$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: 9qyiYhHKRS0v4MXEIzkPUhcCUnsUHPhlFcDWGTpCXas= Subject key identifier: B4:33:6F:09:F7:68:14:E1:D1:01:DA:B9:BB:43:B3:85:B8:14:2C:84 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: DC Signing time: Sun 05 Apr 2026 06:01:27 +0000 Manifest this update: Sun 05 Apr 2026 06:01:26 +0000 Manifest next update: Sun 12 Apr 2026 06:01:26 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: mwLrPtRxjbEhR/Rzun2zZ3D2ZD3OhZ3xdotaLHeSLx4=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 1dR8cu3JeKWiVz0aJKgDN3j35TtK4bIh995eeCzg8so=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: ILjG6j0hahE7eMi9C3vJ2iRVu5oKmSFIClvho3Bi50s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Apr 5 06:01:26 2026 GMT Not After : Apr 12 06:01:26 2026 GMT Subject: CN=69d1fab7-70e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:25:e7:f4:f4:42:d3:81:ee:3c:1d:c2:3e: a0:c0:92:a7:18:f4:dc:dc:00:29:77:ea:a1:9c:a2: 74:d5:dd:44:d0:05:8f:7e:7b:9c:b3:bf:94:8f:0c: 65:c1:17:f9:89:d4:41:bc:cc:43:4f:aa:28:f7:9f: b9:8a:a8:cc:4c:59:df:02:16:1c:23:ff:ec:c0:0d: bd:2b:c5:75:18:e4:1f:17:36:ee:0c:43:6a:9c:5c: b0:9f:f3:a0:5e:d6:43:6d:63:fe:45:1c:80:ae:2f: 82:23:f2:33:3d:1e:da:95:f5:69:d6:5e:8a:28:e0: 63:e7:d4:56:99:28:64:1a:f1:3a:8b:a4:71:4c:e3: f3:ee:ff:42:ec:3e:8f:01:97:cd:54:c4:14:a9:77: 09:98:54:61:5f:24:e6:1f:8c:15:06:a4:10:55:31: 3c:22:62:3d:18:1e:75:3c:70:51:4d:bf:00:73:bc: 29:43:bd:fa:78:67:5c:b7:41:d2:16:46:b0:7c:68: 66:c5:97:44:cf:fd:3f:48:05:02:85:c8:e1:ef:bc: 99:a7:6e:d2:bc:94:c0:cb:d7:8b:50:01:2d:09:01: 0e:31:3f:3b:30:55:b2:fc:25:84:a0:20:b0:b9:6e: b1:e4:61:28:21:12:0a:a4:f9:b4:a4:56:6f:f6:66: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:6F:09:F7:68:14:E1:D1:01:DA:B9:BB:43:B3:85:B8:14:2C:84 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:74:64:dc:24:13:f8:84:e8:79:d2:13:0e:6a:aa:03:73:32: 2f:9a:a2:9c:5f:31:18:8d:b9:bf:d2:5c:ef:90:d2:97:dc:3f: 4a:7c:15:74:89:d4:26:76:48:8f:19:2a:8a:26:69:c0:37:ad: ac:ee:b7:4b:89:53:34:a6:38:86:9b:9a:c2:d3:8a:18:5a:ac: eb:a3:96:f4:d6:92:4d:49:d1:a9:b3:ce:9b:60:08:4a:2f:86: 7f:c7:e0:a9:a1:f4:19:d4:a6:3c:4d:6b:5f:a6:72:c4:cb:80: bc:c5:5e:dc:88:ed:4d:4d:72:02:1a:66:84:cc:fc:26:5e:96: 50:b7:f2:c2:7a:76:c9:30:5e:fd:e8:56:20:1e:bd:7a:1a:33: d9:8a:92:fd:b7:ff:44:d1:7d:c4:73:9d:68:23:b8:ff:bc:8e: e0:11:7d:b9:26:d9:4f:96:36:9f:0d:c3:73:ac:eb:00:a3:cb: 18:9c:2c:85:6f:97:10:96:39:d9:65:c2:29:85:ec:6f:f3:b7: c7:dd:bc:7e:74:33:26:23:16:be:ce:1c:cb:fc:d7:fb:f9:e7: bb:13:e4:8f:64:c2:44:3e:f6:87:fb:92:b7:b5:1c:47:a2:7b: 7b:9f:31:11:ee:15:65:ed:1c:f2:55:a1:f2:dd:ca:83:3d:b7: 3b:c8:09:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjYwNDA1MDYwMTI2WhcNMjYwNDEyMDYwMTI2WjAYMRYwFAYD VQQDEw02OWQxZmFiNy03MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjFkl5/T0QtOB7jwdwj6gwJKnGPTc3AApd+qhnKJ01d1E0AWPfnucs7+Ujwxl wRf5idRBvMxDT6oo95+5iqjMTFnfAhYcI//swA29K8V1GOQfFzbuDENqnFywn/Og XtZDbWP+RRyAri+CI/IzPR7alfVp1l6KKOBj59RWmShkGvE6i6RxTOPz7v9C7D6P AZfNVMQUqXcJmFRhXyTmH4wVBqQQVTE8ImI9GB51PHBRTb8Ac7wpQ736eGdct0HS FkawfGhmxZdEz/0/SAUChcjh77yZp27SvJTAy9eLUAEtCQEOMT87MFWy/CWEoCCw uW6x5GEoIRIKpPm0pFZv9mZnwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQzbwn3 aBTh0QHaubtDs4W4FCyEMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnRk3CQT+IToedITDmqqA3MyL5qinF8xGI25v9Jc75DSl9w/SnwVdInUJnZI jxkqiiZpwDetrO63S4lTNKY4hpuawtOKGFqs66OW9NaSTUnRqbPOm2AISi+Gf8fg qaH0GdSmPE1rX6ZyxMuAvMVe3IjtTU1yAhpmhMz8Jl6WULfywnp2yTBe/ehWIB69 ehoz2YqS/bf/RNF9xHOdaCO4/7yO4BF9uSbZT5Y2nw3Dc6zrAKPLGJwshW+XEJY5 2WXCKYXsb/O3x928fnQzJiMWvs4cy/zX+/nnuxPkj2TCRD72h/uSt7UcR6J7e58x Ee4VZe0c8lWh8t3Kgz23O8gJgw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:59:51 2026 by rpki-client