$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: 9rTS3ARFUDur7SvntwBBrGBh6ZsyJv+JYxyPhcAzsTE= Subject key identifier: 69:FB:A1:29:49:6E:FA:9B:A0:A2:0B:64:A6:AB:5F:BA:56:16:4B:DE Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 87 Signing time: Sun 19 Apr 2026 07:16:16 +0000 Manifest this update: Sun 19 Apr 2026 07:16:15 +0000 Manifest next update: Sun 26 Apr 2026 07:16:15 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: 7RlAZKa6Vb3NF5VYrAOZ7jpm4Tl7Wd8FT7EpTURfA5M=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: BQkbdtjI99mxWqdYu14uU0wWLwTO/VUnPRItrckeDrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Apr 19 07:16:15 2026 GMT Not After : Apr 26 07:16:15 2026 GMT Subject: CN=69e4813f-381b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:1b:bf:38:87:f8:82:23:87:15:95:15:68: 24:8d:07:90:c3:ea:5a:01:99:c0:16:4a:57:6d:b4: 1d:80:8f:1f:5b:15:9b:bd:24:0e:ac:7b:79:e1:52: 09:a4:fd:72:ee:05:29:47:8f:3f:36:37:20:4c:8a: 07:7e:f5:bb:1d:f7:fd:2f:51:ee:21:d0:44:4a:74: 77:be:02:34:4d:84:2c:b3:f1:59:d6:c5:89:e9:fc: 82:d1:23:fd:5d:eb:eb:21:7f:c7:be:53:74:1c:91: 96:51:cd:20:ab:a5:21:b4:2c:92:d0:f1:42:6d:28: e1:2c:77:62:01:bf:55:5e:1f:82:8a:c7:27:06:07: 02:78:8d:01:41:d2:cf:e7:75:35:28:a0:a9:88:c5: 33:d8:36:1c:8e:8e:d7:73:68:98:82:02:0a:e4:64: 28:89:b2:ed:aa:ec:ea:c0:09:82:a3:63:e9:c0:19: 3b:26:67:2f:f1:a5:14:e4:e8:ff:64:49:1b:5e:51: cc:f2:12:ac:89:4b:ef:a7:ce:c3:46:0b:7e:9b:51: 96:fd:a5:17:12:e7:a3:24:fc:23:ce:3a:5b:c2:aa: ca:5d:c6:83:0d:86:e6:a0:3d:5b:f5:30:ee:e5:83: 12:dd:d2:2c:32:31:1c:05:24:53:4a:7f:7d:8e:4c: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:A1:29:49:6E:FA:9B:A0:A2:0B:64:A6:AB:5F:BA:56:16:4B:DE X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:99:95:77:19:da:33:15:5a:7e:b6:3c:07:fe:1c:a0:9b: ab:77:81:4b:c4:a1:77:51:c1:fb:22:51:1e:be:d4:89:30:02: f6:8c:89:86:3b:b0:f4:a6:2e:4b:cc:61:0b:42:d9:45:f6:1e: 7c:37:8d:09:09:1c:44:68:05:ff:1e:37:84:7c:14:11:e8:56: ee:17:7e:4b:e4:27:6b:65:a3:fa:fb:0b:0a:09:af:f4:cb:8d: 97:0c:2f:88:81:b1:e8:91:92:13:37:49:41:95:1d:92:6e:14: 74:7c:c0:f4:8d:22:c7:bf:79:75:0d:1d:5e:0a:66:41:17:5d: 83:d4:8b:70:d5:9c:3f:2c:7b:ee:dd:2c:7c:cc:b9:c7:3e:9e: 5c:dc:54:f1:52:8c:32:1d:44:01:47:aa:4b:a8:32:a4:53:72: 75:21:77:23:26:48:e8:fc:92:e6:c7:b8:95:14:53:60:3d:26: d7:0c:e7:d2:38:28:27:48:f0:7f:8d:5e:c8:b4:fb:7f:6f:27: 4e:17:77:c8:63:04:58:bb:a8:28:df:21:99:c3:74:bf:3e:85: d5:5d:ef:e5:40:87:a2:2f:40:03:39:42:af:86:8c:2d:8b:b0: 62:2d:21:82:73:6f:d2:bf:85:75:4d:9d:6d:23:73:3c:6c:90: 2c:30:12:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC NDhGQTJFMjEwHhcNMjYwNDE5MDcxNjE1WhcNMjYwNDI2MDcxNjE1WjAYMRYwFAYD VQQDEw02OWU0ODEzZi0zODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF0bvziH+IIjhxWVFWgkjQeQw+paAZnAFkpXbbQdgI8fWxWbvSQOrHt54VIJ pP1y7gUpR48/NjcgTIoHfvW7Hff9L1HuIdBESnR3vgI0TYQss/FZ1sWJ6fyC0SP9 XevrIX/HvlN0HJGWUc0gq6UhtCyS0PFCbSjhLHdiAb9VXh+CiscnBgcCeI0BQdLP 53U1KKCpiMUz2DYcjo7Xc2iYggIK5GQoibLtquzqwAmCo2PpwBk7Jmcv8aUU5Oj/ ZEkbXlHM8hKsiUvvp87DRgt+m1GW/aUXEuejJPwjzjpbwqrKXcaDDYbmoD1b9TDu 5YMS3dIsMjEcBSRTSn99jkxjkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGn7oSlJ bvqboKILZKarX7pWFkveMB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5 Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAq+ZlXcZ2jMVWn62PAf+HKCbq3eBS8Shd1HB+yJRHr7UiTAC9oyJhjuw9KYu S8xhC0LZRfYefDeNCQkcRGgF/x43hHwUEehW7hd+S+Qna2Wj+vsLCgmv9MuNlwwv iIGx6JGSEzdJQZUdkm4UdHzA9I0ix795dQ0dXgpmQRddg9SLcNWcPyx77t0sfMy5 xz6eXNxU8VKMMh1EAUeqS6gypFNydSF3IyZI6PyS5se4lRRTYD0m1wzn0jgoJ0jw f41eyLT7f28nThd3yGMEWLuoKN8hmcN0vz6F1V3v5UCHoi9AAzlCr4aMLYuwYi0h gnNv0r+FdU2dbSNzPGyQLDASiw== -----END CERTIFICATE-----Generated at Sun Apr 19 09:32:00 2026 by rpki-client