$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: 4IyCBSKtbURaVrZRoqrNdsA4C0+EdnV/8oceslmXtc8= Subject key identifier: 01:A7:61:F3:FF:D9:6C:A0:FF:C1:22:44:AF:74:67:D6:4E:6F:3F:F4 Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: 016D Signing time: Sun 05 Apr 2026 04:32:22 +0000 Manifest this update: Sun 05 Apr 2026 04:32:21 +0000 Manifest next update: Sun 12 Apr 2026 04:32:21 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: 8qdGJgNY3W1adop1u8MnpB7/tO191XmG983wBuNWcRw=) 2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 67zPveAGWACKXH5KBWrmkt2SFJ5lwQJInUFCgeAJkNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Apr 5 04:32:21 2026 GMT Not After : Apr 12 04:32:21 2026 GMT Subject: CN=69d1e5d6-c75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:a1:53:de:81:5a:36:2c:e8:ac:0d:b3:ba: 2a:27:b7:88:e8:ef:31:96:fb:84:6f:fa:4a:85:dc: 28:b9:3a:e2:f7:53:d5:f4:d0:1a:20:ee:09:48:d7: 30:c8:b2:85:e0:38:d7:bd:bf:b3:55:dc:6d:66:47: 28:0f:c2:2f:2e:46:a5:a5:91:e9:3b:95:54:01:c7: 64:18:6a:b2:b6:ab:55:42:a0:f4:67:62:ab:76:35: 0b:0a:fe:61:ca:18:4b:42:c2:22:48:2f:90:28:10: bc:87:63:9c:6d:bb:7b:f4:32:6f:61:97:bf:97:79: cb:63:87:dc:7d:59:7d:0e:83:78:ab:0f:d7:00:38: 2c:a1:cf:8b:ab:1a:c8:b4:f0:0f:e4:4e:25:fa:93: 70:f2:27:62:51:8b:f8:9a:e7:eb:3e:05:27:9d:f3: bb:75:d2:f4:f4:5b:1d:8f:04:b8:5b:0b:c0:e8:51: 3e:39:18:c6:6c:74:a8:40:e0:b2:ed:9b:e0:32:b2: b5:1e:72:92:bf:69:d4:c1:df:ca:fc:33:e2:a0:35: 1d:b8:38:4d:3c:b0:47:fa:a1:a9:69:63:18:9d:95: 85:64:08:06:c3:fc:3b:05:bb:c0:e4:43:22:b4:01: 04:9e:e5:df:b7:92:87:d5:5b:6c:53:4f:85:f2:f1: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A7:61:F3:FF:D9:6C:A0:FF:C1:22:44:AF:74:67:D6:4E:6F:3F:F4 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:47:4b:5a:41:22:35:41:61:0c:c8:20:a6:57:4a:12:f5:d4: 14:d9:a7:f2:ae:1f:f1:4e:db:fd:25:a9:09:36:e0:9e:76:2b: 25:3c:15:b6:c3:ed:ff:0e:44:70:39:bb:9a:4b:40:8e:49:f4: 84:f8:33:e6:80:aa:61:07:64:1e:01:4d:76:b2:17:88:56:83: d9:05:40:4c:cc:b8:bb:0f:dc:df:67:98:13:80:f6:ab:fb:cc: 1b:e7:b4:23:94:97:32:40:42:cb:48:97:7a:7b:cb:d6:7a:5a: e7:05:d9:94:3d:9b:f3:fb:69:05:7a:43:d1:25:8c:92:3a:fa: 30:ab:bf:da:5a:75:c2:ac:dd:bc:81:ef:be:37:bc:03:0e:87: 90:27:a3:62:04:3c:2c:82:b7:cd:67:9f:9f:6b:f3:cf:5f:49: dc:53:95:c4:ab:8a:4e:e1:bc:63:99:13:9a:66:f3:92:bc:57: 44:76:61:62:7e:96:6f:94:81:af:a3:45:81:40:1b:fd:0d:74: 78:26:7f:08:7e:0c:a3:6d:1e:2a:bf:93:4d:a7:db:a1:12:78: 36:14:3e:ba:e4:df:3d:4d:8b:5f:0a:7c:b0:2c:89:aa:d2:50: dc:2c:3c:5b:3b:97:9f:28:e1:69:a2:c4:f4:74:31:8d:c8:2e: 5d:a6:49:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjYwNDA1MDQzMjIxWhcNMjYwNDEyMDQzMjIxWjAYMRYwFAYD VQQDEw02OWQxZTVkNi1jNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurmhU96BWjYs6KwNs7oqJ7eI6O8xlvuEb/pKhdwouTri91PV9NAaIO4JSNcw yLKF4DjXvb+zVdxtZkcoD8IvLkalpZHpO5VUAcdkGGqytqtVQqD0Z2KrdjULCv5h yhhLQsIiSC+QKBC8h2Ocbbt79DJvYZe/l3nLY4fcfVl9DoN4qw/XADgsoc+LqxrI tPAP5E4l+pNw8idiUYv4mufrPgUnnfO7ddL09FsdjwS4WwvA6FE+ORjGbHSoQOCy 7ZvgMrK1HnKSv2nUwd/K/DPioDUduDhNPLBH+qGpaWMYnZWFZAgGw/w7BbvA5EMi tAEEnuXft5KH1VtsU0+F8vGGLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGnYfP/ 2Wyg/8EiRK90Z9ZObz/0MB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN0dLWkEiNUFhDMggpldKEvXUFNmn8q4f8U7b/SWpCTbgnnYrJTwVtsPt/w5E cDm7mktAjkn0hPgz5oCqYQdkHgFNdrIXiFaD2QVATMy4uw/c32eYE4D2q/vMG+e0 I5SXMkBCy0iXenvL1npa5wXZlD2b8/tpBXpD0SWMkjr6MKu/2lp1wqzdvIHvvje8 Aw6HkCejYgQ8LIK3zWefn2vzz19J3FOVxKuKTuG8Y5kTmmbzkrxXRHZhYn6Wb5SB r6NFgUAb/Q10eCZ/CH4Mo20eKr+TTafboRJ4NhQ+uuTfPU2LXwp8sCyJqtJQ3Cw8 WzuXnyjhaaLE9HQxjcguXaZJVg== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client