$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: bDFCicnC2g2nPMtA6kfwD3gSnJ9mruzRrbqhlnhSiX4= Subject key identifier: BF:36:C0:7C:DE:96:6A:E5:F9:E2:AF:79:4D:72:FE:6C:C6:89:03:2F Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 06F6 Signing time: Tue 28 Apr 2026 22:32:13 +0000 Manifest this update: Tue 28 Apr 2026 22:32:12 +0000 Manifest next update: Tue 05 May 2026 22:32:12 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: u/cU/bHS9lnUfN/ye1JJILfGOlq4sQrnz4BGdSq5hNU=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: y4QF6Zzf/preGT5Q9leQWLrm++JWhs0vBjGPZhanPmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 22:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: Apr 28 22:32:12 2026 GMT Not After : May 5 22:32:12 2026 GMT Subject: CN=69f1356d-b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:90:4f:d6:a0:f3:fe:3a:a8:3a:76:59:7a: 0f:52:00:10:01:fb:94:83:fb:8d:47:1a:12:b8:b0: bb:43:72:82:e5:8e:03:d0:11:6b:ce:01:4c:aa:a9: bb:54:6e:ed:aa:d4:f9:d8:c9:b9:ff:a2:ac:be:4d: c1:96:f9:50:43:34:8d:a8:51:1c:02:0a:fd:b2:58: 8a:5d:bc:6a:87:cb:05:a5:e4:9f:a4:af:63:19:ff: 51:81:4a:97:b0:07:b7:43:b9:ae:c2:bf:04:37:b5: f9:a8:4c:dd:b3:5d:6c:3c:53:2c:39:1c:8e:f5:43: 89:40:ff:a7:39:af:28:34:45:b0:68:f6:63:7e:28: 32:c7:4a:89:00:53:0d:fa:ad:25:cc:67:e6:76:e3: 4d:3a:0d:f1:d1:2b:db:2c:7f:06:a5:47:a5:da:5e: f4:e1:b1:1c:ef:62:39:0e:1e:e3:56:fd:be:46:4c: a6:fd:d3:f1:dc:42:72:cc:75:c8:71:2e:43:c5:26: 57:c4:fa:4d:55:f9:60:37:51:9e:89:19:22:0c:84: 4e:5b:d0:e3:c0:7a:21:21:ed:29:44:63:51:d7:29: ee:21:fd:f8:59:4d:32:75:c8:24:22:ca:e2:08:96: 2c:00:e0:4e:f3:89:55:b0:12:46:3a:63:80:7a:ea: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:36:C0:7C:DE:96:6A:E5:F9:E2:AF:79:4D:72:FE:6C:C6:89:03:2F X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f4:23:39:63:75:92:e9:6d:b4:b3:98:f5:2a:b7:71:fa:90: cd:4b:05:83:b2:a0:e9:81:bc:15:18:28:27:92:24:62:bc:a5: 48:8b:70:82:02:1b:09:b6:b2:68:57:79:9a:2f:51:05:8b:97: c3:c0:36:90:8f:e8:51:b6:64:11:c9:1c:63:b4:68:e1:6a:a5: 1b:c5:eb:ac:a5:77:bf:50:b7:60:75:c9:e2:85:fe:85:1d:95: 98:29:56:7d:3e:a4:ec:5f:8f:dc:08:4f:50:a6:36:8c:f0:2d: df:3e:eb:63:b5:a5:bb:02:ae:2d:65:7e:cb:e5:09:29:12:35: e0:6a:19:f8:dc:97:fb:1c:58:f4:1b:ab:b1:e5:a8:b3:85:6a: da:07:57:a7:11:f1:ca:e4:04:2d:ec:2d:b6:b4:da:b2:cd:57: 59:1e:3d:b8:f0:47:42:98:af:2a:70:35:1c:ed:e7:e8:88:2d: f2:81:4c:d4:18:77:8f:c0:2f:85:95:95:ad:b5:dc:e8:3c:ab: ab:d0:05:2b:02:2f:0e:6d:b9:73:a1:9f:2a:07:86:14:4b:5d: 78:81:d1:2e:77:21:00:d6:0c:ad:b4:6e:0e:4b:d8:33:65:d5: e3:16:5f:54:46:cc:68:8d:de:a0:d7:0b:dc:47:6f:e7:65:16: 4f:88:87:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjYwNDI4MjIzMjEyWhcNMjYwNTA1MjIzMjEyWjAYMRYwFAYD VQQDEw02OWYxMzU2ZC1iMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu2QT9ag8/46qDp2WXoPUgAQAfuUg/uNRxoSuLC7Q3KC5Y4D0BFrzgFMqqm7 VG7tqtT52Mm5/6Ksvk3BlvlQQzSNqFEcAgr9sliKXbxqh8sFpeSfpK9jGf9RgUqX sAe3Q7muwr8EN7X5qEzds11sPFMsORyO9UOJQP+nOa8oNEWwaPZjfigyx0qJAFMN +q0lzGfmduNNOg3x0SvbLH8GpUel2l704bEc72I5Dh7jVv2+Rkym/dPx3EJyzHXI cS5DxSZXxPpNVflgN1GeiRkiDIROW9DjwHohIe0pRGNR1ynuIf34WU0ydcgkIsri CJYsAOBO84lVsBJGOmOAeupi5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL82wHze lmrl+eKveU1y/mzGiQMvMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHvQjOWN1kulttLOY9Sq3cfqQzUsFg7Kg6YG8FRgoJ5IkYrylSItwggIbCbay aFd5mi9RBYuXw8A2kI/oUbZkEckcY7Ro4WqlG8XrrKV3v1C3YHXJ4oX+hR2VmClW fT6k7F+P3AhPUKY2jPAt3z7rY7WluwKuLWV+y+UJKRI14GoZ+NyX+xxY9BurseWo s4Vq2gdXpxHxyuQELewttrTass1XWR49uPBHQpivKnA1HO3n6Igt8oFM1Bh3j8Av hZWVrbXc6Dyrq9AFKwIvDm25c6GfKgeGFEtdeIHRLnchANYMrbRuDkvYM2XV4xZf VEbMaI3eoNcL3Edv52UWT4iHZw== -----END CERTIFICATE-----Generated at Wed Apr 29 08:13:57 2026 by rpki-client