$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: iOI47o2Uv9PhF6MGp6YXf3oQr46RLp0CL8Y3quS8hMI= Subject key identifier: 9F:5D:F9:EB:21:00:4F:CF:F3:11:9E:E6:6A:BF:D0:DA:CD:05:26:05 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 92 Signing time: Sun 19 Apr 2026 07:07:15 +0000 Manifest this update: Sun 19 Apr 2026 07:07:14 +0000 Manifest next update: Sun 26 Apr 2026 07:07:14 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: SUjbF9kSsf92koM+/20M50QbcVJ/erghnCLiWbCSWIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Apr 19 07:07:14 2026 GMT Not After : Apr 26 07:07:14 2026 GMT Subject: CN=69e47f23-a23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:1e:1b:7c:da:b2:d6:92:e2:2b:c2:34:be: 06:8d:a0:1b:22:43:c2:e9:86:f6:2a:25:cf:3c:cd: 4d:99:dd:71:7a:36:08:2a:d3:af:6b:52:3b:b4:1e: 44:5a:20:0b:c5:82:f0:3b:59:75:55:1d:80:1d:0a: dc:28:cf:08:f3:c2:95:6e:25:6c:6b:8d:aa:85:94: ae:c7:7f:91:ea:48:2b:74:e8:e6:63:70:f4:95:a8: ab:ac:be:e7:79:de:cc:00:13:51:63:62:ef:3b:b9: 32:28:d7:a7:9c:fb:9a:cf:b5:15:95:e2:09:b2:9d: 0d:7d:4b:d5:81:f2:04:4f:f7:ba:5f:cf:44:ef:51: 51:5b:73:bc:83:e5:ca:61:6e:4e:d5:86:96:b0:0d: 1d:5e:53:f6:9b:10:59:90:c4:62:79:89:9e:3c:92: 9e:2a:da:98:49:85:d6:9b:58:b0:82:75:32:9d:e2: e3:77:1f:80:12:ba:76:95:a4:9f:3b:aa:5a:4d:51: 88:2e:6d:a7:05:bd:ae:e1:2f:eb:b5:3f:7f:76:82: c2:73:a1:de:d4:f5:44:a0:6f:b7:5b:99:35:5d:55: b8:42:10:2c:a0:f4:58:61:5c:45:ba:32:6e:f8:15: 34:d6:60:f1:11:b4:8b:64:3b:5b:1d:ca:74:c3:9c: b9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:F9:EB:21:00:4F:CF:F3:11:9E:E6:6A:BF:D0:DA:CD:05:26:05 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:44:1a:04:b7:de:98:12:72:ac:65:5b:9d:a9:96:9d:44:ac: a3:3c:79:46:2d:7d:7d:26:39:b3:f0:e3:32:3e:f7:86:f0:34: 98:ea:21:32:77:57:9e:1a:b2:75:cc:d6:d7:5f:aa:31:f5:04: d3:eb:f6:c8:c2:c1:6a:20:af:b9:56:6e:73:a7:93:51:bb:0e: 90:2c:dc:e8:92:14:b6:45:a9:fe:89:e6:5f:72:79:35:45:94: ee:6d:26:b0:7f:09:00:02:b6:ec:56:e0:e7:6a:9e:a4:6b:c5: 85:20:5e:a0:bc:96:0e:c2:d7:94:eb:12:0e:3e:85:14:46:da: 9d:87:2f:11:b5:3a:83:ec:74:de:7f:41:5e:35:7d:5e:78:2f: 18:03:e2:ba:ab:59:cf:3a:c4:93:87:23:5b:b0:5d:8b:0d:06: f6:1b:8c:ea:64:94:f5:1f:53:12:ec:af:f4:7c:9e:ec:44:d1: 12:13:6c:7a:df:a6:d4:37:0a:72:66:d0:ab:41:b0:4e:d4:67: c1:7b:c0:29:2e:94:ba:75:92:2d:af:f8:98:cc:c5:e5:9f:10: 72:18:f6:ea:f6:d9:ac:5b:c0:2c:36:5c:1a:47:a8:1c:3d:c0: 19:71:d6:c7:0a:be:ec:97:42:05:da:2b:00:c9:24:f3:5c:1c: a6:ff:37:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTYxMTAvBgNVBAUTKDY0MjEzNTJBRUQ2NDQxMDA2QkJDRTQ4QTg1MzQ1NUM4 RDI3MjNEQjgwHhcNMjYwNDE5MDcwNzE0WhcNMjYwNDI2MDcwNzE0WjAYMRYwFAYD VQQDEw02OWU0N2YyMy1hMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUQeG3zastaS4ivCNL4GjaAbIkPC6Yb2KiXPPM1Nmd1xejYIKtOva1I7tB5E WiALxYLwO1l1VR2AHQrcKM8I88KVbiVsa42qhZSux3+R6kgrdOjmY3D0lairrL7n ed7MABNRY2LvO7kyKNennPuaz7UVleIJsp0NfUvVgfIET/e6X89E71FRW3O8g+XK YW5O1YaWsA0dXlP2mxBZkMRieYmePJKeKtqYSYXWm1iwgnUyneLjdx+AErp2laSf O6paTVGILm2nBb2u4S/rtT9/doLCc6He1PVEoG+3W5k1XVW4QhAsoPRYYVxFujJu +BU01mDxEbSLZDtbHcp0w5y5hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9d+esh AE/P8xGe5mq/0NrNBSYFMB8GA1UdIwQYMBaAFGQhNSrtZEEAa7zkioU0VcjScj24 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1Ni83NDQ2NERFNjYy MTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FRQnJ2T1NLaFRSVnlOSnlQ YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc1Ni83NDQ2NERFNjYyMTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FR QnJ2T1NLaFRSVnlOSnlQYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAekQaBLfemBJyrGVbnamWnUSsozx5Ri19fSY5s/DjMj73hvA0mOohMndXnhqy dczW11+qMfUE0+v2yMLBaiCvuVZuc6eTUbsOkCzc6JIUtkWp/onmX3J5NUWU7m0m sH8JAAK27Fbg52qepGvFhSBeoLyWDsLXlOsSDj6FFEbanYcvEbU6g+x03n9BXjV9 XngvGAPiuqtZzzrEk4cjW7Bdiw0G9huM6mSU9R9TEuyv9Hye7ETREhNset+m1DcK cmbQq0GwTtRnwXvAKS6UunWSLa/4mMzF5Z8Qchj26vbZrFvALDZcGkeoHD3AGXHW xwq+7JdCBdorAMkk81wcpv833g== -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:08 2026 by rpki-client