$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: kLTnndhoXwIGPXFCOivy1yGlhyOAAE07BOaq0peKOjc= Subject key identifier: 3E:77:F5:46:85:66:BB:7A:F1:26:DC:36:00:9E:86:F6:44:EE:1E:E0 Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 03C1 Signing time: Sun 05 Apr 2026 00:24:31 +0000 Manifest this update: Sun 05 Apr 2026 00:24:30 +0000 Manifest next update: Sun 12 Apr 2026 00:24:30 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: 8+1yVDrrqH3WX8KlZ5buNiTF+hTZ2fBSRA4vYLWV24U=) 2: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: gapT1kNW12nUbHr8c3uu1/58dn16AFUjAC6CWS5jWek=) 3: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: aOmB52lB3tdTkD/g4putrA9Nb5xL/svY0l4KIr3M4Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Apr 5 00:24:30 2026 GMT Not After : Apr 12 00:24:30 2026 GMT Subject: CN=69d1abbe-ef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:d0:b3:46:6b:08:d5:26:2d:70:51:22:38: 8b:51:4d:20:a3:67:e7:2f:4a:c3:81:c7:85:d5:c1: 3f:7c:0d:0a:e6:5f:f3:a5:2d:e2:75:0c:e2:bc:e8: 86:44:43:14:a5:be:14:b5:15:67:fc:8e:b8:9d:94: 37:ce:a3:ae:d0:b8:b7:bb:92:09:7d:66:a8:f2:67: 2a:fa:8c:95:4e:ec:74:8c:6c:a6:75:85:97:4a:ad: ee:63:bd:4d:84:38:76:75:e7:24:86:ca:37:07:f7: 01:1a:99:4d:71:d7:b8:2d:fc:37:3f:9a:5d:46:44: 29:2a:f3:6b:32:d2:96:0e:6c:9c:a6:f3:eb:a2:72: e1:63:48:1c:32:70:24:0b:fe:c3:f7:ac:5c:1a:7c: 48:0a:d9:ec:b2:da:f7:48:bb:52:ed:cd:a1:cd:a5: ca:62:1c:f9:bb:6d:00:87:68:77:c8:f3:fd:55:e8: 5c:0b:24:62:39:d7:69:ed:8c:44:b2:f1:f5:05:64: d6:45:9e:9e:69:c0:cf:62:f4:0e:6c:bb:b1:71:d6: ac:e4:4f:d7:32:da:92:f0:39:71:a2:0f:ac:55:ac: fd:ff:93:ec:3a:f7:db:37:ee:ea:06:ef:43:cb:9f: b8:83:d4:bf:bd:71:e3:23:3a:e0:24:7a:b1:19:28: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:77:F5:46:85:66:BB:7A:F1:26:DC:36:00:9E:86:F6:44:EE:1E:E0 X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:67:42:5c:56:13:1c:a8:41:96:46:c2:da:8f:53:74:21:41: e9:4f:a8:89:a7:47:19:35:b6:f5:60:b6:54:e7:5e:ba:86:52: d9:d3:c3:f7:0c:65:d7:1a:67:4f:14:ab:60:e5:57:4b:78:5e: a1:26:5f:5a:3c:e9:37:0a:21:33:9c:1d:cd:f9:5b:3d:59:8f: 3b:72:6f:82:c3:de:91:3b:88:55:2b:d3:26:e1:79:91:d5:60: 55:0d:fa:a5:c1:ad:ed:db:fb:a3:74:02:2d:c2:4d:82:9a:8b: 9a:8f:ff:ea:f6:af:f4:75:8d:3e:38:6e:ae:7b:6d:33:ea:43: ce:3b:91:17:36:fc:d2:65:c7:18:ad:a7:99:cf:09:fb:08:ec: 1e:e3:97:20:cd:35:b0:47:1c:c0:b3:70:ed:07:5a:a0:7c:8c: 2e:4a:fa:24:84:5a:49:eb:ba:34:dd:0d:ac:63:15:f7:f7:b7: 1c:a7:84:25:e0:5f:f9:f6:ec:9e:f0:46:66:1d:08:13:18:a7: 3a:31:ed:5c:f1:ac:ab:d2:3c:85:c5:15:fe:6f:58:68:93:47: ab:f0:4f:30:47:03:e6:36:d8:29:91:8c:4c:61:69:5d:d8:a5: b8:1b:61:e2:19:ab:3c:ca:4f:9f:9f:10:ad:f2:d8:68:53:c6: f8:15:9c:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjYwNDA1MDAyNDMwWhcNMjYwNDEyMDAyNDMwWjAYMRYwFAYD VQQDEw02OWQxYWJiZS1lZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTbQs0ZrCNUmLXBRIjiLUU0go2fnL0rDgceF1cE/fA0K5l/zpS3idQzivOiG REMUpb4UtRVn/I64nZQ3zqOu0Li3u5IJfWao8mcq+oyVTux0jGymdYWXSq3uY71N hDh2deckhso3B/cBGplNcde4Lfw3P5pdRkQpKvNrMtKWDmycpvPronLhY0gcMnAk C/7D96xcGnxICtnsstr3SLtS7c2hzaXKYhz5u20Ah2h3yPP9VehcCyRiOddp7YxE svH1BWTWRZ6eacDPYvQObLuxcdas5E/XMtqS8Dlxog+sVaz9/5PsOvfbN+7qBu9D y5+4g9S/vXHjIzrgJHqxGSgUWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD539UaF Zrt68SbcNgCehvZE7h7gMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATGdCXFYTHKhBlkbC2o9TdCFB6U+oiadHGTW29WC2VOdeuoZS2dPD9wxl1xpn TxSrYOVXS3heoSZfWjzpNwohM5wdzflbPVmPO3JvgsPekTuIVSvTJuF5kdVgVQ36 pcGt7dv7o3QCLcJNgpqLmo//6vav9HWNPjhurnttM+pDzjuRFzb80mXHGK2nmc8J +wjsHuOXIM01sEccwLNw7QdaoHyMLkr6JIRaSeu6NN0NrGMV9/e3HKeEJeBf+fbs nvBGZh0IExinOjHtXPGsq9I8hcUV/m9YaJNHq/BPMEcD5jbYKZGMTGFpXdiluBth 4hmrPMpPn58QrfLYaFPG+BWc8w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:00 2026 by rpki-client