$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: ud/nfyP4qAe8WxjoPhS6p2qc7Gyrw9c2mEbp9b9pJRE= Subject key identifier: 8D:5B:74:5C:00:54:4D:40:D5:F9:7B:5D:8A:80:3C:97:3F:B3:F4:2C Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 94 Signing time: Sun 05 Apr 2026 06:50:26 +0000 Manifest this update: Sun 05 Apr 2026 06:50:25 +0000 Manifest next update: Sun 12 Apr 2026 06:50:25 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: pZSIxsW7CX66TLZW10ad651FLgMSBpmTPppmiJT/LNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Apr 5 06:50:25 2026 GMT Not After : Apr 12 06:50:25 2026 GMT Subject: CN=69d20632-2dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:ba:6f:a9:97:49:72:d1:94:17:bd:c4:28: d1:a8:8b:a4:ce:25:72:93:9f:1d:ed:56:22:41:46: 69:75:23:b6:c0:56:1b:f9:ed:e7:30:61:c3:7f:d4: ef:6e:58:6a:57:ce:09:9f:52:26:f9:2e:21:e8:5b: 85:65:32:6d:d2:a8:29:27:a7:e0:60:4c:25:1a:15: eb:62:ac:76:83:2e:30:9f:e7:07:c9:ac:dc:69:f1: 9d:f8:8a:2f:93:d3:fd:f1:72:4f:65:33:7f:60:8e: 83:ad:ab:3b:a6:a1:fe:4b:fe:5c:ad:92:46:67:20: 0f:60:bb:1e:cc:bd:2c:3b:e6:6b:4c:c6:9a:65:94: 6b:70:0f:7f:09:df:50:32:d0:50:48:d4:b6:56:fc: 92:b3:86:be:3e:03:56:49:03:89:d6:97:ed:08:51: 4b:7c:d1:34:68:f7:e2:7f:2e:fb:0e:bf:05:ca:63: ed:94:3f:8d:a2:78:18:f7:02:24:f5:e0:e1:0b:20: a9:56:c1:a7:fc:b7:3e:4e:4a:3b:fe:63:31:83:d4: da:ba:aa:a1:26:e1:e8:44:7b:32:27:6b:83:fa:35: e2:5d:e3:34:88:3e:a8:e1:2a:cc:bd:a5:72:0f:65: 99:ef:44:ed:d9:e6:d6:b2:0e:e8:25:45:00:3e:a0: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5B:74:5C:00:54:4D:40:D5:F9:7B:5D:8A:80:3C:97:3F:B3:F4:2C X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c7:c7:32:6a:75:d5:cf:2d:82:4d:51:4d:7c:f0:d0:db:3e: eb:67:2a:5f:81:98:29:7a:e1:08:5e:f7:f6:f6:8a:81:49:7e: 75:3e:fb:ec:e2:ce:54:96:6e:66:db:0c:85:43:23:3d:3f:3f: a2:27:5e:4f:29:9e:c6:66:d9:6a:09:44:f4:97:84:53:26:37: c5:fb:f7:9d:aa:31:c9:0d:bb:32:f7:bc:d9:b9:c0:17:42:7d: 62:4a:12:dd:f4:21:30:3c:63:08:13:63:83:a7:b6:6f:b0:43: 99:73:46:92:1e:3f:53:ba:02:db:78:43:62:a3:34:5c:6a:9a: 4b:0f:d2:c9:83:e6:f1:d1:2c:f5:24:ab:a4:84:b7:3b:f9:1a: 9c:4f:7b:0f:50:7d:4c:a0:53:2b:99:d4:8d:9e:60:82:ef:38: d8:76:fe:95:e7:f1:ba:ec:60:6a:78:48:12:89:d9:89:10:7a: 4a:55:9f:8b:57:52:09:5e:3c:ec:ff:9c:25:82:bb:a8:46:e5: 11:62:af:51:14:76:d1:75:d5:40:b3:28:91:90:8e:e1:52:6f: 11:fd:54:85:99:76:c0:b2:ba:bc:52:57:2d:5b:f0:49:b5:b6: 40:e5:c7:28:23:78:4e:83:8f:51:92:a4:f3:ca:99:3e:5a:7a: 48:a0:fa:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1QzgxMTAvBgNVBAUTKENGNkYxMkRCREU0QkU5MTM0NTgxNThGNUM3Nzg1Qzcx MjkwODU1NUMwHhcNMjYwNDA1MDY1MDI1WhcNMjYwNDEyMDY1MDI1WjAYMRYwFAYD VQQDEw02OWQyMDYzMi0yZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMy6b6mXSXLRlBe9xCjRqIukziVyk58d7VYiQUZpdSO2wFYb+e3nMGHDf9Tv blhqV84Jn1Im+S4h6FuFZTJt0qgpJ6fgYEwlGhXrYqx2gy4wn+cHyazcafGd+Iov k9P98XJPZTN/YI6Dras7pqH+S/5crZJGZyAPYLsezL0sO+ZrTMaaZZRrcA9/Cd9Q MtBQSNS2VvySs4a+PgNWSQOJ1pftCFFLfNE0aPfify77Dr8FymPtlD+NongY9wIk 9eDhCyCpVsGn/Lc+Tko7/mMxg9TauqqhJuHoRHsyJ2uD+jXiXeM0iD6o4SrMvaVy D2WZ70Tt2ebWsg7oJUUAPqCwgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1bdFwA VE1A1fl7XYqAPJc/s/QsMB8GA1UdIwQYMBaAFM9vEtveS+kTRYFY9cd4XHEpCFVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjVDOC8zQkNEMUJFQTU1 OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZSTkZnVmoxeDNoY2NTa0lW VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjVDOC8zQkNEMUJFQTU1OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZS TkZnVmoxeDNoY2NTa0lWVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGMfHMmp11c8tgk1RTXzw0Ns+62cqX4GYKXrhCF739vaKgUl+dT777OLOVJZu ZtsMhUMjPT8/oideTymexmbZaglE9JeEUyY3xfv3naoxyQ27Mve82bnAF0J9YkoS 3fQhMDxjCBNjg6e2b7BDmXNGkh4/U7oC23hDYqM0XGqaSw/SyYPm8dEs9SSrpIS3 O/kanE97D1B9TKBTK5nUjZ5ggu842Hb+lefxuuxganhIEonZiRB6SlWfi1dSCV48 7P+cJYK7qEblEWKvURR20XXVQLMokZCO4VJvEf1UhZl2wLK6vFJXLVvwSbW2QOXH KCN4ToOPUZKk88qZPlp6SKD67A== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:34 2026 by rpki-client