$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: eT2WxxZ8A0t6rH0pLYUK4/7MWw6SmCPBZFxSkE/1eIY= Subject key identifier: 85:BD:F6:B3:ED:74:E5:2B:0C:FD:5E:6E:D7:3E:2A:75:10:2D:84:E6 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 23EC Signing time: Sat 04 Apr 2026 15:44:39 +0000 Manifest this update: Sat 04 Apr 2026 15:44:39 +0000 Manifest next update: Sat 11 Apr 2026 15:44:39 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: OgOXX4tESy3ku1fMSBTsnxYU91fv1NizHr/Zz1uabPw=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9215 (0x23ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Apr 4 15:44:39 2026 GMT Not After : Apr 11 15:44:39 2026 GMT Subject: CN=69d131e7-644c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:45:fa:b9:60:44:2a:83:71:63:46:c0:de: 84:81:71:73:33:6a:cb:32:21:4e:0a:66:54:a9:3b: 22:55:0c:b4:3e:16:da:47:f1:1f:d4:c1:f8:a1:29: 42:c9:48:cb:3d:e3:62:8b:f4:4c:fe:fc:46:fb:d3: 18:76:29:89:fa:90:5d:12:98:47:e1:88:81:88:23: f5:fb:bb:3c:5e:5f:aa:52:53:b0:fa:77:0b:3d:52: 41:d2:53:0b:8d:be:2a:35:be:98:c3:21:9f:33:c1: 73:a2:97:cb:65:22:83:61:fa:c8:37:8f:dd:87:20: 82:72:6e:45:04:30:e5:41:ac:2f:a5:ab:70:65:08: 88:18:8c:2f:23:37:58:be:51:60:3b:9c:f7:f0:f1: 3d:33:ea:8f:29:7b:08:da:16:c4:ad:6c:ac:0c:fd: 50:ea:14:df:82:d7:04:41:f2:44:6d:d1:a5:92:19: c1:a9:dd:c4:44:be:74:c7:a6:e3:ba:25:07:57:01: 55:e4:15:8f:51:c6:1d:fd:54:b3:ef:dd:30:7f:88: 22:36:1f:e5:0a:02:76:5a:8d:3e:03:e5:aa:8d:86: 09:54:15:d2:bc:1b:59:96:7b:f1:9c:c9:68:29:dd: 2a:ea:de:82:e2:dc:1a:ed:c2:e8:cf:6c:a9:06:ea: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:F6:B3:ED:74:E5:2B:0C:FD:5E:6E:D7:3E:2A:75:10:2D:84:E6 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1b:88:15:88:d0:35:cf:01:2a:3c:5d:ec:2f:d9:21:0e:91: d6:3c:b5:6d:c5:20:b3:49:a8:57:8b:22:82:bb:2b:26:b6:de: ef:e5:99:23:0f:b6:e5:3f:56:0f:bd:dd:9c:d3:15:f0:76:78: ab:f1:c7:1e:bb:04:a0:bd:81:31:c7:ed:b3:5d:c9:20:1d:6a: c2:20:d7:36:78:2c:88:3f:da:a3:6b:09:86:f4:55:d0:a8:4b: 25:d9:37:b3:e2:25:fd:3e:d2:69:c0:4d:f5:ab:90:1c:33:3d: a6:6f:71:24:e1:9b:0e:aa:3f:8f:10:41:4a:2f:0f:c6:e3:55: c8:0e:93:0e:05:a6:23:0f:21:18:29:63:6b:85:9e:09:7a:52: 28:d0:cf:a8:81:82:22:44:d8:43:dc:69:e0:fa:e6:1e:bb:fe: 1a:c8:09:07:bd:90:62:b6:b6:c0:03:65:de:69:38:66:e7:b2: 8c:80:8d:fe:b5:79:0a:29:9b:f5:80:86:d9:15:29:9d:12:ec: f4:91:4a:40:10:d5:6f:06:7b:76:27:3b:2b:3c:26:f8:c9:97: c0:24:bf:a3:2b:07:5c:56:d1:93:3d:1c:dc:b2:07:60:f0:df: 84:dc:eb:ba:51:37:29:f8:13:c1:73:48:0a:9a:e4:ac:bd:79: 04:15:5f:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjYwNDA0MTU0NDM5WhcNMjYwNDExMTU0NDM5WjAYMRYwFAYD VQQDEw02OWQxMzFlNy02NDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZNF+rlgRCqDcWNGwN6EgXFzM2rLMiFOCmZUqTsiVQy0PhbaR/Ef1MH4oSlC yUjLPeNii/RM/vxG+9MYdimJ+pBdEphH4YiBiCP1+7s8Xl+qUlOw+ncLPVJB0lML jb4qNb6YwyGfM8FzopfLZSKDYfrIN4/dhyCCcm5FBDDlQawvpatwZQiIGIwvIzdY vlFgO5z38PE9M+qPKXsI2hbErWysDP1Q6hTfgtcEQfJEbdGlkhnBqd3ERL50x6bj uiUHVwFV5BWPUcYd/VSz790wf4giNh/lCgJ2Wo0+A+WqjYYJVBXSvBtZlnvxnMlo Kd0q6t6C4twa7cLoz2ypBuraPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIW99rPt dOUrDP1ebtc+KnUQLYTmMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhuIFYjQNc8BKjxd7C/ZIQ6R1jy1bcUgs0moV4sigrsrJrbe7+WZIw+25T9W D73dnNMV8HZ4q/HHHrsEoL2BMcfts13JIB1qwiDXNngsiD/ao2sJhvRV0KhLJdk3 s+Il/T7SacBN9auQHDM9pm9xJOGbDqo/jxBBSi8PxuNVyA6TDgWmIw8hGClja4We CXpSKNDPqIGCIkTYQ9xp4PrmHrv+GsgJB72QYra2wANl3mk4ZueyjICN/rV5Cimb 9YCG2RUpnRLs9JFKQBDVbwZ7dic7Kzwm+MmXwCS/oysHXFbRkz0c3LIHYPDfhNzr ulE3KfgTwXNICprkrL15BBVfIw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:26 2026 by rpki-client