$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json) Hash identifier: jpVubrMxASqlDKg6Ueoe0JtuF4w9RQuq7Ncmq/UY6jg= Subject key identifier: 2E:59:84:A6:44:C8:45:0C:B5:1F:7D:EA:57:CA:DF:3C:AE:85:D6:EA Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft Manifest number: 4A Signing time: Sun 05 Apr 2026 07:47:02 +0000 Manifest this update: Sun 05 Apr 2026 07:47:02 +0000 Manifest next update: Sun 12 Apr 2026 07:47:02 +0000 Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: 1wmgL+6OkhRjgAF5xc13W+xyB3O1hetyrnKNQBkiUrY=) 2: E4DCE562284911F19931E6E894833773.roa (hash: UFO6O8AEvJofNNNFu8sTkaWfgzATbWTj3vDCjDswrr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Apr 5 07:47:02 2026 GMT Not After : Apr 12 07:47:02 2026 GMT Subject: CN=69d21376-e6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:c1:97:54:44:46:8a:c8:fb:23:16:3c:66: 98:99:0e:f7:6e:68:30:bb:72:8a:bf:07:81:df:47: 7e:1e:0e:a9:1d:34:eb:38:18:95:5f:9f:46:3e:81: 52:c3:48:e7:f5:73:16:03:bd:5f:49:c6:99:f1:23: aa:b2:07:d2:2c:4e:8b:1b:f6:99:4d:b8:f0:f7:dd: e8:c0:09:d1:73:a9:b9:fc:b3:bd:fc:0b:d9:9c:8c: 71:92:13:b4:8d:f1:bf:f2:b8:ab:32:ae:ed:a4:da: af:ab:9a:65:d4:38:12:1b:10:21:db:f4:e7:d9:fe: 3b:56:75:09:9f:04:28:73:f0:02:ef:2e:79:0d:c8: 4c:23:81:6c:a0:76:d4:3c:75:27:31:26:df:18:65: 21:86:12:41:13:c3:62:ef:05:cd:45:bf:93:20:82: 73:a6:a1:86:90:63:0b:d9:e0:66:e4:a1:81:70:00: 01:9f:d5:e9:95:8b:f2:fb:80:57:77:a3:e2:90:90: 91:be:47:1e:a0:48:6d:93:9e:fe:4e:e6:de:96:cc: f6:84:25:41:9c:01:70:d7:62:71:b7:76:47:6c:a0: 4a:11:e8:c3:17:a5:5e:1d:7c:14:90:f2:27:81:ed: f7:90:cb:66:11:84:16:22:25:a9:52:94:19:33:92: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:84:A6:44:C8:45:0C:B5:1F:7D:EA:57:CA:DF:3C:AE:85:D6:EA X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c5:b6:e0:36:d5:56:f4:73:05:c6:3d:20:82:c0:24:70:e9: ab:e0:9c:f2:d6:9a:f2:08:38:36:a0:ea:61:85:d0:c5:ea:da: d2:27:f0:e6:87:96:66:99:d4:6e:83:07:99:7c:b7:92:eb:0d: bf:01:81:e1:93:c4:30:c4:93:e5:f5:f7:34:15:07:a1:88:cb: 3e:bc:98:45:49:c6:91:7b:ad:a6:54:29:e6:d8:13:31:e9:57: 78:35:35:65:9d:d2:ab:bb:64:52:1a:da:5a:3f:d9:6b:9a:03: 91:a1:46:00:c9:aa:58:07:81:84:47:86:36:28:28:1a:66:88: 1b:6e:67:77:6d:d2:47:2f:48:8c:20:49:90:38:51:ff:ec:70: f2:83:fd:40:29:cf:09:37:b3:50:14:0a:eb:a6:97:dd:73:2a: 93:22:84:ca:48:7b:38:23:9e:8e:20:98:a9:70:79:f7:cd:26: d3:18:3a:8c:f6:7d:20:6d:36:2e:29:92:3d:55:3f:7f:d6:7a: 36:dc:48:a4:26:5e:22:10:c0:c3:af:e5:ef:e7:3b:89:39:1e: 5f:53:81:4c:81:a8:37:de:ba:33:f4:03:f1:a1:26:b7:ec:a3: d2:07:b4:81:c5:89:73:47:95:b2:2e:ff:42:30:9e:55:77:65: 2a:2c:96:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDExQTExMC8GA1UEBRMoNjRBQjVFREI1MTEyNjJCNzM2QUY4MTc0MUQ0RDczMTQx NEQzNEE1NzAeFw0yNjA0MDUwNzQ3MDJaFw0yNjA0MTIwNzQ3MDJaMBgxFjAUBgNV BAMTDTY5ZDIxMzc2LWU2YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnZMGXVERGisj7IxY8ZpiZDvduaDC7coq/B4HfR34eDqkdNOs4GJVfn0Y+gVLD SOf1cxYDvV9JxpnxI6qyB9IsTosb9plNuPD33ejACdFzqbn8s738C9mcjHGSE7SN 8b/yuKsyru2k2q+rmmXUOBIbECHb9OfZ/jtWdQmfBChz8ALvLnkNyEwjgWygdtQ8 dScxJt8YZSGGEkETw2LvBc1Fv5MggnOmoYaQYwvZ4GbkoYFwAAGf1emVi/L7gFd3 o+KQkJG+Rx6gSG2Tnv5O5t6WzPaEJUGcAXDXYnG3dkdsoEoR6MMXpV4dfBSQ8ieB 7feQy2YRhBYiJalSlBkzkvH1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULlmEpkTI RQy1H33qV8rfPK6F1uowHwYDVR0jBBgwFoAUZKte21ESYrc2r4F0HU1zFBTTSlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMTFBL0EyM0YyM0I4RDBD MDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkt0ZTIxRVNZcmMycjRGMEhVMXpGQlRUU2xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MTFBL0EyM0YyM0I4RDBDMDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJj MnI0RjBIVTF6RkJUVFNsYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBzxbbgNtVW9HMFxj0ggsAkcOmr4Jzy1pryCDg2oOphhdDF6trSJ/Dmh5ZmmdRu gweZfLeS6w2/AYHhk8QwxJPl9fc0FQehiMs+vJhFScaRe62mVCnm2BMx6Vd4NTVl ndKru2RSGtpaP9lrmgORoUYAyapYB4GER4Y2KCgaZogbbmd3bdJHL0iMIEmQOFH/ 7HDyg/1AKc8JN7NQFArrppfdcyqTIoTKSHs4I56OIJipcHn3zSbTGDqM9n0gbTYu KZI9VT9/1no23EikJl4iEMDDr+Xv5zuJOR5fU4FMgag33roz9APxoSa37KPSB7SB xYlzR5WyLv9CMJ5Vd2UqLJaD -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:35 2026 by rpki-client