$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: rdQAJ+OyFyTjKE+jijhV4K+EWSnntO5UgFLStfVquNo= Subject key identifier: FA:C6:98:C2:C6:E8:56:08:56:89:7A:03:DA:5C:6C:87:13:03:50:6E Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17BC Signing time: Thu 16 Apr 2026 16:30:41 +0000 Manifest this update: Thu 16 Apr 2026 16:30:40 +0000 Manifest next update: Thu 23 Apr 2026 16:30:40 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: ebp5PdC4c1bGZ+bTnT79zxLv145ziqEGQoBMuIVgXBk=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6089 (0x17c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Apr 16 16:30:40 2026 GMT Not After : Apr 23 16:30:40 2026 GMT Subject: CN=69e10eb0-584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:75:61:8e:28:bf:88:b4:6a:5a:f7:3d:32: 14:30:25:92:e1:63:0e:57:20:32:4f:b7:b4:58:c3: fe:eb:45:15:c2:5a:4c:89:7f:22:c9:9f:bb:04:4c: 53:cf:f2:58:db:7a:56:f4:d8:ce:88:4f:de:3d:7f: e6:5c:87:9d:ae:56:84:8a:24:ca:c3:21:8a:5e:13: 30:f5:25:02:68:3a:a3:22:bb:32:34:f1:8f:30:d7: 22:c4:ee:83:95:56:75:02:88:fc:c5:5e:e8:8e:c9: 06:a2:4f:ed:88:b3:29:a2:60:fb:e0:22:1c:ff:72: 99:9c:15:85:ce:a1:7f:0a:0b:49:17:82:c9:9c:f9: ee:f8:f5:20:c6:38:0f:fe:eb:83:3d:a6:ab:ed:78: 59:30:73:e1:b4:ac:50:18:a3:8e:73:aa:fb:cc:8a: 0f:d7:ed:c6:e5:3b:b2:3c:e9:5b:79:34:ed:c1:16: 0f:db:8d:cf:21:95:84:49:55:12:98:8d:97:62:5a: d9:08:b5:27:14:61:34:5f:58:e7:37:eb:df:31:02: 63:84:04:05:99:e4:40:f3:11:6e:f7:4f:38:eb:92: 33:36:cc:c3:44:21:c5:a1:45:e3:b5:6e:21:b8:04: 1c:b3:1a:6f:5c:35:62:24:c3:38:a0:d6:ac:dc:45: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C6:98:C2:C6:E8:56:08:56:89:7A:03:DA:5C:6C:87:13:03:50:6E X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:48:ea:bf:d1:71:6d:d4:de:0b:c1:56:84:90:b8:8b:b6:49: c8:f3:0c:b5:58:a8:11:7f:d9:c4:5c:ea:c3:f8:3d:98:cf:3f: 1f:9a:dc:66:6b:30:0b:b9:c8:8a:b2:e9:e7:d7:ce:10:2e:59: 93:66:d7:92:b6:8d:a2:68:2c:72:c7:41:2a:a4:57:da:b6:39: db:97:3e:58:bf:73:e4:83:53:5a:0b:29:f4:af:13:d8:a1:7c: 51:ca:9f:43:a8:ef:11:8f:6b:8f:27:31:d1:26:ac:a3:4f:80: c2:de:c9:94:7f:98:87:b1:1a:e9:d2:b9:a9:ce:a7:5d:07:3d: 5f:4c:6f:c6:e4:ce:eb:a9:fd:e2:60:d7:dd:88:83:0a:20:9a: e0:28:66:10:7d:ca:19:b8:c3:03:cb:da:ac:6b:94:72:83:21: 15:b5:b5:91:05:06:e8:10:5d:7f:c8:a1:f9:4b:5b:dd:dd:a9: 19:ed:7d:47:41:58:79:d7:7f:d5:21:c6:f2:2b:ca:5c:74:27: 98:93:fe:47:9a:7e:58:c8:f2:52:b9:32:63:79:f2:93:9c:4a: 69:67:dd:bd:13:28:d2:7d:e3:19:46:be:db:b6:20:57:bb:60: 9d:6b:b9:b1:cb:29:ee:91:57:0c:81:51:7a:cb:8b:09:18:a6: 8e:a8:d0:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwNDE2MTYzMDQwWhcNMjYwNDIzMTYzMDQwWjAYMRYwFAYD VQQDEw02OWUxMGViMC01ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkup1YY4ov4i0alr3PTIUMCWS4WMOVyAyT7e0WMP+60UVwlpMiX8iyZ+7BExT z/JY23pW9NjOiE/ePX/mXIedrlaEiiTKwyGKXhMw9SUCaDqjIrsyNPGPMNcixO6D lVZ1Aoj8xV7ojskGok/tiLMpomD74CIc/3KZnBWFzqF/CgtJF4LJnPnu+PUgxjgP /uuDPaar7XhZMHPhtKxQGKOOc6r7zIoP1+3G5TuyPOlbeTTtwRYP243PIZWESVUS mI2XYlrZCLUnFGE0X1jnN+vfMQJjhAQFmeRA8xFu908465IzNszDRCHFoUXjtW4h uAQcsxpvXDViJMM4oNas3EVHewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrGmMLG 6FYIVol6A9pcbIcTA1BuMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikjqv9FxbdTeC8FWhJC4i7ZJyPMMtVioEX/ZxFzqw/g9mM8/H5rcZmswC7nI irLp59fOEC5Zk2bXkraNomgscsdBKqRX2rY525c+WL9z5INTWgsp9K8T2KF8Ucqf Q6jvEY9rjycx0Saso0+Awt7JlH+Yh7Ea6dK5qc6nXQc9X0xvxuTO66n94mDX3YiD CiCa4ChmEH3KGbjDA8varGuUcoMhFbW1kQUG6BBdf8ih+Utb3d2pGe19R0FYedd/ 1SHG8ivKXHQnmJP+R5p+WMjyUrkyY3nyk5xKaWfdvRMo0n3jGUa+27YgV7tgnWu5 scsp7pFXDIFResuLCRimjqjQDw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:06 2026 by rpki-client