$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: gyDvIizbIxRge5TNyyt3tkNBAYsSit8z/WxqrGEovpg= Subject key identifier: 3C:3B:5E:24:E7:80:9A:13:45:76:D8:A7:61:B3:38:D7:38:AD:94:CE Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 0995 Signing time: Sat 04 Apr 2026 19:49:03 +0000 Manifest this update: Sat 04 Apr 2026 19:49:03 +0000 Manifest next update: Sat 11 Apr 2026 19:49:03 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: Qn4lSEEI97OUvkxe3U7rzNfqmx50eNxtDniA2ZlchSo=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Apr 4 19:49:03 2026 GMT Not After : Apr 11 19:49:03 2026 GMT Subject: CN=69d16b2f-c361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:d6:19:2a:e4:89:2c:3d:5f:f3:4a:d1:3c: af:05:63:ef:aa:8b:e0:e4:59:48:ab:2c:99:df:14: a1:9b:a2:e9:4e:40:15:61:0e:71:83:ab:bc:1e:3c: 2c:d2:b5:16:0a:51:bb:50:ab:62:71:db:1f:c4:09: 53:1e:3c:d4:6a:3f:53:68:ad:e5:a5:a9:ce:87:ee: 76:ed:13:e1:24:73:15:06:ce:2c:a0:9d:7b:b2:e6: 47:6e:60:cd:a9:f6:9b:fb:96:4d:9d:d3:99:a8:ae: e1:f9:5a:57:38:05:89:07:98:b6:85:9e:f5:60:3a: 7d:78:36:bc:b7:1d:4e:4c:da:54:0f:24:8d:4a:69: 37:97:df:f5:ba:1f:e0:f8:7e:6a:2f:a6:ad:99:db: 4c:00:9b:b6:df:20:90:cd:8f:7c:1e:7f:8f:47:14: 02:9b:f4:d1:ba:58:3d:f9:2b:9a:cd:c0:f4:97:2e: 71:88:8e:c7:3c:58:89:87:f2:d5:ba:88:f1:c3:74: 84:f3:9f:79:f7:91:b5:dd:1b:fa:76:be:cb:82:30: 68:af:53:df:6f:7b:2f:d4:bb:6d:c8:ca:39:73:68: 4e:a0:1d:d8:b5:65:78:65:0b:da:ad:df:da:17:e9: 52:39:9a:3d:6e:e3:79:bf:b9:7f:82:c1:52:1d:f8: 92:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3B:5E:24:E7:80:9A:13:45:76:D8:A7:61:B3:38:D7:38:AD:94:CE X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:42:73:68:aa:8e:5d:28:44:1e:55:17:43:a6:d0:fc:92:42: 8c:d5:47:28:a7:86:a8:60:cf:51:2c:e3:d3:72:a2:53:2c:ed: 1f:d7:e2:e9:0f:08:f6:47:68:db:c5:f5:3c:7e:a1:88:95:94: cc:83:6a:1f:a1:d5:19:a8:2a:a1:af:ac:f4:6b:f2:64:0e:4b: 6f:62:61:31:62:ab:b8:56:e8:7e:ee:54:bf:62:16:ef:69:ff: 8d:b9:79:41:00:f8:ac:a8:03:be:20:33:dd:7e:2a:33:1e:2b: fb:dd:1c:a1:e1:ca:bd:85:32:48:4a:36:54:24:b1:a1:74:90: 64:e9:0b:a2:3e:e3:09:07:a9:b1:1f:ff:2b:08:e4:50:47:ac: 19:e2:bb:98:bc:cb:c2:c9:cd:31:b0:f3:6b:f5:3a:87:f6:fd: 55:a5:9d:30:80:c8:0e:16:d2:51:3a:7e:98:9a:95:68:4d:2a: 54:a5:b1:ff:1e:45:95:3a:9c:9d:73:9c:69:49:43:1e:13:b6: 82:e6:11:dd:1d:1e:80:61:38:85:94:d0:79:80:7e:b1:10:93: 7a:7e:07:9d:4b:b4:fa:8a:51:05:26:91:15:b0:a4:8f:cf:9d: aa:34:ee:de:ef:25:65:50:cb:e6:4f:e0:ce:ba:84:4c:ea:ef: e6:a3:a5:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjYwNDA0MTk0OTAzWhcNMjYwNDExMTk0OTAzWjAYMRYwFAYD VQQDEw02OWQxNmIyZi1jMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7nWGSrkiSw9X/NK0TyvBWPvqovg5FlIqyyZ3xShm6LpTkAVYQ5xg6u8Hjws 0rUWClG7UKticdsfxAlTHjzUaj9TaK3lpanOh+527RPhJHMVBs4soJ17suZHbmDN qfab+5ZNndOZqK7h+VpXOAWJB5i2hZ71YDp9eDa8tx1OTNpUDySNSmk3l9/1uh/g +H5qL6atmdtMAJu23yCQzY98Hn+PRxQCm/TRulg9+SuazcD0ly5xiI7HPFiJh/LV uojxw3SE859595G13Rv6dr7LgjBor1Pfb3sv1LttyMo5c2hOoB3YtWV4ZQvard/a F+lSOZo9buN5v7l/gsFSHfiSOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw7XiTn gJoTRXbYp2GzONc4rZTOMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiEJzaKqOXShEHlUXQ6bQ/JJCjNVHKKeGqGDPUSzj03KiUyztH9fi6Q8I9kdo 28X1PH6hiJWUzINqH6HVGagqoa+s9GvyZA5Lb2JhMWKruFbofu5Uv2IW72n/jbl5 QQD4rKgDviAz3X4qMx4r+90coeHKvYUySEo2VCSxoXSQZOkLoj7jCQepsR//Kwjk UEesGeK7mLzLwsnNMbDza/U6h/b9VaWdMIDIDhbSUTp+mJqVaE0qVKWx/x5FlTqc nXOcaUlDHhO2guYR3R0egGE4hZTQeYB+sRCTen4HnUu0+opRBSaRFbCkj8+dqjTu 3u8lZVDL5k/gzrqETOrv5qOlRw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:22 2026 by rpki-client