$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: rhTFUM7hlG+phwrNaMBn8M/QPAyfB1SOGGgit0m2C2M= Subject key identifier: D9:33:F5:B2:55:E5:31:25:17:A4:D1:E4:0F:C4:94:94:8F:01:38:85 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 79 Signing time: Fri 17 Apr 2026 07:29:48 +0000 Manifest this update: Fri 17 Apr 2026 07:29:47 +0000 Manifest next update: Fri 24 Apr 2026 07:29:47 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: JgAkGM33gi6Yn/dQXRFSr2vYNiMeoPUkT2x95ABNJnQ=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: 995A12922D7911F185835B6B93833773.roa (hash: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=) 4: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Apr 17 07:29:47 2026 GMT Not After : Apr 24 07:29:47 2026 GMT Subject: CN=69e1e16c-4193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:42:13:82:7a:8b:0b:f4:b9:93:c6:b7:a3: d7:5a:7d:71:65:d4:84:23:83:ed:15:d0:54:ea:d4: 7c:1d:89:34:cc:2a:75:ce:6b:9e:fc:d2:7a:79:d2: bb:24:6e:2f:ee:68:81:56:a0:3f:5c:67:da:7f:9b: 1b:61:52:d1:16:e1:45:fa:f5:ba:3f:2e:df:f9:c2: c9:c7:3a:dc:99:d0:de:89:b2:b6:bc:a5:8c:d0:70: 8b:dd:05:65:fe:44:a8:35:f4:03:39:e4:e5:b0:10: 99:dc:82:d6:58:75:58:4d:e7:56:3b:5b:98:90:e2: 35:75:46:1d:51:c4:f1:40:4c:70:25:10:ff:23:97: 4e:f1:bb:c3:d0:71:0d:9f:d4:b0:91:f0:b2:14:a5: ec:17:47:e7:c4:39:a7:22:d7:cd:0d:ab:ee:a0:af: ca:82:e6:5e:af:8f:97:e3:3a:db:73:06:86:1c:dc: f6:92:ad:9b:32:ab:50:b7:bd:71:c6:5e:5f:6b:91: 50:e4:f1:75:3e:1d:08:d2:58:dc:b6:7d:3e:60:89: 49:18:ad:01:bb:63:c7:7b:bd:b8:8b:99:95:0e:66: 82:5a:d4:1a:6d:11:d0:fc:ca:b9:e7:a5:62:51:e5: 77:a8:b6:d8:d9:3b:bf:84:1e:4b:05:b7:c5:10:b8: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:F5:B2:55:E5:31:25:17:A4:D1:E4:0F:C4:94:94:8F:01:38:85 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:77:d7:8e:82:aa:e1:9d:5d:1d:72:ed:3e:80:b8:95:ce:86: e3:77:9a:9e:82:02:ef:5d:0e:93:cc:bb:7b:a3:97:50:c7:62: 52:1b:99:35:97:f6:2a:23:f5:f2:46:3b:52:57:80:e4:bb:e9: 1e:b1:87:8b:5d:25:53:08:18:a8:43:70:ff:d2:8e:78:43:e3: 04:2d:40:61:20:bd:e0:e6:9b:96:cc:bd:03:9e:2e:94:33:04: 50:9e:7f:cf:6e:6e:9a:75:80:4e:21:dc:97:f5:07:15:c0:4c: 91:08:85:2a:81:b0:46:d8:8d:f0:44:b5:d3:77:af:d7:82:1c: be:3c:ad:c2:c8:1f:ee:be:f1:28:66:28:64:25:99:8b:3f:bb: db:b5:d2:28:bd:7d:c4:97:1a:d8:f2:6f:95:75:6d:8f:5e:2b: ac:8e:20:91:6b:49:33:2c:bb:38:c8:ca:2d:f5:de:00:7d:10: fd:aa:62:7d:60:7b:28:89:fd:46:3e:ae:84:fd:d4:a1:db:f2: 0a:cf:e6:3f:82:38:e6:b4:eb:3b:b4:24:ca:bb:30:c5:84:95: e4:77:b1:ff:d7:29:23:c6:7a:ac:21:6f:14:06:5e:4b:1d:3c: cc:4b:1e:33:c6:df:2f:ba:8b:a9:7e:c7:6c:8f:ce:85:5b:e3: 0a:83:70:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYwNDE3MDcyOTQ3WhcNMjYwNDI0MDcyOTQ3WjAYMRYwFAYD VQQDEw02OWUxZTE2Yy00MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE1CE4J6iwv0uZPGt6PXWn1xZdSEI4PtFdBU6tR8HYk0zCp1zmue/NJ6edK7 JG4v7miBVqA/XGfaf5sbYVLRFuFF+vW6Py7f+cLJxzrcmdDeibK2vKWM0HCL3QVl /kSoNfQDOeTlsBCZ3ILWWHVYTedWO1uYkOI1dUYdUcTxQExwJRD/I5dO8bvD0HEN n9SwkfCyFKXsF0fnxDmnItfNDavuoK/KguZer4+X4zrbcwaGHNz2kq2bMqtQt71x xl5fa5FQ5PF1Ph0I0ljctn0+YIlJGK0Bu2PHe724i5mVDmaCWtQabRHQ/Mq556Vi UeV3qLbY2Tu/hB5LBbfFELiUUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkz9bJV 5TElF6TR5A/ElJSPATiFMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHfXjoKq4Z1dHXLtPoC4lc6G43eanoIC710Ok8y7e6OXUMdiUhuZNZf2KiP1 8kY7UleA5LvpHrGHi10lUwgYqENw/9KOeEPjBC1AYSC94Oablsy9A54ulDMEUJ5/ z25umnWATiHcl/UHFcBMkQiFKoGwRtiN8ES103ev14Icvjytwsgf7r7xKGYoZCWZ iz+727XSKL19xJca2PJvlXVtj14rrI4gkWtJMyy7OMjKLfXeAH0Q/apifWB7KIn9 Rj6uhP3UodvyCs/mP4I45rTrO7QkyrswxYSV5Hex/9cpI8Z6rCFvFAZeSx08zEse M8bfL7qLqX7HbI/OhVvjCoNw7w== -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:19 2026 by rpki-client