$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: Ow9g6ARImI+c1ycMPTo0PTHou+d4CDW2X4SYjCUqGD8= Subject key identifier: 74:64:50:60:FE:69:32:F1:9C:7F:C8:5A:BE:C0:FD:4D:7D:D3:DC:2E Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 04E3 Signing time: Sat 04 Apr 2026 23:37:37 +0000 Manifest this update: Sat 04 Apr 2026 23:37:36 +0000 Manifest next update: Sat 11 Apr 2026 23:37:36 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: DRsHL9bWeSadPeeOENop3rrj8S1ljhyBa+kR9zhy27U=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Apr 4 23:37:36 2026 GMT Not After : Apr 11 23:37:36 2026 GMT Subject: CN=69d1a0c1-e162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:e6:9c:0b:92:89:18:ad:17:97:a9:40:6f: 11:40:b9:4a:bf:11:95:37:b6:13:aa:49:c7:e6:48: 7e:a3:11:23:8a:0d:eb:fb:c3:4d:a7:47:3b:f0:d1: 56:12:b3:f2:93:1e:b2:3d:c0:d0:46:7e:82:2f:6c: 4b:3b:e3:1c:2f:1e:01:0e:f4:68:63:77:4b:c2:43: a9:24:8f:2d:63:2b:1b:2d:26:b1:0a:39:e9:9e:d6: 26:aa:fd:54:50:53:e1:9f:a6:f0:d7:47:3f:3c:e3: a1:cd:98:ca:fd:63:ac:80:6f:33:31:78:b0:e9:6c: d0:4d:b0:93:c9:9f:a9:39:1a:9e:f2:d1:e4:1e:69: da:9a:78:7e:03:34:cc:87:04:60:50:2f:20:8d:51: b2:c9:a7:cc:39:08:de:3d:b3:93:a2:aa:cc:6f:47: 37:04:2d:56:93:13:14:e9:e0:8f:e9:c9:3b:0c:2a: 08:35:1f:33:4c:4d:2b:ea:51:a3:2d:10:39:e8:1e: b7:9a:ea:0b:0b:9a:23:68:ef:77:4b:ca:40:b0:39: a1:ad:eb:ef:b3:a1:c5:ab:8f:82:13:77:fc:c5:cb: cc:30:b8:74:f3:c6:45:d3:01:7e:6b:e0:27:16:de: f7:eb:96:6b:f9:78:7e:c2:7d:69:ff:05:47:42:7d: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:50:60:FE:69:32:F1:9C:7F:C8:5A:BE:C0:FD:4D:7D:D3:DC:2E X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:09:40:f2:50:8b:39:40:81:12:1a:d2:cc:a4:bc:f0:c8:ad: 3d:ed:8b:6a:34:13:33:82:00:4a:b0:6b:0b:80:bc:9e:be:98: fe:6b:b3:a5:c2:f2:19:65:4e:5b:0c:12:47:9a:db:f3:4b:c6: 18:3b:30:d8:1e:fa:ca:26:f2:99:dd:19:ff:7b:89:ff:29:b7: 3b:e3:7f:ff:54:99:71:70:7e:01:93:32:ef:df:25:ed:b0:67: 32:04:41:f1:33:0d:4b:51:18:10:9f:c6:b5:c5:f7:e4:04:74: 90:36:10:23:c0:65:ae:b5:17:98:60:f6:89:62:20:91:09:c2: a2:ef:f0:56:7c:1e:7a:af:8a:7c:6d:05:9a:db:82:b8:a0:94: 3a:7c:25:2e:5e:89:f3:f1:17:c0:4a:a9:d7:43:0a:64:1b:d7: 0c:f0:e3:92:30:6a:78:44:5b:fb:e3:05:4c:e0:63:bd:dd:d1: ce:49:5f:6a:b4:b2:b0:13:14:63:e7:27:c8:a6:ff:52:74:32: 26:09:d5:b9:7a:a4:51:4c:36:46:c9:ef:a9:02:1f:51:dc:88: 25:b6:27:8c:fb:89:94:a6:46:0c:d7:6f:53:99:b5:0d:c5:59: 47:62:b9:44:84:41:6c:e0:53:c1:35:8c:c6:a2:8e:08:67:7e: 4c:03:c9:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjYwNDA0MjMzNzM2WhcNMjYwNDExMjMzNzM2WjAYMRYwFAYD VQQDEw02OWQxYTBjMS1lMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9LmnAuSiRitF5epQG8RQLlKvxGVN7YTqknH5kh+oxEjig3r+8NNp0c78NFW ErPykx6yPcDQRn6CL2xLO+McLx4BDvRoY3dLwkOpJI8tYysbLSaxCjnpntYmqv1U UFPhn6bw10c/POOhzZjK/WOsgG8zMXiw6WzQTbCTyZ+pORqe8tHkHmnamnh+AzTM hwRgUC8gjVGyyafMOQjePbOToqrMb0c3BC1WkxMU6eCP6ck7DCoINR8zTE0r6lGj LRA56B63muoLC5ojaO93S8pAsDmhrevvs6HFq4+CE3f8xcvMMLh088ZF0wF+a+An Ft7365Zr+Xh+wn1p/wVHQn0yVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRkUGD+ aTLxnH/IWr7A/U1909wuMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhwlA8lCLOUCBEhrSzKS88MitPe2LajQTM4IASrBrC4C8nr6Y/muzpcLyGWVO WwwSR5rb80vGGDsw2B76yibymd0Z/3uJ/ym3O+N//1SZcXB+AZMy798l7bBnMgRB 8TMNS1EYEJ/GtcX35AR0kDYQI8BlrrUXmGD2iWIgkQnCou/wVnweeq+KfG0FmtuC uKCUOnwlLl6J8/EXwEqp10MKZBvXDPDjkjBqeERb++MFTOBjvd3RzklfarSysBMU Y+cnyKb/UnQyJgnVuXqkUUw2RsnvqQIfUdyIJbYnjPuJlKZGDNdvU5m1DcVZR2K5 RIRBbOBTwTWMxqKOCGd+TAPJZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:38:17 2026 by rpki-client