$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: gJDAN4MtckqpD7B8ClRDNM9hOjGw25a3Hs6jSFSFWps= Subject key identifier: 4A:6E:79:2B:51:4F:A5:AB:3E:4B:7B:B0:02:74:CA:FB:23:6D:E8:16 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 010C Signing time: Sun 05 Apr 2026 05:28:00 +0000 Manifest this update: Sun 05 Apr 2026 05:28:00 +0000 Manifest next update: Sun 12 Apr 2026 05:28:00 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: O5m9Ya9xUD8oP1shHKfwSneQp72R707RtqHU2ua4g8k=) 2: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=) 3: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Apr 5 05:28:00 2026 GMT Not After : Apr 12 05:28:00 2026 GMT Subject: CN=69d1f2e0-417a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:77:b3:c4:a3:99:b7:cb:e9:0a:64:6c:44: ad:f2:ba:95:7e:aa:2d:6a:39:ae:82:78:61:ee:b8: c7:8e:a2:b0:34:e1:4e:95:3d:7f:9a:30:c8:31:10: f8:de:30:c1:a5:d5:df:95:1d:e3:f5:2c:7b:7c:19: 76:2c:e7:63:b1:e4:e1:f3:5a:2c:63:88:12:fa:f3: f8:89:d1:5c:6e:0c:ae:27:de:ce:85:78:ef:96:04: 86:e3:20:a0:8a:d0:bc:66:a6:b4:55:2f:da:8b:c9: c3:63:c3:bf:74:27:6a:10:7c:d8:79:37:76:a6:61: be:9d:c5:de:73:e1:eb:00:55:23:c2:5a:dc:55:45: 1f:50:89:c3:c1:74:89:98:a9:08:41:69:f6:ca:48: 53:97:15:20:c2:2d:6c:cf:e5:18:1b:fd:29:d1:60: ba:a5:8a:5a:2b:c6:95:86:70:62:ac:77:22:63:1d: 5e:e5:71:74:db:af:6b:f6:31:32:f7:82:3e:ac:55: a7:e3:33:3d:33:a6:2c:00:02:91:2d:cc:f3:af:c1: b8:54:5c:0e:06:77:3f:5a:27:40:b8:bd:79:d7:2c: d4:44:eb:ff:5c:2c:4a:7a:cc:ca:44:a7:65:1b:28: 88:b8:17:6f:9e:42:a7:a5:77:e5:98:b0:7c:bc:22: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:79:2B:51:4F:A5:AB:3E:4B:7B:B0:02:74:CA:FB:23:6D:E8:16 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:8e:c0:65:2e:35:01:ec:2f:20:5b:ae:88:bd:68:1d:a7: 8e:7e:00:b6:73:32:c6:c6:71:5a:49:59:5f:62:35:1b:c3:2e: 65:76:e1:db:b2:af:fc:0f:98:a0:f1:a3:8c:90:c5:76:6c:8e: d4:28:91:0c:c2:b8:9b:f6:b4:bb:f5:6b:b4:6e:86:71:c5:0a: 77:61:d7:b9:a6:a9:50:71:51:a9:ae:20:c2:5f:80:2c:0e:0c: 2a:fa:cc:6c:32:f2:44:b0:f0:ac:dc:a8:c1:2d:cf:59:4f:32: 46:ad:aa:9c:1b:99:4a:47:ce:dc:be:d9:b2:90:c0:65:4f:98: 1d:22:41:49:5c:a3:ab:a6:b3:70:5b:4a:29:33:08:f4:8c:3b: 0e:ef:7c:56:85:9b:98:87:7f:cd:98:33:e5:92:7a:ac:b1:b4: 1f:19:0a:54:8b:75:d5:4d:e0:28:9c:ad:97:c3:5d:d7:c6:2b: 62:9a:75:1e:ba:81:66:99:19:a0:52:e4:1d:04:3c:06:2a:f1: d5:96:32:a7:a1:ac:31:26:b2:64:a2:2b:c3:27:4c:52:8b:36: 34:05:f7:c4:4c:6a:8a:3a:1a:dc:ed:d9:78:1b:c8:27:56:3f: 7a:d1:0c:d8:16:1c:5a:0d:38:4a:cc:d7:63:bb:da:cf:be:f9: 54:5b:b4:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYwNDA1MDUyODAwWhcNMjYwNDEyMDUyODAwWjAYMRYwFAYD VQQDEw02OWQxZjJlMC00MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomJ3s8SjmbfL6QpkbESt8rqVfqotajmugnhh7rjHjqKwNOFOlT1/mjDIMRD4 3jDBpdXflR3j9Sx7fBl2LOdjseTh81osY4gS+vP4idFcbgyuJ97OhXjvlgSG4yCg itC8Zqa0VS/ai8nDY8O/dCdqEHzYeTd2pmG+ncXec+HrAFUjwlrcVUUfUInDwXSJ mKkIQWn2ykhTlxUgwi1sz+UYG/0p0WC6pYpaK8aVhnBirHciYx1e5XF0269r9jEy 94I+rFWn4zM9M6YsAAKRLczzr8G4VFwOBnc/WidAuL151yzUROv/XCxKeszKRKdl GyiIuBdvnkKnpXflmLB8vCJdWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpueStR T6WrPkt7sAJ0yvsjbegWMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbbOOwGUuNQHsLyBbroi9aB2njn4AtnMyxsZxWklZX2I1G8MuZXbh27Kv/A+Y oPGjjJDFdmyO1CiRDMK4m/a0u/VrtG6GccUKd2HXuaapUHFRqa4gwl+ALA4MKvrM bDLyRLDwrNyowS3PWU8yRq2qnBuZSkfO3L7ZspDAZU+YHSJBSVyjq6azcFtKKTMI 9Iw7Du98VoWbmId/zZgz5ZJ6rLG0HxkKVIt11U3gKJytl8Nd18YrYpp1HrqBZpkZ oFLkHQQ8Birx1ZYyp6GsMSayZKIrwydMUos2NAX3xExqijoa3O3ZeBvIJ1Y/etEM 2BYcWg04SszXY7vaz775VFu0hA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:38 2026 by rpki-client