$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: 76L79052Q3Mx3oE8DH6nVZ42m1stFk2EUeD6g/yxujo= Subject key identifier: 7C:A2:F5:47:92:FA:67:2B:F7:14:91:D5:B4:11:83:F3:C9:11:8C:60 Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 25 Signing time: Sun 05 Apr 2026 08:08:49 +0000 Manifest this update: Sun 05 Apr 2026 08:08:49 +0000 Manifest next update: Sun 12 Apr 2026 08:08:49 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: C6gT+ng8v8kDs6ylVB5EMnA1EERUfBj0c0eVdePNhwo=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: Apr 5 08:08:49 2026 GMT Not After : Apr 12 08:08:49 2026 GMT Subject: CN=69d21891-09e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:87:52:74:1f:8a:9d:0f:6a:4a:5f:18:01: 25:0f:59:b5:51:31:73:52:6a:b5:cf:84:ca:15:6b: fb:88:43:46:99:61:ea:77:5c:29:68:3b:49:90:df: 4c:7f:49:c7:e3:46:e8:66:3b:18:00:d6:ec:bc:20: aa:ef:57:82:a5:89:69:e3:f9:e2:d7:ca:de:d7:bd: aa:36:b3:9d:a1:3e:dd:61:1f:54:2a:e2:d2:8a:b1: 0f:61:c4:45:11:4a:74:8a:64:95:94:b4:ca:6e:50: e2:dc:5f:32:d1:01:82:00:69:c4:f7:dc:c1:1a:bf: 3a:59:04:b1:7b:05:b7:57:06:a8:e6:8c:ad:b9:a2: a5:db:b7:38:14:4e:90:c4:71:1c:7c:72:d4:9c:b9: 01:24:da:45:a2:90:0c:11:a2:8f:67:c7:a5:cd:80: 8b:23:55:bd:7f:94:6b:40:ef:58:bc:8b:e8:97:94: d7:a3:5b:95:38:ca:a0:2d:fa:59:bf:81:36:50:cc: 13:73:27:56:c4:b4:b7:b9:c4:75:1e:84:76:3e:2c: 7e:ed:3b:b2:f0:d8:5f:25:42:81:ea:dd:89:fb:57: e8:23:ea:87:a3:3b:ca:cc:85:08:dd:16:46:3d:b4: 45:7e:28:1c:68:d9:e7:e5:de:7e:f5:3f:5e:ba:a7: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:F5:47:92:FA:67:2B:F7:14:91:D5:B4:11:83:F3:C9:11:8C:60 X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b5:33:00:53:b0:5e:cb:b0:db:3c:d2:85:06:1d:25:ed:41: 13:b3:ea:56:09:7c:33:a4:4a:a8:20:2d:6a:0c:69:ff:a9:c3: b8:55:c7:2f:c8:51:da:ca:c0:49:5b:02:21:93:40:6b:41:15: 46:94:93:65:ce:4a:d7:99:15:3d:63:ef:09:2f:69:c6:bb:42: 61:0f:62:c0:a1:bc:88:0f:d6:8f:2f:82:6f:d6:65:d0:70:7c: 63:10:ca:3c:ca:de:22:8a:fd:cf:08:19:d8:ce:d1:55:dd:f2: 19:ae:08:96:34:9b:d1:3b:19:96:8e:01:97:0a:3e:9b:2a:02: 01:f0:4d:d0:77:50:94:67:b8:6d:83:c7:b1:83:0f:6d:ee:53: c0:2a:16:86:69:8f:de:10:1b:ef:41:e3:b9:e7:67:d8:8c:8e: 46:6d:f0:9a:7c:a3:70:92:77:1c:6d:d6:9b:5d:3a:67:e1:59: cb:40:3f:00:69:80:59:4c:d4:65:e4:2b:47:91:e4:8e:00:47: ae:2f:f9:24:7b:48:d5:fb:b7:fc:6e:9e:76:32:fa:37:c0:ba: 34:2e:be:4d:3d:b9:74:af:c0:1f:51:70:25:82:75:ec:96:3c: 3b:20:76:13:ab:c4:05:51:2e:c9:88:30:f3:da:51:53:7c:68: 76:77:3d:6a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjA0MDUwODA4NDlaFw0yNjA0MTIwODA4NDlaMBgxFjAUBgNV BAMTDTY5ZDIxODkxLTA5ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuXodSdB+KnQ9qSl8YASUPWbVRMXNSarXPhMoVa/uIQ0aZYep3XCloO0mQ30x/ ScfjRuhmOxgA1uy8IKrvV4KliWnj+eLXyt7Xvao2s52hPt1hH1Qq4tKKsQ9hxEUR SnSKZJWUtMpuUOLcXzLRAYIAacT33MEavzpZBLF7BbdXBqjmjK25oqXbtzgUTpDE cRx8ctScuQEk2kWikAwRoo9nx6XNgIsjVb1/lGtA71i8i+iXlNejW5U4yqAt+lm/ gTZQzBNzJ1bEtLe5xHUehHY+LH7tO7Lw2F8lQoHq3Yn7V+gj6oejO8rMhQjdFkY9 tEV+KBxo2efl3n71P166pz3FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfKL1R5L6 Zyv3FJHVtBGD88kRjGAwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQActTMAU7Bey7DbPNKFBh0l7UETs+pWCXwzpEqoIC1qDGn/qcO4VccvyFHaysBJ WwIhk0BrQRVGlJNlzkrXmRU9Y+8JL2nGu0JhD2LAobyID9aPL4Jv1mXQcHxjEMo8 yt4iiv3PCBnYztFV3fIZrgiWNJvROxmWjgGXCj6bKgIB8E3Qd1CUZ7htg8exgw9t 7lPAKhaGaY/eEBvvQeO552fYjI5GbfCafKNwknccbdabXTpn4VnLQD8AaYBZTNRl 5CtHkeSOAEeuL/kke0jV+7f8bp52Mvo3wLo0Lr5NPbl0r8AfUXAlgnXsljw7IHYT q8QFUS7JiDDz2lFTfGh2dz1q -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:20 2026 by rpki-client