$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json) Hash identifier: jn47qvU8Tjz86iqpG+f9EA0PhaKgaoyhzA/CobNrF2o= Subject key identifier: 33:F2:03:F0:BA:0A:BF:15:29:17:AD:03:4C:BD:A2:F1:83:5B:8B:BE Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft Manifest number: 96 Signing time: Sun 05 Apr 2026 06:47:56 +0000 Manifest this update: Sun 05 Apr 2026 06:47:55 +0000 Manifest next update: Sun 12 Apr 2026 06:47:55 +0000 Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: 6x6zQG5aO3WK7vnJjHhpGXuI41CDR/dqTCoF1otu2Mo=) 2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: daCSAN1/L7FpC1GH73B6zID6rVi/iS9JfJ6E1UGDmuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Validity Not Before: Apr 5 06:47:55 2026 GMT Not After : Apr 12 06:47:55 2026 GMT Subject: CN=69d2059c-67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:fb:10:fd:e4:a4:49:70:1f:b5:09:8d:d5: b2:98:75:d4:90:71:61:0f:11:e8:ae:88:85:04:af: 2c:a5:01:cd:4b:80:12:1c:15:a7:bf:ed:d7:6d:db: 96:5a:44:d9:85:93:4f:ea:eb:e4:c9:34:22:a2:99: 02:69:24:a0:49:9a:b8:17:02:d9:a6:ec:56:30:43: ed:0a:2a:60:ed:e1:75:70:df:04:24:85:e2:d6:4b: 96:67:7d:b9:6c:a3:21:7b:7b:85:b5:88:62:1f:c1: 9e:3e:37:f5:64:63:00:e2:50:5e:81:80:c0:0d:49: 86:ac:b3:ae:c3:8d:a9:89:13:2e:6a:0f:e1:30:29: 44:cf:6c:e9:a6:cf:ff:e5:8d:fd:74:bf:22:af:02: 21:89:16:f4:5f:27:ee:ea:01:1d:69:58:01:5a:d9: 05:a0:f9:2c:a7:93:24:a0:a1:f3:c4:4a:8b:18:e9: f3:76:b8:6c:26:dc:e6:e5:05:7f:8c:b7:45:34:5c: 43:fe:8a:08:54:4f:d5:1b:47:4c:74:94:d0:85:63: 63:81:a0:16:1f:b8:8e:09:b8:72:d8:a3:08:e8:c6: e8:4d:03:d1:7c:eb:e3:09:7f:a9:66:98:cc:47:1a: 90:72:78:57:48:8c:9e:8e:37:01:f5:bd:d5:e1:67: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:03:F0:BA:0A:BF:15:29:17:AD:03:4C:BD:A2:F1:83:5B:8B:BE X509v3 Authority Key Identifier: keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:a8:c6:98:1a:26:24:41:22:db:ca:f7:14:9a:ba:80:ce: 40:61:03:3c:81:f5:02:ab:88:87:f0:e0:70:af:50:6c:1c:48: 2f:fa:df:7a:f0:99:dc:76:d5:67:2c:75:14:64:a3:b3:00:4b: 44:db:09:b9:ae:16:7e:08:4f:38:72:06:65:ec:c5:a4:1f:81: 2a:cb:19:f1:dc:88:b4:43:02:7b:be:8c:19:1d:e3:80:7d:30: 96:be:86:6f:ed:b7:a9:d5:12:c7:3a:28:65:a1:e7:dc:39:b9: 24:d3:b5:49:2c:61:de:0b:ac:0f:2d:d5:84:7d:aa:96:df:02: 2e:c3:44:05:54:f9:f1:e9:a1:f2:95:7f:46:19:0e:b0:3c:0d: 03:c7:9d:db:0c:5c:f4:36:9d:53:7d:8b:3e:89:bf:fd:db:6e: e6:a9:50:5a:c2:8e:94:11:66:dd:cf:84:04:68:0c:6d:02:f3: c7:c3:42:99:d6:de:83:5e:bd:e7:d7:db:20:41:3f:49:2d:c4: 3d:bc:88:0d:80:32:3d:4c:53:58:a2:b7:83:cc:d3:f4:38:c8: 70:b0:b2:5a:02:29:fe:7c:2d:0f:cf:95:f9:04:d1:e1:65:7d: 16:88:a3:32:11:c1:69:db:8f:ae:21:8f:db:28:84:8d:08:db: d8:66:e9:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyM0ExMTAvBgNVBAUTKENDNDRCNjdCRDE4RjQ1RjZFMTM3QURFNDczMTMzNUE1 NTFBNjYxMjcwHhcNMjYwNDA1MDY0NzU1WhcNMjYwNDEyMDY0NzU1WjAYMRYwFAYD VQQDEw02OWQyMDU5Yy02N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqX7EP3kpElwH7UJjdWymHXUkHFhDxHoroiFBK8spQHNS4ASHBWnv+3XbduW WkTZhZNP6uvkyTQiopkCaSSgSZq4FwLZpuxWMEPtCipg7eF1cN8EJIXi1kuWZ325 bKMhe3uFtYhiH8GePjf1ZGMA4lBegYDADUmGrLOuw42piRMuag/hMClEz2zpps// 5Y39dL8irwIhiRb0Xyfu6gEdaVgBWtkFoPksp5MkoKHzxEqLGOnzdrhsJtzm5QV/ jLdFNFxD/ooIVE/VG0dMdJTQhWNjgaAWH7iOCbhy2KMI6MboTQPRfOvjCX+pZpjM RxqQcnhXSIyejjcB9b3V4WfQ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPyA/C6 Cr8VKRetA0y9ovGDW4u+MB8GA1UdIwQYMBaAFMxEtnvRj0X24Tet5HMTNaVRpmEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIzQS9FNzVCODc4QzRD REQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJmYmhONjNrY3hNMXBWR21Z U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pFUzJlOUdQUmZiaE42M2tjeE0xcFZHbVlTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIzQS9FNzVCODc4QzRDREQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJm YmhONjNrY3hNMXBWR21ZU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANDqoxpgaJiRBItvK9xSauoDOQGEDPIH1AquIh/DgcK9QbBxIL/rfevCZ3HbV Zyx1FGSjswBLRNsJua4WfghPOHIGZezFpB+BKssZ8dyItEMCe76MGR3jgH0wlr6G b+23qdUSxzooZaHn3Dm5JNO1SSxh3gusDy3VhH2qlt8CLsNEBVT58emh8pV/RhkO sDwNA8ed2wxc9DadU32LPom//dtu5qlQWsKOlBFm3c+EBGgMbQLzx8NCmdbeg169 59fbIEE/SS3EPbyIDYAyPUxTWKK3g8zT9DjIcLCyWgIp/nwtD8+V+QTR4WV9Foij MhHBaduPriGP2yiEjQjb2GbpbQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:23 2026 by rpki-client