$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: /fxie5fQMYRIml2Qh9QHpPo1vUGk5fyxYfFUrDUVRMA= Subject key identifier: 8B:9C:15:7E:4D:2E:86:9E:29:22:F3:D2:57:6F:9B:AA:E9:8B:B9:00 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 08AE Signing time: Sat 04 Apr 2026 20:15:17 +0000 Manifest this update: Sat 04 Apr 2026 20:15:16 +0000 Manifest next update: Sat 11 Apr 2026 20:15:16 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: fk5UNNhvWLQPGgWds00tMO20wxmbEn7GExoAUiz1Bb4=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Apr 4 20:15:16 2026 GMT Not After : Apr 11 20:15:16 2026 GMT Subject: CN=69d17155-67b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:73:68:90:6c:bb:74:e5:ef:c7:23:22:d5: 66:71:bb:8d:2e:66:4a:8f:a3:70:2d:19:b7:40:94: c9:86:cb:c0:50:4a:8e:5c:3c:b7:ed:56:68:7e:56: 2a:3b:d7:a4:80:6a:e0:64:c2:f0:6e:ea:62:93:e8: 17:3d:49:95:88:41:ac:0d:05:56:bc:ec:99:df:0c: 5c:52:c9:1d:d9:c9:91:a5:76:fa:34:a4:3f:2c:1c: c9:20:07:2d:67:10:41:61:58:e8:71:7f:9f:cd:7d: cb:27:9a:81:66:94:33:ce:d4:04:21:17:ed:ed:16: 84:1e:6a:5c:03:19:e5:49:ca:84:45:b2:96:54:38: 67:8f:ba:1c:fc:da:c5:ba:1f:f0:a0:fd:cf:da:48: 9c:55:9b:c2:bd:63:2c:ed:f8:00:31:f4:b4:dd:7c: 8b:6c:b3:4c:c6:a0:03:e4:26:d7:67:7c:89:2e:6c: 8a:40:b2:4d:84:0a:be:e7:32:b8:70:f9:34:e4:a4: 90:bc:36:3a:d8:1f:f6:c0:a1:d8:04:14:d2:97:3e: 4c:1e:28:cc:80:69:dd:70:ba:5e:3e:c9:cf:20:22: 74:a6:50:f7:9b:04:83:33:53:cb:5d:87:0f:47:81: 04:97:4f:e5:5a:e7:eb:22:e3:cc:61:85:c2:c0:86: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:15:7E:4D:2E:86:9E:29:22:F3:D2:57:6F:9B:AA:E9:8B:B9:00 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:79:08:cc:65:b5:91:7a:14:cf:48:25:d9:6a:0a:82:56: 20:91:34:5e:35:17:b9:f0:a1:48:a3:1a:63:4b:ae:1e:13:2b: 3b:35:85:9a:d6:c7:13:a2:d2:d3:96:be:72:41:6a:d5:36:a5: 06:91:45:3e:34:2e:f7:c1:e4:29:b4:45:b0:6d:ff:5d:ff:9c: d0:59:32:66:c5:e4:1d:0b:dd:c5:16:c2:b3:4c:6d:23:eb:54: 1e:80:73:76:2a:b4:4f:70:44:98:9e:0e:c9:7e:9c:d1:b2:a3: 57:bb:ed:8b:ba:3c:5e:e3:78:b0:2a:da:44:ee:23:24:5c:23: 59:c9:93:ac:32:4c:a3:31:42:1e:4d:17:1b:26:d1:f0:f7:b4: 35:ce:0f:90:d0:a2:54:39:ad:cb:28:0d:66:79:56:12:2f:89: 71:f0:23:9a:d4:a5:50:ba:1e:a8:21:d4:73:e0:e4:53:99:d2: 01:c1:d6:50:37:31:fd:50:e6:30:ed:b7:b8:25:4b:f1:a5:20: e5:5e:6a:4a:67:62:90:54:56:e6:4d:f9:7b:77:97:3d:8b:77: aa:04:94:4c:b2:66:a8:7b:38:ed:5f:6f:b2:d6:69:2d:2a:fa: 3e:07:5b:64:0b:7b:13:25:af:ba:b3:b7:5e:c9:7e:07:89:3f: 28:5d:f0:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwNDA0MjAxNTE2WhcNMjYwNDExMjAxNTE2WjAYMRYwFAYD VQQDEw02OWQxNzE1NS02N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYRzaJBsu3Tl78cjItVmcbuNLmZKj6NwLRm3QJTJhsvAUEqOXDy37VZoflYq O9ekgGrgZMLwbupik+gXPUmViEGsDQVWvOyZ3wxcUskd2cmRpXb6NKQ/LBzJIAct ZxBBYVjocX+fzX3LJ5qBZpQzztQEIRft7RaEHmpcAxnlScqERbKWVDhnj7oc/NrF uh/woP3P2kicVZvCvWMs7fgAMfS03XyLbLNMxqAD5CbXZ3yJLmyKQLJNhAq+5zK4 cPk05KSQvDY62B/2wKHYBBTSlz5MHijMgGndcLpePsnPICJ0plD3mwSDM1PLXYcP R4EEl0/lWufrIuPMYYXCwIbzwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIucFX5N LoaeKSLz0ldvm6rpi7kAMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRN5CMxltZF6FM9IJdlqCoJWIJE0XjUXufChSKMaY0uuHhMrOzWFmtbHE6LS 05a+ckFq1TalBpFFPjQu98HkKbRFsG3/Xf+c0FkyZsXkHQvdxRbCs0xtI+tUHoBz diq0T3BEmJ4OyX6c0bKjV7vti7o8XuN4sCraRO4jJFwjWcmTrDJMozFCHk0XGybR 8Pe0Nc4PkNCiVDmtyygNZnlWEi+JcfAjmtSlULoeqCHUc+DkU5nSAcHWUDcx/VDm MO23uCVL8aUg5V5qSmdikFRW5k35e3eXPYt3qgSUTLJmqHs47V9vstZpLSr6Pgdb ZAt7EyWvurO3Xsl+B4k/KF3wpw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:48 2026 by rpki-client