$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: jMbXbgNxT3fWJ64irDsHNHLr49vQFvSAuvaxkzZcxAg= Subject key identifier: 2C:55:D9:4A:48:0B:A0:9F:53:5C:41:0E:6D:27:91:BE:B0:4E:55:D1 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 0406 Signing time: Mon 20 Apr 2026 20:29:00 +0000 Manifest this update: Mon 20 Apr 2026 20:29:00 +0000 Manifest next update: Mon 27 Apr 2026 20:29:00 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: OKpJTLE7JHdfpf+DiMppu8s1PLdCiOJ47ZrQQfD7uu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: Apr 20 20:29:00 2026 GMT Not After : Apr 27 20:29:00 2026 GMT Subject: CN=69e68c8c-000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:d2:3c:b5:a2:e0:02:a7:1b:66:1e:fe:ea: 8a:12:82:66:46:79:08:fa:c8:e6:a0:94:71:32:b7: ac:6b:f9:3e:30:a9:2c:e5:bc:b9:15:fb:00:26:73: b2:15:20:17:bf:5a:8a:f3:24:f1:4b:5e:d5:bb:3b: a9:e3:cf:94:32:53:ed:85:32:40:ed:17:ab:ca:ce: 17:8e:bf:d6:6e:e3:80:f3:78:20:4e:53:0e:13:9e: fa:0f:36:3b:5c:86:bc:1b:54:34:ff:d2:a7:a0:c9: 14:94:83:4e:19:40:c9:c9:ac:07:8d:be:fd:32:4b: 7b:75:31:eb:ad:6e:78:ce:59:00:f5:e6:e2:97:cb: b7:46:23:fd:ed:3b:a0:e3:06:e7:ee:9d:9d:06:f2: 3c:11:e8:18:a6:32:f0:83:ce:64:07:a5:c1:b6:10: 69:09:da:4b:22:6d:ac:98:eb:36:80:5d:a3:bb:eb: 77:1b:19:fc:f5:69:9d:bb:ad:f4:80:4b:e9:d1:9b: 5d:6d:58:de:3f:c8:2e:16:5f:bb:6a:23:a8:a9:42: 19:75:d7:85:5f:71:cd:7a:58:0a:19:4b:23:f2:cc: b6:66:e5:b3:e0:ba:85:c3:bf:94:f6:3f:89:42:35: 8f:e9:05:e5:eb:7c:9e:37:21:c0:07:bc:84:f6:88: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:55:D9:4A:48:0B:A0:9F:53:5C:41:0E:6D:27:91:BE:B0:4E:55:D1 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3f:9b:12:d1:0b:f0:31:53:ba:97:31:e2:8e:ac:8e:3b:a2: 0d:f4:e1:1d:94:88:09:94:e2:b5:66:a9:6e:86:43:12:3f:3b: e2:42:71:2a:8e:33:3f:d7:fa:46:4d:3c:32:9d:9b:26:07:53: 62:2b:97:7e:ed:83:2d:3b:ac:da:7e:1f:98:43:de:6b:05:1e: 1f:9a:b4:5b:fd:62:61:78:05:bd:17:e0:16:33:c8:02:56:e2: b8:df:56:e2:b0:6b:69:1c:6d:76:f5:fe:2d:63:b0:3e:ee:82: 69:67:c9:80:5a:92:20:e3:3c:c6:18:61:57:64:75:ec:4f:63: e0:c9:8c:42:45:24:63:ec:c9:d0:c8:88:04:0f:c8:e5:ca:44: cd:46:9d:16:5c:0f:40:7a:57:09:09:1d:13:3f:70:72:4b:48: 76:98:3c:80:86:d3:26:19:75:ad:33:10:11:78:5b:7f:d9:e6: ae:15:e8:89:33:ce:2e:27:30:3e:01:03:23:07:36:8d:ed:af: 35:a8:6e:18:a4:5f:eb:bb:1f:6d:ae:bb:5a:3f:02:88:21:37: d3:6d:db:a6:58:71:13:7f:5d:a5:be:72:f9:1a:43:0e:61:4e: b8:f4:aa:79:89:3a:97:80:09:78:74:73:e4:40:8a:b5:1a:af: 56:21:fd:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjYwNDIwMjAyOTAwWhcNMjYwNDI3MjAyOTAwWjAYMRYwFAYD VQQDEw02OWU2OGM4Yy0wMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue3SPLWi4AKnG2Ye/uqKEoJmRnkI+sjmoJRxMresa/k+MKks5by5FfsAJnOy FSAXv1qK8yTxS17Vuzup48+UMlPthTJA7Rerys4Xjr/WbuOA83ggTlMOE576DzY7 XIa8G1Q0/9KnoMkUlINOGUDJyawHjb79Mkt7dTHrrW54zlkA9ebil8u3RiP97Tug 4wbn7p2dBvI8EegYpjLwg85kB6XBthBpCdpLIm2smOs2gF2ju+t3Gxn89Wmdu630 gEvp0ZtdbVjeP8guFl+7aiOoqUIZddeFX3HNelgKGUsj8sy2ZuWz4LqFw7+U9j+J QjWP6QXl63yeNyHAB7yE9oiT5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxV2UpI C6CfU1xBDm0nkb6wTlXRMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdD+bEtEL8DFTupcx4o6sjjuiDfThHZSICZTitWapboZDEj874kJxKo4zP9f6 Rk08Mp2bJgdTYiuXfu2DLTus2n4fmEPeawUeH5q0W/1iYXgFvRfgFjPIAlbiuN9W 4rBraRxtdvX+LWOwPu6CaWfJgFqSIOM8xhhhV2R17E9j4MmMQkUkY+zJ0MiIBA/I 5cpEzUadFlwPQHpXCQkdEz9wcktIdpg8gIbTJhl1rTMQEXhbf9nmrhXoiTPOLicw PgEDIwc2je2vNahuGKRf67sfba67Wj8CiCE3023bplhxE39dpb5y+RpDDmFOuPSq eYk6l4AJeHRz5ECKtRqvViH9jQ== -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:12 2026 by rpki-client