$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: Q2GFX+7uOZmevBlq6uYWndV9FDGty2iWXxDqBUISK6Q= Subject key identifier: AC:B2:0F:4B:9D:5A:B7:FF:A6:E5:49:2B:1F:39:A2:54:20:38:48:36 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0A5A Signing time: Sat 04 Apr 2026 19:26:55 +0000 Manifest this update: Sat 04 Apr 2026 19:26:54 +0000 Manifest next update: Sat 11 Apr 2026 19:26:54 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: reD7ZXzs8hm2/W5LqpVLvJ2bpZ7z8rJzQGpH9XRBOe0=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: 8/8PcrmV+dwN59za9XSdrEpWpmGqQRkF6xxNtxvBqyg=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 2G7gFlwR8PIkICBXgCXuNRekc12kQ44lhkEmAObcZzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Apr 4 19:26:54 2026 GMT Not After : Apr 11 19:26:54 2026 GMT Subject: CN=69d165ff-a5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2d:19:88:88:cd:ef:69:7c:44:b9:e3:9b:4c: 42:b5:06:a6:d9:0d:de:48:59:85:83:df:ef:f4:43: ea:f0:0c:3b:11:72:f3:1f:5a:fc:07:96:9a:1c:b1: 35:23:b1:de:51:1d:12:cd:e1:7c:12:16:cb:1b:3a: b5:f7:a1:a6:a6:f4:5e:a9:88:81:b4:13:bf:73:ef: 7f:75:ef:e7:a3:64:a9:d6:bf:9c:24:8c:7e:12:79: 24:c2:c0:80:de:dd:1c:04:71:19:07:52:c7:53:8c: ce:73:7c:a9:2e:c3:f0:f1:d2:29:26:a7:ab:a7:b0: 57:ef:9d:ef:63:21:2a:33:41:92:44:b1:f2:b1:49: b3:ea:b2:f6:b4:70:d8:69:ae:cb:32:ef:c6:85:6f: 2c:c9:df:db:df:ef:bc:1c:a9:bd:7d:b7:04:8f:93: 9b:98:9a:b6:2f:bc:2c:ef:db:b1:40:5d:15:3c:c5: c1:ea:be:1e:4e:18:86:b5:e1:18:8a:12:b5:f9:27: 73:07:bf:40:90:3c:81:ba:c1:f4:b8:25:37:6f:d4: 69:64:39:d1:99:8d:7b:11:88:67:d6:cd:65:b9:ba: d4:96:d7:ca:b5:a7:31:b6:5f:de:ef:66:d9:54:63: 25:1c:fb:4d:6f:5e:91:c8:dd:4c:81:51:fe:0d:0c: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B2:0F:4B:9D:5A:B7:FF:A6:E5:49:2B:1F:39:A2:54:20:38:48:36 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:1e:5d:87:94:62:a8:b0:7d:51:23:6b:21:57:08:6a:21: 70:75:7a:72:da:61:1b:ff:25:10:04:23:54:d1:11:ea:48:91: d6:7c:58:76:18:98:31:aa:5d:34:d2:38:10:98:a5:a3:f9:0c: d1:b9:66:6c:b4:ef:06:e6:73:cd:07:21:d4:9e:23:00:b9:1b: 4d:42:4d:19:08:41:64:5b:54:f8:87:a3:f1:b7:cf:33:73:91: a0:63:9e:80:ab:5c:9a:4e:3e:64:6e:03:ac:20:1d:a4:da:bb: 2b:45:b5:c4:b1:11:38:f0:2c:08:24:a2:69:f7:1b:f9:d8:11: d7:8c:d1:1c:2b:6a:4a:b2:d1:d5:96:dc:45:f2:1c:3c:c6:35: 85:f0:44:8e:6e:0d:9d:8b:ae:3a:65:ac:6b:de:81:50:9d:fa: 3e:58:14:78:64:f4:60:9c:27:67:01:6c:a2:ef:dc:08:d5:82: 7e:6f:0c:81:30:45:71:b8:41:ea:ce:55:3d:86:d2:0a:c3:3d: 72:a0:89:c9:a0:99:33:a5:ff:5e:1f:a9:44:37:79:38:c5:8d: 77:f1:68:b4:41:12:99:fc:8e:f2:40:d3:6b:8a:49:ed:b2:3e: 68:89:70:bc:5f:03:74:5b:60:5e:46:64:77:d6:71:df:e5:f2: 75:68:a4:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjYwNDA0MTkyNjU0WhcNMjYwNDExMTkyNjU0WjAYMRYwFAYD VQQDEw02OWQxNjVmZi1hNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3y0ZiIjN72l8RLnjm0xCtQam2Q3eSFmFg9/v9EPq8Aw7EXLzH1r8B5aaHLE1 I7HeUR0SzeF8EhbLGzq196GmpvReqYiBtBO/c+9/de/no2Sp1r+cJIx+EnkkwsCA 3t0cBHEZB1LHU4zOc3ypLsPw8dIpJqerp7BX753vYyEqM0GSRLHysUmz6rL2tHDY aa7LMu/GhW8syd/b3++8HKm9fbcEj5ObmJq2L7ws79uxQF0VPMXB6r4eThiGteEY ihK1+SdzB79AkDyBusH0uCU3b9RpZDnRmY17EYhn1s1lubrUltfKtacxtl/e72bZ VGMlHPtNb16RyN1MgVH+DQytnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyyD0ud Wrf/puVJKx85olQgOEg2MB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlkeXYeUYqiwfVEjayFXCGohcHV6ctphG/8lEAQjVNER6kiR1nxYdhiYMapd NNI4EJilo/kM0blmbLTvBuZzzQch1J4jALkbTUJNGQhBZFtU+Iej8bfPM3ORoGOe gKtcmk4+ZG4DrCAdpNq7K0W1xLEROPAsCCSiafcb+dgR14zRHCtqSrLR1ZbcRfIc PMY1hfBEjm4NnYuuOmWsa96BUJ36PlgUeGT0YJwnZwFsou/cCNWCfm8MgTBFcbhB 6s5VPYbSCsM9cqCJyaCZM6X/Xh+pRDd5OMWNd/FotEESmfyO8kDTa4pJ7bI+aIlw vF8DdFtgXkZkd9Zx3+XydWikxA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:54 2026 by rpki-client