$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: dUTTihWWMXgpEGvLthSUOpKvK6h6DNkdyphs//8O3dY= Subject key identifier: 8A:30:BE:16:36:75:61:40:4E:D6:DF:4D:46:1A:BF:57:59:D1:55:6D Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 09B6 Signing time: Sat 04 Apr 2026 19:43:58 +0000 Manifest this update: Sat 04 Apr 2026 19:43:57 +0000 Manifest next update: Sat 11 Apr 2026 19:43:57 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: r7Rp+1FsKPjGq4sx59sT15uEWlRIj4pojEz9lkjxc8I=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Apr 4 19:43:57 2026 GMT Not After : Apr 11 19:43:57 2026 GMT Subject: CN=69d169fd-cc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:37:58:bd:cb:de:9e:c4:d1:b7:b5:fe:0b: 2c:32:c1:c2:6f:8a:62:fa:b5:98:a5:df:70:28:08: 9f:e3:13:4c:3f:42:3f:c6:84:f1:af:fd:72:38:fe: 84:3d:8d:a8:37:40:2c:7a:9f:01:50:53:2e:0e:1a: f5:0f:0c:6d:b4:da:9e:9e:e1:8e:88:62:cc:f3:26: 4b:8d:42:5a:4a:3d:6a:6a:58:1d:81:ac:f3:8c:b6: 5f:d1:8e:5c:e9:9e:ad:8e:1d:0e:42:3e:b9:b0:0a: 04:ad:81:b0:c6:98:74:19:87:4e:4f:21:fb:f7:43: a0:92:63:78:97:2d:ea:b7:29:00:4b:2a:05:e8:73: 26:b1:d5:3c:42:ef:51:a7:39:d1:96:bb:93:40:4f: f5:29:be:35:af:9d:e5:08:19:7f:c8:23:08:0d:17: c0:64:ae:4e:fc:d7:47:e5:b4:1e:19:1c:35:06:c8: 9c:86:a8:52:b0:57:ee:f1:a2:db:b2:b7:3f:6c:8b: e6:f7:5a:fb:ca:22:30:f1:e9:b9:13:81:a5:d1:ac: b1:4d:03:bb:ff:66:cf:78:26:bc:02:90:9c:ef:c0: d5:4e:f9:e7:bc:22:0f:17:7f:17:3e:2c:40:20:af: c4:69:f7:34:76:05:74:15:3b:94:79:14:92:16:4d: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:30:BE:16:36:75:61:40:4E:D6:DF:4D:46:1A:BF:57:59:D1:55:6D X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ea:62:61:22:49:1c:04:9d:3d:21:cf:bf:7d:18:f5:2b:12: 03:d0:5b:67:29:ee:ec:2a:42:13:46:ad:30:7c:9e:14:87:38: db:69:1a:75:84:6f:39:d0:30:87:f0:cc:56:23:22:7e:15:da: 03:72:ee:bb:7c:e1:e2:ab:d7:fd:46:5d:9f:0a:dc:5c:fe:ad: 3a:fb:a3:62:24:59:16:3e:ea:2a:60:3f:a5:99:88:ec:2c:14: bb:de:05:d9:9d:3a:75:8f:ff:b2:8f:07:01:6c:5f:2c:ef:aa: dc:d5:bb:d8:bc:64:6f:fc:d2:4d:e2:04:5a:f0:77:e6:d4:84: 53:74:32:11:e2:5c:fa:1c:53:a6:3d:d3:50:72:e9:f5:a2:f2: 28:81:58:0a:82:98:e1:92:ef:25:65:2e:d1:d3:ee:b8:1c:6f: db:e2:94:5d:fe:d1:ac:99:ba:32:28:e3:cb:44:5b:7b:6e:70: e9:b7:04:09:e1:bd:ab:83:8b:80:fd:e3:03:48:7d:ff:43:4c: c6:08:1b:5b:a5:1c:29:88:cd:bb:b9:dd:7c:44:c2:c3:f0:43: 01:19:c3:78:0e:5b:4f:e8:b5:d5:86:e6:70:74:2a:cb:f6:d1: 13:ac:d0:08:57:92:51:a0:26:07:16:0a:7c:61:bf:6b:96:3c: 36:cd:9e:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjYwNDA0MTk0MzU3WhcNMjYwNDExMTk0MzU3WjAYMRYwFAYD VQQDEw02OWQxNjlmZC1jYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVA3WL3L3p7E0be1/gssMsHCb4pi+rWYpd9wKAif4xNMP0I/xoTxr/1yOP6E PY2oN0Asep8BUFMuDhr1DwxttNqenuGOiGLM8yZLjUJaSj1qalgdgazzjLZf0Y5c 6Z6tjh0OQj65sAoErYGwxph0GYdOTyH790OgkmN4ly3qtykASyoF6HMmsdU8Qu9R pznRlruTQE/1Kb41r53lCBl/yCMIDRfAZK5O/NdH5bQeGRw1BsichqhSsFfu8aLb src/bIvm91r7yiIw8em5E4Gl0ayxTQO7/2bPeCa8ApCc78DVTvnnvCIPF38XPixA IK/Eafc0dgV0FTuUeRSSFk39HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIowvhY2 dWFATtbfTUYav1dZ0VVtMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOpiYSJJHASdPSHPv30Y9SsSA9BbZynu7CpCE0atMHyeFIc422kadYRvOdAw h/DMViMifhXaA3Luu3zh4qvX/UZdnwrcXP6tOvujYiRZFj7qKmA/pZmI7CwUu94F 2Z06dY//so8HAWxfLO+q3NW72Lxkb/zSTeIEWvB35tSEU3QyEeJc+hxTpj3TUHLp 9aLyKIFYCoKY4ZLvJWUu0dPuuBxv2+KUXf7RrJm6Mijjy0Rbe25w6bcECeG9q4OL gP3jA0h9/0NMxggbW6UcKYjNu7ndfETCw/BDARnDeA5bT+i11YbmcHQqy/bRE6zQ CFeSUaAmBxYKfGG/a5Y8Ns2eOw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:41:07 2026 by rpki-client