$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: LKOL76m6FoeoLFS65DPlkwP0RG6epYgGS+KdrsFP+Hs= Subject key identifier: 5C:25:B0:32:3F:07:4C:D0:4A:F5:4F:2F:DA:B3:B2:60:0C:DD:0B:6B Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D25 Signing time: Sat 04 Apr 2026 17:58:23 +0000 Manifest this update: Sat 04 Apr 2026 17:58:23 +0000 Manifest next update: Sat 11 Apr 2026 17:58:23 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: N1ag6X5Y7BLET9Er05ZAdRnc+U+QsVA/+7QhT4Xns9Y=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Apr 4 17:58:23 2026 GMT Not After : Apr 11 17:58:23 2026 GMT Subject: CN=69d1513f-a5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:48:ef:68:c6:25:ec:bf:95:f3:07:81:2b: ec:ef:ec:8a:f1:0e:c2:13:43:ee:df:5f:42:3f:87: e2:46:47:2c:af:c9:9a:c6:52:0b:ce:1d:85:52:00: ed:2d:eb:60:58:7c:a0:9f:07:d6:3f:e3:47:fe:bf: 0b:21:48:fc:65:fa:1d:f2:4b:24:bd:bb:ec:77:28: 4e:39:10:d5:5a:c3:16:5a:04:00:42:e4:ce:c1:05: dc:95:2e:e1:db:71:1c:c0:6f:c0:0e:5c:07:01:57: d8:62:d3:b3:a1:ab:20:b2:6d:18:d9:f7:37:4d:1d: f7:58:44:95:7f:a8:c9:b9:00:30:30:4e:d1:dd:57: 77:22:be:4f:78:79:1c:ed:58:34:29:d4:4c:c1:0c: 1c:c4:a1:ff:c8:c1:33:ef:11:ca:42:1b:12:ed:14: 44:c5:02:7c:11:b0:26:0b:61:0b:87:2e:65:6e:d2: ad:99:19:cd:28:0b:df:70:b6:70:f8:c7:4d:1f:46: d2:e3:2c:60:fc:5f:58:e4:ca:01:e3:a1:c1:f2:12: 74:48:41:fc:b3:02:27:49:9e:0f:07:68:75:16:b5: 6f:5d:b0:4d:7a:10:80:fb:9d:82:74:6a:70:f8:2f: b1:38:b2:95:76:98:2d:b7:c3:c1:18:ce:1d:e2:1a: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:B0:32:3F:07:4C:D0:4A:F5:4F:2F:DA:B3:B2:60:0C:DD:0B:6B X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:09:c2:51:0a:fa:17:37:d6:c8:cb:0e:65:7b:57:87:4f:ea: d5:e1:fa:1d:29:8f:5a:b2:e6:28:e0:85:e0:5d:28:ba:d4:f4: f5:55:9e:f1:b6:d9:4c:f5:38:34:0e:32:75:1b:f5:23:77:58: 43:27:4e:7e:65:bd:0f:e1:4f:92:bd:6e:4b:7c:66:3c:44:82: a6:c2:ad:79:6c:01:83:cf:09:de:ea:e7:3d:20:a0:64:f4:38: 72:bd:e3:5e:29:a1:e0:9e:40:d0:e5:1a:6d:a1:93:b6:06:0c: df:07:0d:6a:8d:35:31:59:6f:5a:36:0b:2a:5f:f8:b4:3c:ee: 50:0a:1c:64:12:e1:7c:a7:50:dc:f1:74:fc:10:98:c3:66:bb: a6:13:79:c3:2f:af:f0:98:67:22:50:c8:28:ea:6a:9c:35:82: 3e:45:f6:75:3b:de:a6:79:e1:95:b9:b0:05:64:f0:fe:fa:9d: dd:a0:f5:f9:cb:fd:ff:d6:e3:f8:59:df:8b:88:8b:72:75:90: 23:4e:7f:bc:fa:44:84:f3:0f:32:e2:72:05:12:c5:37:9c:6f: 35:6c:4a:fa:f3:3a:01:53:a0:a3:f8:65:4d:8a:75:88:3f:7c: 14:7e:bd:21:39:3d:1e:37:50:7c:25:39:55:3f:25:a8:5f:e4: 18:a0:86:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwNDA0MTc1ODIzWhcNMjYwNDExMTc1ODIzWjAYMRYwFAYD VQQDEw02OWQxNTEzZi1hNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jtI72jGJey/lfMHgSvs7+yK8Q7CE0Pu319CP4fiRkcsr8maxlILzh2FUgDt LetgWHygnwfWP+NH/r8LIUj8Zfod8kskvbvsdyhOORDVWsMWWgQAQuTOwQXclS7h 23EcwG/ADlwHAVfYYtOzoasgsm0Y2fc3TR33WESVf6jJuQAwME7R3Vd3Ir5PeHkc 7Vg0KdRMwQwcxKH/yMEz7xHKQhsS7RRExQJ8EbAmC2ELhy5lbtKtmRnNKAvfcLZw +MdNH0bS4yxg/F9Y5MoB46HB8hJ0SEH8swInSZ4PB2h1FrVvXbBNehCA+52CdGpw +C+xOLKVdpgtt8PBGM4d4hrozwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwlsDI/ B0zQSvVPL9qzsmAM3QtrMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQAnCUQr6FzfWyMsOZXtXh0/q1eH6HSmPWrLmKOCF4F0outT09VWe8bbZTPU4 NA4ydRv1I3dYQydOfmW9D+FPkr1uS3xmPESCpsKteWwBg88J3urnPSCgZPQ4cr3j Ximh4J5A0OUabaGTtgYM3wcNao01MVlvWjYLKl/4tDzuUAocZBLhfKdQ3PF0/BCY w2a7phN5wy+v8JhnIlDIKOpqnDWCPkX2dTvepnnhlbmwBWTw/vqd3aD1+cv9/9bj +Fnfi4iLcnWQI05/vPpEhPMPMuJyBRLFN5xvNWxK+vM6AVOgo/hlTYp1iD98FH69 ITk9HjdQfCU5VT8lqF/kGKCGPw== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:50 2026 by rpki-client