$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json) Hash identifier: qOWCBQfDi5DWbZCF3cUBjjAM7Rw9v6ti6I1w5wT9uRE= Subject key identifier: 33:1E:B7:8E:AC:1F:83:8D:A7:72:51:95:F4:27:00:9E:2F:D4:CF:5A Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft Manifest number: 55 Signing time: Sun 05 Apr 2026 07:29:57 +0000 Manifest this update: Sun 05 Apr 2026 07:29:57 +0000 Manifest next update: Sun 12 Apr 2026 07:29:57 +0000 Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: V1M3Vkp87CFjDSqXRXkpsIPybov5fJFLGZaoEo36E/Y=) 2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: 4o6d3Mckrzy48+xLI8bsyNkRAk7N9AqNPet+OzlxVP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Validity Not Before: Apr 5 07:29:57 2026 GMT Not After : Apr 12 07:29:57 2026 GMT Subject: CN=69d20f75-c341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:6f:f5:7e:23:48:5f:6d:89:0d:c6:54:41: 1e:c3:a3:79:3a:2e:32:f4:bd:76:7e:72:14:c3:36: a1:21:e6:4a:a7:9b:2b:cb:84:7d:09:34:4b:78:67: fe:b7:65:f4:59:0a:b4:04:73:df:30:f6:3f:8f:c6: 37:87:92:ac:5c:97:ea:46:ad:b3:ad:d2:55:f8:b0: 5c:8c:ff:09:6e:d9:66:f0:92:a0:49:51:68:f1:0b: c9:81:44:2f:23:5b:01:e0:13:43:be:f6:ce:a6:4d: 56:4b:32:44:18:3a:55:4f:dc:38:e9:56:a8:a5:1e: 81:03:34:89:d2:90:6c:74:e0:55:ae:46:ed:4e:6c: 46:b6:6c:c8:98:62:d0:49:bf:a5:58:58:8d:91:1a: 83:ed:9c:9c:a3:83:ea:c1:7c:00:9a:b6:52:95:df: 81:94:09:49:76:91:01:16:2c:79:a1:8a:3a:bf:cc: d5:c1:7a:d7:d4:cb:14:92:57:98:16:1c:fc:e0:85: a1:97:4b:31:5a:00:a2:03:0b:11:b9:c4:2e:55:30: 09:85:89:db:3c:14:13:9e:e6:66:09:d4:de:e6:52: a8:b9:f0:dc:7b:5f:e0:e7:27:a9:d6:32:68:8e:b8: c4:ef:2d:91:de:1e:9b:d7:87:11:d9:5f:cb:eb:c6: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:B7:8E:AC:1F:83:8D:A7:72:51:95:F4:27:00:9E:2F:D4:CF:5A X509v3 Authority Key Identifier: keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:e7:0f:af:5b:12:30:76:5b:c2:38:9c:4a:89:2d:84:3b:84: 33:2b:4c:e4:2c:4a:3c:9a:36:42:4b:71:d1:71:57:45:8a:1d: e3:5e:b7:d3:5a:8f:43:9f:e6:04:a2:5c:00:de:6c:8f:d8:7f: 6e:f4:ec:93:e6:2a:18:d7:43:1d:94:5f:34:9a:ac:12:e3:dd: 8a:f4:5b:b4:6a:b8:4a:72:60:1e:e3:b6:de:46:68:ec:1e:38: 52:d8:56:30:f8:00:1b:8f:4f:42:f4:2f:f3:fa:39:8a:b0:9b: d7:46:4f:4b:06:4d:09:2e:36:f9:8d:ac:16:f0:f1:e0:f5:d8: 26:61:3a:f4:67:a8:84:dc:00:cf:7f:32:93:47:a2:ad:26:38: 7e:2f:14:31:47:03:dc:48:e7:e1:8a:a3:fd:a8:ae:46:cb:ab: 46:dd:71:03:ca:54:86:b2:3f:ec:76:2e:94:e5:0c:3b:74:88: 06:05:86:2a:30:a6:57:00:57:97:fc:2e:58:ad:5a:8d:6b:2a: af:73:78:7b:3a:fb:87:c6:5e:5c:9b:7e:ae:7e:b1:b1:fe:bb: 34:8c:6e:0d:e6:07:68:56:2c:16:f7:a9:50:a0:05:11:94:e0: 89:40:30:f9:d2:b7:72:af:f1:ad:e1:21:74:2f:c9:c4:a7:b5: b8:13:ef:fd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE5NDExMC8GA1UEBRMoNjZDMkRCMEQ4QjY5MEM5NTM2QjA2QUI3Q0VDNjVDMDhE NTc2M0Y0RjAeFw0yNjA0MDUwNzI5NTdaFw0yNjA0MTIwNzI5NTdaMBgxFjAUBgNV BAMTDTY5ZDIwZjc1LWMzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNnW/1fiNIX22JDcZUQR7Do3k6LjL0vXZ+chTDNqEh5kqnmyvLhH0JNEt4Z/63 ZfRZCrQEc98w9j+PxjeHkqxcl+pGrbOt0lX4sFyM/wlu2WbwkqBJUWjxC8mBRC8j WwHgE0O+9s6mTVZLMkQYOlVP3DjpVqilHoEDNInSkGx04FWuRu1ObEa2bMiYYtBJ v6VYWI2RGoPtnJyjg+rBfACatlKV34GUCUl2kQEWLHmhijq/zNXBetfUyxSSV5gW HPzghaGXSzFaAKIDCxG5xC5VMAmFids8FBOe5mYJ1N7mUqi58Nx7X+DnJ6nWMmiO uMTvLZHeHpvXhxHZX8vrxiRrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMx63jqwf g42nclGV9CcAni/Uz1owHwYDVR0jBBgwFoAUZsLbDYtpDJU2sGq3zsZcCNV2P08w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTk0LzI5REUxMkNBQjND QTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpVMnNHcTN6c1pjQ05WMlAw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNMYkRZdHBESlUyc0dxM3pzWmNDTlYyUDA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTk0LzI5REUxMkNBQjNDQTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpV MnNHcTN6c1pjQ05WMlAwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDU5w+vWxIwdlvCOJxKiS2EO4QzK0zkLEo8mjZCS3HRcVdFih3jXrfTWo9Dn+YE olwA3myP2H9u9OyT5ioY10MdlF80mqwS492K9Fu0arhKcmAe47beRmjsHjhS2FYw +AAbj09C9C/z+jmKsJvXRk9LBk0JLjb5jawW8PHg9dgmYTr0Z6iE3ADPfzKTR6Kt Jjh+LxQxRwPcSOfhiqP9qK5Gy6tG3XEDylSGsj/sdi6U5Qw7dIgGBYYqMKZXAFeX /C5YrVqNayqvc3h7OvuHxl5cm36ufrGx/rs0jG4N5gdoViwW96lQoAURlOCJQDD5 0rdyr/Gt4SF0L8nEp7W4E+/9 -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:59 2026 by rpki-client