$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: x/711WH/kRVRcm6Tr0Gj3WD50aMRcHHNqfOMrb8Cqcc= Subject key identifier: A5:DD:88:0E:94:48:BD:E3:0C:FD:0D:0C:0D:C5:76:80:89:A1:A4:C5 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2533 Signing time: Thu 16 Apr 2026 15:43:29 +0000 Manifest this update: Thu 16 Apr 2026 15:43:29 +0000 Manifest next update: Thu 23 Apr 2026 15:43:29 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 9TgCDFrAR6Rjn2Q96LI5e2FsOxa2lT34lRbOY7VjfKs=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9555 (0x2553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Apr 16 15:43:29 2026 GMT Not After : Apr 23 15:43:29 2026 GMT Subject: CN=69e103a1-8dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:36:4b:de:4c:bf:83:56:a8:2a:60:a0:44: 9c:4d:19:54:30:0b:f7:c6:71:34:02:a9:d8:6a:a4: 52:3b:0c:d9:2f:ee:cf:b5:63:09:40:bc:31:09:31: 18:bf:78:49:b4:48:1c:36:af:b8:8e:28:90:2a:62: ab:a2:76:4c:0b:89:e4:0e:de:8a:1b:61:94:a1:37: 47:86:10:51:ec:b3:6c:b2:78:00:72:5b:8d:af:11: fc:a8:f6:b2:21:e8:25:04:7c:9e:d6:a4:68:55:0c: 71:49:9a:af:b7:ea:09:6a:f1:a7:9f:8c:cd:14:ed: cc:53:93:9f:e5:2a:c3:13:59:1a:57:06:5f:6a:ab: 7d:af:18:84:70:4b:9d:2a:a6:8d:e9:a6:8b:6e:f2: 50:95:38:76:e0:0a:5d:cf:c6:33:3b:e4:14:ac:2d: 86:2a:21:9b:ac:24:b7:f2:2a:cc:55:b1:91:c2:d4: 1f:8a:b0:62:fc:63:11:ab:2b:2a:74:12:ce:41:93: d5:70:1a:bf:87:be:cc:b4:07:10:52:09:cd:35:a6: 50:43:e6:46:94:e5:36:7f:02:f4:5f:2c:ff:31:b1: 5d:68:9f:19:bc:a8:e6:9a:3c:5e:50:f9:62:bd:4a: 46:13:85:c5:c1:bf:17:05:e0:a7:25:74:43:83:91: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:88:0E:94:48:BD:E3:0C:FD:0D:0C:0D:C5:76:80:89:A1:A4:C5 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:e1:91:91:c1:4a:e7:0e:62:ea:0d:8a:1a:04:5a:59:8d: 5e:65:11:79:66:2b:0b:e5:30:e8:3d:0b:b6:82:d3:be:8a:c5: 8d:85:58:53:4b:a0:11:1d:c8:a4:e1:95:22:a2:c8:e1:41:98: 50:61:bf:57:a4:61:c2:50:df:07:ff:c9:ab:42:1b:67:f1:17: e9:de:6d:17:c2:66:a7:3f:96:4b:c5:1f:20:b4:3d:2e:17:19: ee:e6:be:76:2b:01:53:24:b9:8e:54:01:ae:ac:8d:e1:f3:ce: b1:64:82:83:89:37:c2:7b:4f:56:80:a3:77:95:3a:3c:96:8d: 3d:2b:82:e8:a2:95:75:15:91:8c:2d:2a:c0:03:b7:94:87:74: 9b:83:98:2d:e0:31:29:2f:10:1c:63:d5:36:bf:22:9a:95:0c: 60:71:ca:f0:e7:90:16:e9:d0:d3:df:2f:7c:13:1a:4d:91:aa: d5:ae:d1:5c:d0:c7:a3:59:f8:76:de:d9:fe:94:30:f3:7c:be: 04:87:89:0d:b5:6f:7e:30:06:a4:d1:90:8b:10:33:a6:00:df: f2:43:52:ce:1f:04:7f:42:6c:c5:a7:ca:75:a4:7f:0f:01:d9: 35:82:99:c9:99:69:62:57:3c:49:ab:f7:75:38:51:3d:e1:23: 58:fc:52:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNDE2MTU0MzI5WhcNMjYwNDIzMTU0MzI5WjAYMRYwFAYD VQQDEw02OWUxMDNhMS04ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXs2S95Mv4NWqCpgoEScTRlUMAv3xnE0AqnYaqRSOwzZL+7PtWMJQLwxCTEY v3hJtEgcNq+4jiiQKmKronZMC4nkDt6KG2GUoTdHhhBR7LNssngAcluNrxH8qPay IeglBHye1qRoVQxxSZqvt+oJavGnn4zNFO3MU5Of5SrDE1kaVwZfaqt9rxiEcEud KqaN6aaLbvJQlTh24Apdz8YzO+QUrC2GKiGbrCS38irMVbGRwtQfirBi/GMRqysq dBLOQZPVcBq/h77MtAcQUgnNNaZQQ+ZGlOU2fwL0Xyz/MbFdaJ8ZvKjmmjxeUPli vUpGE4XFwb8XBeCnJXRDg5GesQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXdiA6U SL3jDP0NDA3FdoCJoaTFMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlTHhkZHBSucOYuoNihoEWlmNXmUReWYrC+Uw6D0LtoLTvorFjYVYU0ugER3I pOGVIqLI4UGYUGG/V6RhwlDfB//Jq0IbZ/EX6d5tF8Jmpz+WS8UfILQ9LhcZ7ua+ disBUyS5jlQBrqyN4fPOsWSCg4k3wntPVoCjd5U6PJaNPSuC6KKVdRWRjC0qwAO3 lId0m4OYLeAxKS8QHGPVNr8impUMYHHK8OeQFunQ098vfBMaTZGq1a7RXNDHo1n4 dt7Z/pQw83y+BIeJDbVvfjAGpNGQixAzpgDf8kNSzh8Ef0JsxafKdaR/DwHZNYKZ yZlpYlc8Sav3dThRPeEjWPxSAw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:08 2026 by rpki-client