$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: eJzYCNWGlDD35c3uE5c3Imu/ipwHUxsMJB8SBDs47pY= Subject key identifier: E2:B2:B7:B7:C1:E0:C1:4A:C3:F4:23:6D:0F:7D:35:7F:BA:13:E5:D8 Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 42 Signing time: Sun 05 Apr 2026 07:47:40 +0000 Manifest this update: Sun 05 Apr 2026 07:47:40 +0000 Manifest next update: Sun 12 Apr 2026 07:47:40 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: vF71G0QmT9+jHeRKXpQotIsxmKunJUE1nFhvX387COM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Apr 5 07:47:40 2026 GMT Not After : Apr 12 07:47:40 2026 GMT Subject: CN=69d2139c-817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:29:db:c9:26:1c:0c:2b:e6:e1:d5:8e:2f: 97:e9:80:4f:84:2b:04:09:87:5e:9a:07:c8:d1:5d: 58:aa:72:c0:ba:eb:47:50:52:8f:40:d0:5b:eb:bf: 1c:80:b6:5d:fa:19:37:93:e5:75:01:98:6e:41:0f: 64:de:16:80:a4:26:79:3f:67:ef:d7:2e:00:ed:5b: 56:db:37:aa:4a:9b:66:a6:07:4b:05:dc:83:44:5a: aa:82:44:fc:4b:62:df:32:b8:93:68:68:31:b3:87: 23:e7:51:02:d6:f4:c2:fa:f2:ec:79:aa:bc:29:ef: 09:7a:5d:77:c9:2d:2a:c0:ed:3d:fb:1d:2f:82:a8: 9d:51:2d:8f:bb:86:11:94:55:00:da:38:e5:18:3d: 1a:de:3d:dd:9e:32:ad:2d:81:0b:01:bf:3f:70:bf: a9:25:76:af:bc:ac:d8:7f:14:38:6f:51:f3:de:1c: 8a:45:51:27:ba:11:60:f0:56:b1:cb:81:ea:ba:9d: e0:11:53:1f:11:4c:cb:c0:21:e7:b2:66:35:8a:c7: b6:54:63:1d:f1:95:a0:ca:2f:4b:6d:a4:8c:9b:30: 25:02:6c:f1:32:5e:4c:e8:d9:1a:08:86:1d:26:3e: 2f:93:c8:59:83:e3:03:cc:e3:17:1b:22:27:c4:7c: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B2:B7:B7:C1:E0:C1:4A:C3:F4:23:6D:0F:7D:35:7F:BA:13:E5:D8 X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:6c:44:e3:f1:b9:54:db:4b:a1:e4:74:25:af:3c:58:de: cb:fe:9f:5a:d8:fe:5e:6e:90:22:6e:d3:e1:4b:be:d0:42:86: 14:54:2c:3c:0b:06:00:ce:41:c0:f8:e6:63:74:97:a7:3b:4e: 23:18:e6:0a:11:4c:a9:c6:8d:6a:fd:d1:b9:35:44:b8:d2:76: a8:10:8c:dc:2d:29:09:35:5c:f5:67:43:bd:2b:0e:28:21:25: 95:48:d2:b4:ac:fe:6a:26:6b:3e:9c:3b:8b:68:40:c1:87:30: ec:86:bb:66:c4:d9:f6:f8:68:7f:6a:2b:ce:61:08:33:21:ca: 5a:cc:32:cb:6a:ed:87:8f:38:e9:17:94:37:bf:14:15:dd:7a: 1f:07:18:03:8f:cc:0a:10:58:93:ee:13:7e:56:22:bd:78:88: 25:ce:b4:6e:7e:af:ef:aa:12:00:45:39:be:59:fa:77:99:0f: 4f:23:70:ed:c5:b2:3a:d3:a4:28:87:6a:82:50:37:59:fc:e9: 0e:79:1d:37:63:b0:29:62:b7:ad:72:ed:93:fc:80:4b:1e:f0: ea:92:81:97:0a:ec:ae:98:db:50:3f:2e:5e:bb:62:9a:4d:ed: ca:8d:48:29:01:49:fc:bb:d7:43:ff:38:8f:6a:94:a3:68:99: 4f:16:15:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNjA0MDUwNzQ3NDBaFw0yNjA0MTIwNzQ3NDBaMBgxFjAUBgNV BAMTDTY5ZDIxMzljLTgxN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpDSnbySYcDCvm4dWOL5fpgE+EKwQJh16aB8jRXViqcsC660dQUo9A0FvrvxyA tl36GTeT5XUBmG5BD2TeFoCkJnk/Z+/XLgDtW1bbN6pKm2amB0sF3INEWqqCRPxL Yt8yuJNoaDGzhyPnUQLW9ML68ux5qrwp7wl6XXfJLSrA7T37HS+CqJ1RLY+7hhGU VQDaOOUYPRrePd2eMq0tgQsBvz9wv6kldq+8rNh/FDhvUfPeHIpFUSe6EWDwVrHL geq6neARUx8RTMvAIeeyZjWKx7ZUYx3xlaDKL0ttpIybMCUCbPEyXkzo2RoIhh0m Pi+TyFmD4wPM4xcbIifEfAM5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4rK3t8Hg wUrD9CNtD301f7oT5dgwHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBEWWxE4/G5VNtLoeR0Ja88WN7L/p9a2P5ebpAibtPhS77QQoYUVCw8CwYAzkHA +OZjdJenO04jGOYKEUypxo1q/dG5NUS40naoEIzcLSkJNVz1Z0O9Kw4oISWVSNK0 rP5qJms+nDuLaEDBhzDshrtmxNn2+Gh/aivOYQgzIcpazDLLau2HjzjpF5Q3vxQV 3XofBxgDj8wKEFiT7hN+ViK9eIglzrRufq/vqhIARTm+Wfp3mQ9PI3DtxbI606Qo h2qCUDdZ/OkOeR03Y7ApYretcu2T/IBLHvDqkoGXCuyumNtQPy5eu2KaTe3KjUgp AUn8u9dD/ziPapSjaJlPFhUh -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:05 2026 by rpki-client