$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json) Hash identifier: zQHcEVAkLVjzv6M+xnEdNaFESmdHQA7nsXlyXW4Y9Ns= Subject key identifier: 8A:94:DF:85:3B:1D:39:DA:3D:C5:2A:CD:4E:28:51:03:1A:D1:4D:DA Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft Manifest number: 0903 Signing time: Sat 04 Apr 2026 20:07:17 +0000 Manifest this update: Sat 04 Apr 2026 20:07:16 +0000 Manifest next update: Sat 11 Apr 2026 20:07:16 +0000 Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: yZ0HK7XZnhOcDrGj9o/1GFaEe/MdreyRAB2jSPVqVPU=) 2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: fbNgVaH91F2eFS+HbujhsXeCcZKoS980Yjgt5GelWLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D9B, serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE Validity Not Before: Apr 4 20:07:16 2026 GMT Not After : Apr 11 20:07:16 2026 GMT Subject: CN=69d16f74-592b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:04:44:ab:0e:9c:6f:e5:32:f2:db:6b:46: a7:a7:97:4c:b3:ff:28:86:71:0d:9e:20:3c:dc:e7: 93:2f:56:78:67:60:7a:4e:37:04:2f:d6:d3:51:e6: 36:29:0a:2a:9a:a3:77:89:cf:8a:b7:74:cf:31:a5: b6:7b:00:6c:a1:c4:66:50:22:7a:6e:12:19:9e:be: 58:d2:b8:85:ca:9c:48:9c:09:45:18:97:bc:22:fa: 48:96:0e:d8:e4:1a:ea:5e:9b:14:84:8d:46:12:2b: 93:a3:1d:e1:8d:27:af:5b:97:1c:e6:95:a0:7a:b5: 72:f5:1f:22:2e:c8:65:63:bb:a7:9f:aa:25:7e:fb: d8:6f:0f:be:76:95:1e:ce:6f:9f:ad:53:1f:c2:ec: 34:ed:ee:f9:83:27:b8:8c:33:66:40:94:d1:12:65: ea:0f:74:a1:93:fe:d6:c0:e6:e1:d4:3e:03:b8:75: 1b:7f:80:a0:57:c5:7c:62:93:10:e1:3b:37:cf:e9: e0:20:64:e8:23:08:e8:e0:30:81:54:52:10:67:ba: 10:d9:10:a1:04:e3:43:ba:be:b3:c9:1c:dc:f0:25: 15:0b:30:8a:f2:e0:4f:4d:e1:36:63:03:d8:85:44: e6:fb:3c:42:56:73:09:8f:6f:ba:4a:4d:5d:01:51: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:94:DF:85:3B:1D:39:DA:3D:C5:2A:CD:4E:28:51:03:1A:D1:4D:DA X509v3 Authority Key Identifier: keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b0:20:9a:9d:fd:e2:f7:7b:35:f5:0e:07:dc:ef:fa:1b:36: 06:f5:0e:65:5b:b7:05:2a:ee:6e:11:a9:e6:21:e2:09:7e:e9: 1e:fc:cd:41:12:eb:a3:93:d0:a3:e3:3f:0a:70:0f:85:89:8f: 77:42:c2:f0:b1:b9:77:5e:9e:f7:3b:28:f1:9c:69:46:d8:2d: f6:33:56:1c:9f:90:a1:71:1c:9a:20:78:50:4b:a6:ae:29:32: 05:65:44:81:72:01:31:26:12:34:7f:7a:c0:83:37:ed:f1:41: 68:da:ff:dd:04:77:86:8b:21:66:c9:d0:44:60:23:07:e1:82: 9b:88:0e:d4:be:b1:20:18:08:e8:8f:87:b1:49:98:50:69:a7: 29:42:6a:d0:d8:c7:21:02:f4:2c:5a:da:b9:03:22:c4:31:99: 48:44:a1:61:ae:b9:a9:30:13:04:d4:3e:eb:f4:8c:cb:fb:be: 6d:8b:53:fd:79:ab:00:de:0a:c6:95:93:37:b7:13:a1:0b:11: 2c:93:63:47:62:f2:21:f6:46:25:7f:30:6c:a2:6f:10:39:33: 30:ee:ff:0c:11:f9:29:99:2b:4a:1d:9d:21:ea:4e:a5:2f:79: 81:20:bd:48:0f:6c:37:ea:28:68:d0:40:cf:2b:58:78:81:73: d1:b2:0d:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREOUIxMTAvBgNVBAUTKENGODlENkFCMTFFN0Q0N0FBMTdCNDMwOUM3MkE3MkI3 MUNCQTQ3QUUwHhcNMjYwNDA0MjAwNzE2WhcNMjYwNDExMjAwNzE2WjAYMRYwFAYD VQQDEw02OWQxNmY3NC01OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lwERKsOnG/lMvLba0anp5dMs/8ohnENniA83OeTL1Z4Z2B6TjcEL9bTUeY2 KQoqmqN3ic+Kt3TPMaW2ewBsocRmUCJ6bhIZnr5Y0riFypxInAlFGJe8IvpIlg7Y 5BrqXpsUhI1GEiuTox3hjSevW5cc5pWgerVy9R8iLshlY7unn6olfvvYbw++dpUe zm+frVMfwuw07e75gye4jDNmQJTREmXqD3Shk/7WwObh1D4DuHUbf4CgV8V8YpMQ 4Ts3z+ngIGToIwjo4DCBVFIQZ7oQ2RChBONDur6zyRzc8CUVCzCK8uBPTeE2YwPY hUTm+zxCVnMJj2+6Sk1dAVF3MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqU34U7 HTnaPcUqzU4oUQMa0U3aMB8GA1UdIwQYMBaAFM+J1qsR59R6oXtDCccqcrccukeu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQ5Qi9GNUJBQTNEOEM4 MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFIcWhlME1KeHlweXR4eTZS NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0bldxeEhuMUhxaGUwTUp4eXB5dHh5NlI2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQ5Qi9GNUJBQTNEOEM4MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFI cWhlME1KeHlweXR4eTZSNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATLAgmp394vd7NfUOB9zv+hs2BvUOZVu3BSrubhGp5iHiCX7pHvzNQRLro5PQ o+M/CnAPhYmPd0LC8LG5d16e9zso8ZxpRtgt9jNWHJ+QoXEcmiB4UEumrikyBWVE gXIBMSYSNH96wIM37fFBaNr/3QR3hoshZsnQRGAjB+GCm4gO1L6xIBgI6I+HsUmY UGmnKUJq0NjHIQL0LFrauQMixDGZSEShYa65qTATBNQ+6/SMy/u+bYtT/XmrAN4K xpWTN7cToQsRLJNjR2LyIfZGJX8wbKJvEDkzMO7/DBH5KZkrSh2dIepOpS95gSC9 SA9sN+ooaNBAzytYeIFz0bINwQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client