$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: 0IEvFLcjkBPCs/odntsrjN/3lY8J4Zha4FdY0pwqhEE= Subject key identifier: CF:5C:5C:A6:00:8A:94:99:4A:30:B9:76:E2:D7:49:7B:21:96:96:BF Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 0246 Signing time: Sun 05 Apr 2026 01:58:49 +0000 Manifest this update: Sun 05 Apr 2026 01:58:49 +0000 Manifest next update: Sun 12 Apr 2026 01:58:49 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: d2YsD/VMYJ8Es5QGMkRz5s2jjWQqlAhQOEQoU9rFrzM=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: zv8nloA9U8eAmryUp26vTAYnavKSs7YqUby16TlyAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Apr 5 01:58:49 2026 GMT Not After : Apr 12 01:58:49 2026 GMT Subject: CN=69d1c1d9-5472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:b0:00:e7:ad:8b:c6:ba:18:bc:34:f8:18: 64:f6:a1:00:20:57:33:e4:12:6b:1d:a5:3e:3e:8d: 85:3a:0e:e9:01:fa:4a:8b:79:48:9c:7e:24:f2:4e: e3:86:9a:c5:92:a5:a1:1e:5a:8b:e3:e9:4b:f9:fd: 9e:6f:33:73:43:40:fd:0b:fe:d3:4c:eb:13:5f:e1: 17:54:57:ba:ad:6b:d4:8e:a3:a5:1e:e0:05:e7:d2: e6:e3:a4:98:0e:7a:a1:eb:5b:95:2c:73:0a:eb:b0: 4b:18:0e:00:99:f7:f1:0a:4c:11:c4:bd:b8:18:2b: 59:1d:f0:00:fd:c1:72:83:df:c0:d4:f9:3c:8e:a8: ee:74:63:07:a1:f5:a2:f3:56:99:7e:81:ce:bb:d6: d5:0d:db:de:86:9b:68:a6:30:35:00:61:e5:4d:77: f7:88:43:a6:42:95:dc:d9:18:99:4f:f7:bb:3e:86: a2:9d:23:59:fa:48:73:52:2e:c3:f1:e2:49:3f:9b: b9:a9:df:40:2f:b5:88:c3:09:7a:e5:f6:0a:68:e0: 2c:15:b2:51:b4:60:00:9f:40:ba:47:7f:87:c4:d3: d7:7a:de:56:83:56:b9:e7:a1:fe:de:d0:92:6c:70: 7d:ad:0b:fa:2f:6c:f1:be:25:ff:4a:ef:c1:2f:ea: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5C:5C:A6:00:8A:94:99:4A:30:B9:76:E2:D7:49:7B:21:96:96:BF X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e8:99:e3:b8:22:92:9e:24:b2:c3:36:d7:1e:1c:28:33:c3: fa:c1:69:7d:a0:d5:e8:e7:ce:48:81:ba:1a:da:4a:d5:8e:e9: 5e:e2:33:9e:8e:39:f0:49:05:43:6c:7b:e6:be:ed:84:b3:28: dc:6d:82:5c:dc:2e:80:85:b8:a7:ea:c0:b4:b4:a8:5e:7c:1a: dc:ae:3e:2e:63:b1:c9:5b:da:67:dc:cc:30:ad:e2:2c:4a:dc: 76:c7:43:13:d8:7c:a8:d8:e5:10:3e:28:67:5a:9d:7c:d4:e5: d6:78:14:f5:96:a5:20:a9:0c:3a:ae:50:b2:df:0b:1c:07:bb: 5b:8b:c2:29:55:5d:2a:8a:7b:ce:96:7c:1f:f6:3e:ce:86:52: 45:e7:b3:40:fd:78:22:4a:c5:12:d5:34:8d:5a:21:3c:cf:ea: 91:e9:3c:ba:ff:58:88:51:36:26:3a:ce:b4:b5:e9:a2:22:5a: 06:9a:65:4e:f2:42:e2:81:1c:27:b9:84:2a:75:38:f1:38:98: f4:03:88:48:4f:79:2d:70:7a:09:b4:8e:e3:44:61:b0:7b:00: 96:95:5b:58:54:4e:3f:f8:3d:44:07:e8:30:35:19:0e:f2:68: 44:7e:fb:a4:4e:76:66:87:66:92:3d:87:cd:f6:47:54:12:87: 6c:3f:2d:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjYwNDA1MDE1ODQ5WhcNMjYwNDEyMDE1ODQ5WjAYMRYwFAYD VQQDEw02OWQxYzFkOS01NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlawAOeti8a6GLw0+Bhk9qEAIFcz5BJrHaU+Po2FOg7pAfpKi3lInH4k8k7j hprFkqWhHlqL4+lL+f2ebzNzQ0D9C/7TTOsTX+EXVFe6rWvUjqOlHuAF59Lm46SY Dnqh61uVLHMK67BLGA4AmffxCkwRxL24GCtZHfAA/cFyg9/A1Pk8jqjudGMHofWi 81aZfoHOu9bVDdvehptopjA1AGHlTXf3iEOmQpXc2RiZT/e7PoainSNZ+khzUi7D 8eJJP5u5qd9AL7WIwwl65fYKaOAsFbJRtGAAn0C6R3+HxNPXet5Wg1a556H+3tCS bHB9rQv6L2zxviX/Su/BL+qtpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9cXKYA ipSZSjC5duLXSXshlpa/MB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaeiZ47gikp4kssM21x4cKDPD+sFpfaDV6OfOSIG6GtpK1Y7pXuIzno458EkF Q2x75r7thLMo3G2CXNwugIW4p+rAtLSoXnwa3K4+LmOxyVvaZ9zMMK3iLErcdsdD E9h8qNjlED4oZ1qdfNTl1ngU9ZalIKkMOq5Qst8LHAe7W4vCKVVdKop7zpZ8H/Y+ zoZSReezQP14IkrFEtU0jVohPM/qkek8uv9YiFE2JjrOtLXpoiJaBpplTvJC4oEc J7mEKnU48TiY9AOISE95LXB6CbSO40RhsHsAlpVbWFROP/g9RAfoMDUZDvJoRH77 pE52Zodmkj2HzfZHVBKHbD8t9g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:19 2026 by rpki-client