$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: PwHXV7ZetVBUgaTeh6iZSA/CcXWE3sZHe2eXiytX2qA= Subject key identifier: AB:0B:8D:7C:94:D3:83:78:E0:C0:A9:7B:1B:69:45:E1:FE:B3:98:90 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0EC8 Signing time: Sat 04 Apr 2026 17:32:41 +0000 Manifest this update: Sat 04 Apr 2026 17:32:40 +0000 Manifest next update: Sat 11 Apr 2026 17:32:40 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: itctMj588w4hPaHuArUZMvjcFULrPRtGz3C6Tcd+2Wg=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Apr 4 17:32:40 2026 GMT Not After : Apr 11 17:32:40 2026 GMT Subject: CN=69d14b38-74f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:a6:e6:35:3a:9d:d7:5d:0d:95:e0:39:33: 10:68:67:fe:38:c6:78:08:99:15:a5:84:ae:4b:0d: 9f:1c:4f:d5:58:80:11:ce:0d:0c:92:a2:e9:b6:11: 96:d4:78:58:da:69:6c:38:25:41:48:08:62:2a:59: 09:af:d8:15:b3:20:e3:87:57:f2:17:df:c1:fd:ed: 1e:81:f9:44:40:5e:c6:46:ce:df:55:15:f9:7c:4e: 3d:cc:20:76:45:a4:f7:81:96:bf:f6:57:96:23:22: 23:1d:c3:31:93:0e:b6:52:74:fe:b4:7f:00:eb:50: 67:d4:e5:c3:37:6e:f7:93:9f:46:d7:8c:cf:ae:1b: 08:f4:7b:08:f1:32:09:79:dc:86:00:15:c7:d4:3b: 15:b1:87:3b:63:64:2b:ff:7c:88:33:d8:a3:3f:ce: ce:ca:75:76:18:b0:80:50:35:d7:30:ec:9a:e1:84: 25:b7:49:c2:96:54:25:66:18:d4:87:7e:44:48:09: cb:82:a7:03:8c:aa:13:fe:15:0e:f8:2f:38:0f:63: 83:50:f2:f0:e0:3f:4c:2a:4b:52:54:4e:70:33:b8: fd:19:fb:3b:eb:1d:ce:16:4a:b6:c7:2c:27:83:ed: 2a:09:e5:a0:96:ad:77:b1:16:24:f3:0d:6b:29:4d: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0B:8D:7C:94:D3:83:78:E0:C0:A9:7B:1B:69:45:E1:FE:B3:98:90 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:97:df:ff:38:1a:2a:32:f1:ed:53:21:29:16:4c:7a:87: a4:36:1d:d0:78:db:6b:12:66:62:83:34:5a:e4:86:ca:a1:36: 23:b6:35:2a:dd:27:38:70:0b:05:24:d1:ac:d4:5c:34:8b:76: 35:74:1c:5c:10:97:5a:7d:8c:53:38:23:dd:37:09:00:6f:00: b7:47:1d:8f:c9:5f:08:55:b5:1c:82:76:ed:8e:6f:1a:23:65: 01:ea:86:63:71:8a:65:80:61:b0:49:04:42:51:55:96:49:fc: 9f:15:81:57:e4:42:9f:b6:b5:90:99:dd:3f:04:20:0a:55:fb: b0:60:29:c2:04:b7:44:3b:3b:10:f6:3f:28:3d:ff:24:1f:16: 0b:b2:e2:7e:d2:82:b5:8a:26:92:6d:82:c9:d2:e6:8c:ad:a3: 1d:4e:98:dc:78:4f:d5:00:83:b6:38:e8:3d:79:d9:db:0e:80: e8:2a:a3:5f:b7:12:00:37:13:66:8b:29:dc:ad:2b:e2:5f:40: c4:e8:fc:0e:3d:cd:00:ae:36:bb:b0:9e:4e:e0:b6:27:73:23: e4:35:b3:6e:b8:44:8e:d0:90:66:67:37:6c:db:4b:b6:32:bb: 05:85:87:6c:65:4e:e9:ad:6d:b4:df:d1:e2:98:25:d3:96:2a: fd:ac:2a:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjYwNDA0MTczMjQwWhcNMjYwNDExMTczMjQwWjAYMRYwFAYD VQQDEw02OWQxNGIzOC03NGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudKm5jU6ndddDZXgOTMQaGf+OMZ4CJkVpYSuSw2fHE/VWIARzg0MkqLpthGW 1HhY2mlsOCVBSAhiKlkJr9gVsyDjh1fyF9/B/e0egflEQF7GRs7fVRX5fE49zCB2 RaT3gZa/9leWIyIjHcMxkw62UnT+tH8A61Bn1OXDN273k59G14zPrhsI9HsI8TIJ edyGABXH1DsVsYc7Y2Qr/3yIM9ijP87OynV2GLCAUDXXMOya4YQlt0nCllQlZhjU h35ESAnLgqcDjKoT/hUO+C84D2ODUPLw4D9MKktSVE5wM7j9Gfs76x3OFkq2xywn g+0qCeWglq13sRYk8w1rKU2VIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsLjXyU 04N44MCpextpReH+s5iQMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAenyX3/84Gioy8e1TISkWTHqHpDYd0HjbaxJmYoM0WuSGyqE2I7Y1Kt0nOHAL BSTRrNRcNIt2NXQcXBCXWn2MUzgj3TcJAG8At0cdj8lfCFW1HIJ27Y5vGiNlAeqG Y3GKZYBhsEkEQlFVlkn8nxWBV+RCn7a1kJndPwQgClX7sGApwgS3RDs7EPY/KD3/ JB8WC7LiftKCtYomkm2CydLmjK2jHU6Y3HhP1QCDtjjoPXnZ2w6A6CqjX7cSADcT Zosp3K0r4l9AxOj8Dj3NAK42u7CeTuC2J3Mj5DWzbrhEjtCQZmc3bNtLtjK7BYWH bGVO6a1ttN/R4pgl05Yq/awqfg== -----END CERTIFICATE-----Generated at Mon Apr 6 01:34:46 2026 by rpki-client