$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: GT+liJL9OSIqb9xYQslI0Lc4753neaWfJSlC8AmnX+A= Subject key identifier: BB:B1:17:26:FA:6C:7C:0F:35:5F:C5:1F:8E:C3:AA:99:2E:57:B5:B5 Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: 0143 Signing time: Sun 05 Apr 2026 04:42:04 +0000 Manifest this update: Sun 05 Apr 2026 04:42:04 +0000 Manifest next update: Sun 12 Apr 2026 04:42:04 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: rEV8ygeJ2SHoRgfymRfhj9/tHUFScQ3gQr+1RNqB3QE=) 2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: wogzPFrO6PioOLcaFojHXvQTNXcyldVbnRyjuhu4nbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Apr 5 04:42:04 2026 GMT Not After : Apr 12 04:42:04 2026 GMT Subject: CN=69d1e81c-6da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:d1:19:2c:eb:66:38:c2:86:e2:fb:f4:03: 9f:b4:9d:52:e4:9f:28:e4:aa:58:a5:f7:d6:a9:bc: f5:12:1c:ce:7a:fe:9f:15:ae:0b:34:91:0f:21:be: 85:2c:17:32:69:39:9b:42:90:2b:60:ba:2a:ae:d0: ac:27:cd:ca:26:38:39:c3:2d:a5:32:df:70:e9:36: c0:6f:f0:aa:92:50:63:a1:de:02:d6:2e:a4:58:27: aa:3f:8e:53:78:5e:cc:16:a9:de:af:07:cb:af:b3: 18:0c:67:92:ff:37:77:f4:7c:26:ce:4e:30:2d:6a: 73:f0:c6:b5:5f:ac:1a:19:01:e8:ea:c2:ba:42:5b: 41:5b:69:6a:43:93:33:fd:b2:3d:e0:38:69:9f:4c: 6c:65:69:66:9d:40:fd:34:0a:f7:a3:05:a5:5c:ea: 3e:5f:9e:ad:62:9d:60:d0:10:1d:45:df:8e:4e:ae: a5:62:67:ae:7c:49:50:7a:56:ac:f1:e8:83:3a:b0: 34:52:95:ae:6c:66:a0:4b:40:1e:d2:8d:ee:ab:89: ae:0c:bc:83:3a:72:a1:af:9f:d6:51:53:be:d2:cc: e7:a6:a8:6a:1f:ee:c7:b0:46:9a:5c:9b:a9:f1:a4: 2e:f6:f9:23:77:fa:77:fc:ca:2a:ea:a8:67:fb:53: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:17:26:FA:6C:7C:0F:35:5F:C5:1F:8E:C3:AA:99:2E:57:B5:B5 X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:06:50:ad:75:c1:c5:18:c0:66:59:fc:81:aa:7f:ea:92:95: 7b:ec:0c:9d:42:17:c6:f1:41:91:eb:cf:85:4c:af:6b:67:15: f4:d5:dd:1e:d1:63:b8:d9:fc:37:47:49:60:18:64:56:a9:b4: c0:6b:5e:a5:66:bb:2b:3d:a3:7c:26:52:fb:ac:21:36:84:02: 38:b5:b0:66:81:fc:9f:b4:36:06:9e:a0:15:9c:7c:cb:69:f5: 2e:38:78:14:ed:fe:8d:d8:20:19:a7:27:c7:88:eb:8d:c4:d2: c5:2f:ad:ef:81:88:99:53:84:17:dc:2d:35:18:a8:70:78:d5: d5:f3:d7:51:8d:b9:9d:d2:ec:9e:4a:7f:67:8c:2d:2f:55:a2: 44:38:8d:6e:5a:d6:7b:5f:c7:d2:78:0b:07:a3:ad:85:9f:b6: e0:d0:8e:58:13:b4:1d:46:81:9a:9c:05:fa:e8:57:c1:b6:54: 07:a0:33:5a:c5:30:c2:3e:22:5d:b7:f4:d2:35:ad:d6:8f:57: d4:2b:c1:0d:cc:41:82:0a:ea:a1:65:24:50:b5:43:1e:1c:c1: 97:43:4b:c2:96:35:48:6c:7c:54:6b:71:31:fe:41:d4:76:c0: cf:41:13:6a:4c:b3:89:cf:61:f5:4b:2b:a3:db:3c:20:e1:fe: 98:6c:9a:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjYwNDA1MDQ0MjA0WhcNMjYwNDEyMDQ0MjA0WjAYMRYwFAYD VQQDEw02OWQxZTgxYy02ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N3RGSzrZjjChuL79AOftJ1S5J8o5KpYpffWqbz1EhzOev6fFa4LNJEPIb6F LBcyaTmbQpArYLoqrtCsJ83KJjg5wy2lMt9w6TbAb/CqklBjod4C1i6kWCeqP45T eF7MFqnerwfLr7MYDGeS/zd39Hwmzk4wLWpz8Ma1X6waGQHo6sK6QltBW2lqQ5Mz /bI94Dhpn0xsZWlmnUD9NAr3owWlXOo+X56tYp1g0BAdRd+OTq6lYmeufElQelas 8eiDOrA0UpWubGagS0Ae0o3uq4muDLyDOnKhr5/WUVO+0sznpqhqH+7HsEaaXJup 8aQu9vkjd/p3/Moq6qhn+1Mn4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuxFyb6 bHwPNV/FH47DqpkuV7W1MB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkQZQrXXBxRjAZln8gap/6pKVe+wMnUIXxvFBkevPhUyva2cV9NXdHtFjuNn8 N0dJYBhkVqm0wGtepWa7Kz2jfCZS+6whNoQCOLWwZoH8n7Q2Bp6gFZx8y2n1Ljh4 FO3+jdggGacnx4jrjcTSxS+t74GImVOEF9wtNRiocHjV1fPXUY25ndLsnkp/Z4wt L1WiRDiNblrWe1/H0ngLB6OthZ+24NCOWBO0HUaBmpwF+uhXwbZUB6AzWsUwwj4i Xbf00jWt1o9X1CvBDcxBggrqoWUkULVDHhzBl0NLwpY1SGx8VGtxMf5B1HbAz0ET akyzic9h9Usro9s8IOH+mGyarA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:25 2026 by rpki-client