$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: he0Gpq2VGr4slt9Boo1CCy6mA85rVzDVRqLl9uWWCGY= Subject key identifier: 65:82:14:6D:7B:D8:89:91:14:19:11:F9:02:11:A2:C0:15:AB:25:8D Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 020B Signing time: Sun 05 Apr 2026 02:43:44 +0000 Manifest this update: Sun 05 Apr 2026 02:43:44 +0000 Manifest next update: Sun 12 Apr 2026 02:43:44 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: Aoyf3Tg+liiBk7OCW/tVJoQqUte7iwBGx52xzxzmBNw=) 2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: l/0T2BsqMpYHNb99BtwYJXwOCZfICpcu+3uO0zv0gmw=) 3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: J8fq57XN7vQJ2L4+yTAT2Y4PP+ynsI4ubh+NWiJOhRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Apr 5 02:43:44 2026 GMT Not After : Apr 12 02:43:44 2026 GMT Subject: CN=69d1cc60-694c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:8b:81:bd:6d:09:76:2e:d1:d2:c2:46:e0: 93:b4:8c:1d:7f:4e:82:21:6a:7a:64:f7:76:be:3f: a8:ce:0f:89:ca:3b:8e:c1:e2:35:a7:f8:06:5b:62: b3:7b:f6:c9:a1:2d:7d:2d:41:2c:4a:a8:a4:13:cb: b1:99:d0:f2:b7:96:27:26:33:d1:f7:8d:0e:fd:58: e9:5e:a5:f4:c6:59:6c:ca:dd:b4:e4:41:ac:dd:68: 0c:78:e4:e6:72:21:d7:5e:12:56:32:38:a7:4f:d5: ba:a2:b8:27:ef:ec:a4:23:81:b5:08:9c:89:7d:9d: 1a:9a:5e:b7:44:b0:6e:a3:92:bd:3f:87:ea:0a:01: 40:60:42:c5:62:d6:b2:9e:85:b9:22:8e:5c:9b:12: 3a:74:64:a0:05:6e:ac:cd:81:69:fe:dc:64:fc:bd: fd:93:7a:4e:82:f2:e7:74:5f:0d:54:38:0d:6a:5a: 55:3e:8f:fe:77:16:47:7c:c2:ad:24:10:b9:10:37: 60:fb:f9:8a:f5:91:e0:b3:71:46:3f:88:47:25:88: 55:16:06:40:6a:8c:d8:e9:11:2a:ed:09:de:c4:15: 05:d5:66:6d:87:f2:85:ef:86:e3:1c:4a:5e:90:24: 46:f5:e5:c6:cb:be:6c:db:a2:e4:6b:a6:f6:46:2c: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:14:6D:7B:D8:89:91:14:19:11:F9:02:11:A2:C0:15:AB:25:8D X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7b:5a:1e:5c:b4:39:49:0b:af:7c:f5:e4:35:1f:0e:9f:01: 21:10:8b:ec:bd:62:28:65:6f:bc:21:c7:84:26:9f:61:15:4c: 43:cd:2b:36:60:2e:a6:27:66:83:32:26:79:99:b2:4f:e2:f1: bb:26:0c:74:56:65:1c:a8:e4:a4:c2:7f:51:64:5a:f6:bb:a1: a3:a4:e9:41:b9:97:6f:f8:f8:d2:b1:3e:33:42:c8:34:ba:fa: 40:98:0e:b8:a1:bb:04:5b:d5:23:fe:6a:f7:cb:6d:15:66:89: b5:99:6f:e1:6d:89:9d:d2:8c:9e:5e:fe:0e:6f:8f:00:9c:ab: 9c:60:9b:fc:3c:5a:ad:cf:04:70:e9:6e:98:23:72:2a:69:f5: c2:a7:75:0c:5f:5a:79:44:2b:e9:4f:27:68:b5:16:e4:b1:48: 69:1a:5f:b4:07:45:f3:64:2e:be:14:46:2f:d9:e6:57:c9:bb: b5:41:61:8f:f0:9d:61:99:8a:49:46:8b:ac:ef:4a:c9:20:7f: 52:fd:7f:6b:09:90:c0:88:59:54:bf:9a:87:e4:ed:7b:c9:cd: f9:60:41:56:ad:c3:d6:46:61:19:eb:2c:2d:cc:a8:62:6e:48: c5:ac:d9:a8:29:34:55:cd:4f:6f:52:3b:8f:f1:53:41:ec:a8: e1:df:fb:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjYwNDA1MDI0MzQ0WhcNMjYwNDEyMDI0MzQ0WjAYMRYwFAYD VQQDEw02OWQxY2M2MC02OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6qLgb1tCXYu0dLCRuCTtIwdf06CIWp6ZPd2vj+ozg+JyjuOweI1p/gGW2Kz e/bJoS19LUEsSqikE8uxmdDyt5YnJjPR940O/VjpXqX0xllsyt205EGs3WgMeOTm ciHXXhJWMjinT9W6orgn7+ykI4G1CJyJfZ0aml63RLBuo5K9P4fqCgFAYELFYtay noW5Io5cmxI6dGSgBW6szYFp/txk/L39k3pOgvLndF8NVDgNalpVPo/+dxZHfMKt JBC5EDdg+/mK9ZHgs3FGP4hHJYhVFgZAaozY6REq7QnexBUF1WZth/KF74bjHEpe kCRG9eXGy75s26Lka6b2Riw+JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWCFG17 2ImRFBkR+QIRosAVqyWNMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyntaHly0OUkLr3z15DUfDp8BIRCL7L1iKGVvvCHHhCafYRVMQ80rNmAupidm gzImeZmyT+LxuyYMdFZlHKjkpMJ/UWRa9ruho6TpQbmXb/j40rE+M0LINLr6QJgO uKG7BFvVI/5q98ttFWaJtZlv4W2JndKMnl7+Dm+PAJyrnGCb/Dxarc8EcOlumCNy Kmn1wqd1DF9aeUQr6U8naLUW5LFIaRpftAdF82QuvhRGL9nmV8m7tUFhj/CdYZmK SUaLrO9KySB/Uv1/awmQwIhZVL+ah+Tte8nN+WBBVq3D1kZhGessLcyoYm5IxazZ qCk0Vc1Pb1I7j/FTQeyo4d/70w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:15 2026 by rpki-client