$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: NSUMIqMs3lC1vDUxzSTNzyckw4+/XGqxk+PjELDw7D4= Subject key identifier: 0E:05:55:D6:B9:8E:D6:1C:0B:49:1E:19:20:5D:EA:A0:F8:23:59:A8 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0CEA Signing time: Sat 04 Apr 2026 18:04:29 +0000 Manifest this update: Sat 04 Apr 2026 18:04:28 +0000 Manifest next update: Sat 11 Apr 2026 18:04:28 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: Xgr6RRNM4lHD7H70ZGctQl2WB/Jd54iE1ym9FxgssqE=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: Q8Oy4wo2YJgEZIjyNWkq80rcuQvvGozUBEBODPVmJ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Apr 4 18:04:28 2026 GMT Not After : Apr 11 18:04:28 2026 GMT Subject: CN=69d152ad-2a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:b9:8e:c7:7b:08:ec:4f:2d:b4:77:71:28: 8b:3e:40:06:0e:65:b8:c1:fe:dd:da:f1:67:7b:a3: 88:07:61:87:c3:06:fd:f0:c2:d6:d9:06:be:c0:41: 39:c6:26:33:b6:4e:32:ad:99:08:45:c9:dd:13:01: c4:d4:8f:a7:9c:bc:fb:b8:09:5b:33:0e:2b:78:78: 6c:2d:13:80:82:03:ff:48:1b:f4:b9:02:95:4d:0e: c7:b2:60:8a:25:b5:25:f3:d4:d2:34:3d:59:c5:f3: a1:b0:49:88:31:8e:78:f6:ec:ba:d9:c7:d4:94:40: c8:4e:e7:27:d5:9a:04:1d:a1:e7:ca:4a:14:3b:37: ef:98:7e:f0:d6:d3:2e:ae:c5:78:6f:15:d0:6d:b2: 6d:2c:f2:b1:9a:78:2d:c6:73:6c:fd:22:ce:31:27: d4:67:e3:0d:c1:a7:a9:a7:d3:48:b0:8d:35:56:e8: 40:3a:f7:82:8b:61:9e:1a:9e:87:9a:28:13:a8:39: b4:e4:80:a5:60:b0:e3:62:e8:eb:85:a1:2e:64:39: ce:28:e7:d0:dd:5e:96:9b:93:6c:9c:47:00:39:57: 66:85:50:97:8b:5d:fc:3a:75:5a:fe:1a:63:6e:0e: 0c:c5:46:2c:fa:37:08:c0:fc:47:8e:fc:f3:27:bd: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:55:D6:B9:8E:D6:1C:0B:49:1E:19:20:5D:EA:A0:F8:23:59:A8 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c7:a1:85:d1:0d:cd:85:d4:13:94:98:e0:36:8b:e9:c9:8e: c2:3f:5a:a2:ee:6f:f3:c9:4b:18:f9:c8:37:8c:05:9b:16:65: 7e:b5:74:85:5c:60:62:07:69:18:41:9e:c9:a6:34:a3:c9:48: e0:30:e7:3a:4b:31:81:97:20:bf:79:9b:c2:f0:ce:5f:42:a3: ff:c4:0f:17:6a:59:cd:b6:d4:29:70:28:d8:cc:70:ba:cf:ab: f8:4b:c4:a2:0a:f1:96:f3:07:c0:fb:27:9b:6e:98:82:a2:0e: e0:21:a9:77:89:43:33:2d:4b:42:b5:53:45:74:11:b8:39:32: 67:0f:d0:0a:c2:d4:ad:2e:9f:13:40:b5:b5:af:90:91:de:62: 7d:8e:37:69:37:15:9b:00:e8:ba:e0:db:a3:33:f7:e4:05:02: a3:ea:8e:61:5c:d1:64:20:16:f2:50:14:46:c6:f4:3c:27:62: 96:8d:cc:37:4d:12:b2:92:e3:7e:d5:fa:c6:3d:f4:97:56:7c: c6:97:f6:ed:ba:41:95:db:f2:e9:ec:dc:a5:89:a0:0d:ad:8b: 5f:10:4e:c4:da:d8:9c:58:c8:03:cb:0e:75:eb:aa:e1:58:a9: 4a:1b:e2:3f:75:2a:a4:1c:05:f2:9b:3f:b5:27:3e:69:64:ac: ce:54:68:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjYwNDA0MTgwNDI4WhcNMjYwNDExMTgwNDI4WjAYMRYwFAYD VQQDEw02OWQxNTJhZC0yYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvW5jsd7COxPLbR3cSiLPkAGDmW4wf7d2vFne6OIB2GHwwb98MLW2Qa+wEE5 xiYztk4yrZkIRcndEwHE1I+nnLz7uAlbMw4reHhsLROAggP/SBv0uQKVTQ7HsmCK JbUl89TSND1ZxfOhsEmIMY549uy62cfUlEDITucn1ZoEHaHnykoUOzfvmH7w1tMu rsV4bxXQbbJtLPKxmngtxnNs/SLOMSfUZ+MNwaepp9NIsI01VuhAOveCi2GeGp6H migTqDm05IClYLDjYujrhaEuZDnOKOfQ3V6Wm5NsnEcAOVdmhVCXi138OnVa/hpj bg4MxUYs+jcIwPxHjvzzJ71G5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4FVda5 jtYcC0keGSBd6qD4I1moMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO8ehhdENzYXUE5SY4DaL6cmOwj9aou5v88lLGPnIN4wFmxZlfrV0hVxgYgdp GEGeyaY0o8lI4DDnOksxgZcgv3mbwvDOX0Kj/8QPF2pZzbbUKXAo2Mxwus+r+EvE ogrxlvMHwPsnm26YgqIO4CGpd4lDMy1LQrVTRXQRuDkyZw/QCsLUrS6fE0C1ta+Q kd5ifY43aTcVmwDouuDbozP35AUCo+qOYVzRZCAW8lAURsb0PCdilo3MN00SspLj ftX6xj30l1Z8xpf27bpBldvy6ezcpYmgDa2LXxBOxNrYnFjIA8sOdeuq4VipShvi P3UqpBwF8ps/tSc+aWSszlRo0g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:31 2026 by rpki-client