17 Apr 2026 02:00:43 +0000 Manifest this update: Fri 17 Apr 2026 02:00:43 +0000 Manifest next update: Fri 24 Apr 2026 02:00:43 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: +//LOwaw0ROfeyAvh3j1rSJHGHjD967n66gGshqJh9c=) 2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) 3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Apr 17 02:00:43 2026 GMT Not After : Apr 24 02:00:43 2026 GMT Subject: CN=69e1944b-d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:b7:82:d2:c2:4a:80:f6:a1:6a:30:c2:3d: 33:ed:91:df:73:5f:32:1b:0c:a6:47:01:30:9b:c9: 1a:42:c9:79:95:24:da:a7:b2:48:08:ae:11:a7:88: dc:7c:0b:9d:c9:74:80:f2:95:3d:3c:1c:d3:6d:13: 96:ed:6a:f2:db:3b:ef:1d:7e:60:80:bc:79:b4:da: 7b:68:b4:68:37:4a:61:cc:b1:1b:86:d8:bb:ba:cf: 5b:bd:9a:c6:e4:0c:87:25:f5:bc:a9:98:96:f2:62: 5b:b1:b9:2b:26:0a:1c:0a:db:f8:0b:12:f8:11:e6: 89:fd:8e:8f:a7:52:f7:a3:e3:d3:c0:72:ba:48:54: 83:19:4d:42:53:6a:ed:f8:d5:f9:79:b2:53:50:55: 46:d9:11:2e:77:d2:b3:01:43:d4:d6:53:f8:8a:05: 2e:f2:49:ea:54:38:06:02:26:d2:f8:57:9d:3d:6c: 03:64:75:ea:92:7c:b9:c5:69:b6:c0:cd:06:81:32: 8d:ef:0c:5d:f6:ec:72:2c:40:b8:03:46:d9:42:3a: 6c:80:68:a8:88:b0:21:98:84:3b:96:8b:fe:5e:47: 21:7c:87:e1:cf:27:70:18:f9:28:65:e2:be:f0:2f: c7:9d:c0:1b:5a:ac:95:d9:f3:e6:11:01:c8:57:c4: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:FF:32:AF:3F:E5:FC:C7:42:91:4D:28:1A:53:5E:C7:BA:C3:5F X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:34:be:4d:bf:5a:e4:c6:94:5d:90:83:cf:a3:fc:cc:0c:40: 16:e3:29:ef:70:ab:7f:db:16:0b:48:a4:68:ba:9f:69:48:a9: df:67:ef:12:1d:95:5e:72:93:2a:82:92:4c:1c:d0:dc:d0:5a: c1:2d:95:f3:b9:7e:78:da:3d:53:66:53:3b:82:e7:b7:68:b8: a7:ec:d5:bf:d6:99:a4:44:e7:e2:5a:a8:27:a1:ea:e9:44:a3: f1:77:42:22:53:62:d8:6b:95:78:4b:64:5f:ee:73:b6:bb:53: 8e:67:0e:f2:8b:e8:c1:c1:83:f3:b4:e9:02:3d:95:78:2b:fb: b7:21:39:a9:d8:42:f0:80:be:0d:4d:76:cb:88:5e:dc:3e:1f: 09:29:dc:9d:a4:4e:e3:c8:0b:92:4f:3e:b4:06:50:53:46:ff: 9c:80:6f:0f:27:36:32:43:0b:5d:65:24:0e:16:dd:a3:a0:4a: 3e:2b:88:d1:a1:63:15:ff:2d:33:f7:ba:87:0c:91:1d:08:c7: ba:92:e6:2c:7b:e0:5e:64:64:15:4a:50:e0:9e:df:ff:91:d4: 66:c4:63:59:e8:4a:cb:3a:c8:9c:9c:0f:7e:72:79:93:6d:ab: 08:9f:eb:8b:b4:07:c2:64:77:2e:c3:f6:79:40:d0:ed:04:99: 07:f0:42:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwNDE3MDIwMDQzWhcNMjYwNDI0MDIwMDQzWjAYMRYwFAYD VQQDEw02OWUxOTQ0Yi1kNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV63gtLCSoD2oWowwj0z7ZHfc18yGwymRwEwm8kaQsl5lSTap7JICK4Rp4jc fAudyXSA8pU9PBzTbROW7Wry2zvvHX5ggLx5tNp7aLRoN0phzLEbhti7us9bvZrG 5AyHJfW8qZiW8mJbsbkrJgocCtv4CxL4EeaJ/Y6Pp1L3o+PTwHK6SFSDGU1CU2rt +NX5ebJTUFVG2REud9KzAUPU1lP4igUu8knqVDgGAibS+FedPWwDZHXqkny5xWm2 wM0GgTKN7wxd9uxyLEC4A0bZQjpsgGioiLAhmIQ7lov+XkchfIfhzydwGPkoZeK+ 8C/HncAbWqyV2fPmEQHIV8SpVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsi/zKv P+X8x0KRTSgaU17HusNfMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTS+Tb9a5MaUXZCDz6P8zAxAFuMp73Crf9sWC0ikaLqfaUip32fvEh2VXnKT KoKSTBzQ3NBawS2V87l+eNo9U2ZTO4Lnt2i4p+zVv9aZpETn4lqoJ6Hq6USj8XdC IlNi2GuVeEtkX+5ztrtTjmcO8ovowcGD87TpAj2VeCv7tyE5qdhC8IC+DU12y4he 3D4fCSncnaRO48gLkk8+tAZQU0b/nIBvDyc2MkMLXWUkDhbdo6BKPiuI0aFjFf8t M/e6hwyRHQjHupLmLHvgXmRkFUpQ4J7f/5HUZsRjWehKyzrInJwPfnJ5k22rCJ/r i7QHwmR3LsP2eUDQ7QSZB/BC+w== -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:22 2026 by rpki-client