$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: wtk6jOTLD1Ry2kXuUfjiz3JofFCti20yC5+TYESUJZs= Subject key identifier: 28:FB:0D:F9:32:0B:21:92:CD:5F:2C:D6:54:79:5A:2E:EA:04:6F:11 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: 0150 Signing time: Sun 05 Apr 2026 04:30:26 +0000 Manifest this update: Sun 05 Apr 2026 04:30:25 +0000 Manifest next update: Sun 12 Apr 2026 04:30:25 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: ZL3fm/cAclvPHEYPkm/KDpFPzWk53ptxKFkJDVAbEKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: Apr 5 04:30:25 2026 GMT Not After : Apr 12 04:30:25 2026 GMT Subject: CN=69d1e562-4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:31:33:3f:99:cb:26:b0:18:cd:75:01:f0: 6a:2b:e2:89:99:6b:8a:33:d7:7b:99:1c:b4:a2:43: fa:d2:54:3d:ab:db:42:77:ab:43:4a:af:a3:27:f0: 33:ac:20:97:13:93:e4:96:d2:dc:22:73:4c:b7:15: 81:01:12:e7:47:76:55:b1:ce:37:56:56:c4:0f:86: 71:90:16:0b:6d:48:5c:19:85:0d:1c:99:a3:9d:90: 04:f6:a6:32:a4:39:35:4a:e9:f1:01:f1:47:d9:2a: d6:5c:51:3f:cb:fd:9e:96:8e:c9:ae:e5:ca:93:23: d2:f2:24:84:e5:07:51:a1:55:bf:09:6f:a7:7b:80: 35:96:a3:1e:75:39:02:42:27:68:97:d8:06:6b:3c: 30:9c:d6:a2:ff:02:8b:1a:05:b7:ec:57:df:bf:a3: 9b:71:5c:43:1a:34:78:3f:18:a4:0c:e2:d6:c4:4d: 9b:0d:d2:08:45:78:95:39:ed:eb:5d:7b:6e:95:1d: db:38:e6:ac:6b:f6:79:8f:26:26:6e:ec:c6:6c:a9: 80:08:e5:8d:53:5b:7b:55:a9:d8:51:12:56:c0:a8: b0:64:c7:63:d0:c1:93:a4:2f:13:70:42:af:62:3c: 22:26:09:88:ca:14:c3:0d:22:e6:80:c3:0d:f0:5a: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FB:0D:F9:32:0B:21:92:CD:5F:2C:D6:54:79:5A:2E:EA:04:6F:11 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f4:95:14:0a:79:1f:d7:eb:5f:c2:a0:59:80:9c:1a:34:1e: 27:d2:91:5f:ef:71:0b:ca:ab:67:2d:3e:b7:3f:40:90:77:4e: 3b:07:0b:9f:f4:91:ee:4f:f5:0a:93:7c:4e:2e:bb:de:0d:08: c0:2e:54:b8:43:90:fd:61:5e:57:c3:b5:50:c5:ed:80:52:e9: f0:2c:1f:0a:50:e7:ae:34:2e:72:d0:c6:69:3f:b5:ac:6f:fb: a1:ed:bb:74:3b:44:72:77:a3:90:a9:61:70:b2:73:b2:8a:4a: 31:b3:50:7f:84:3d:9c:f3:0a:2c:02:bc:1a:ed:c7:ea:ff:b1: 1c:fa:d1:46:ad:91:5c:43:c7:22:4c:89:0b:f3:03:9b:70:30: 46:80:47:0c:5a:16:68:9e:95:d8:33:d4:f8:a2:69:a2:1b:c8: 27:ae:18:45:4d:55:2b:f7:4d:03:21:90:f5:8e:59:71:eb:47: 6a:dd:dc:82:04:ab:b6:73:04:1a:84:c9:a3:83:b2:eb:5c:94: d5:1f:9f:9b:a1:91:1d:ca:eb:8c:95:b7:3e:91:ae:89:f9:8f: 31:07:20:e3:40:36:28:07:b9:1c:0c:c5:5d:9d:5e:f5:42:2e: c5:4c:bb:b3:8e:54:1a:92:85:e2:35:2e:37:de:e3:bb:1f:b1: a0:e1:3d:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjYwNDA1MDQzMDI1WhcNMjYwNDEyMDQzMDI1WjAYMRYwFAYD VQQDEw02OWQxZTU2Mi00ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAwxMz+ZyyawGM11AfBqK+KJmWuKM9d7mRy0okP60lQ9q9tCd6tDSq+jJ/Az rCCXE5PkltLcInNMtxWBARLnR3ZVsc43VlbED4ZxkBYLbUhcGYUNHJmjnZAE9qYy pDk1SunxAfFH2SrWXFE/y/2elo7JruXKkyPS8iSE5QdRoVW/CW+ne4A1lqMedTkC Qidol9gGazwwnNai/wKLGgW37Fffv6ObcVxDGjR4PxikDOLWxE2bDdIIRXiVOe3r XXtulR3bOOasa/Z5jyYmbuzGbKmACOWNU1t7VanYURJWwKiwZMdj0MGTpC8TcEKv YjwiJgmIyhTDDSLmgMMN8FrdXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCj7Dfky CyGSzV8s1lR5Wi7qBG8RMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlfSVFAp5H9frX8KgWYCcGjQeJ9KRX+9xC8qrZy0+tz9AkHdOOwcLn/SR7k/1 CpN8Ti673g0IwC5UuEOQ/WFeV8O1UMXtgFLp8CwfClDnrjQuctDGaT+1rG/7oe27 dDtEcnejkKlhcLJzsopKMbNQf4Q9nPMKLAK8Gu3H6v+xHPrRRq2RXEPHIkyJC/MD m3AwRoBHDFoWaJ6V2DPU+KJpohvIJ64YRU1VK/dNAyGQ9Y5ZcetHat3cggSrtnME GoTJo4Oy61yU1R+fm6GRHcrrjJW3PpGuifmPMQcg40A2KAe5HAzFXZ1e9UIuxUy7 s45UGpKF4jUuN97jux+xoOE9EQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:57:01 2026 by rpki-client