$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: OdM/ykxiMJAokOLAzIYaWSmHK8Ps0ZJutuk6YhF/H4o= Subject key identifier: C3:C1:AE:70:D3:06:F7:71:60:40:EE:B8:84:F3:EE:A1:DB:95:8C:C7 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:12:11 +0000 Manifest this update: Fri 17 Apr 2026 08:12:10 +0000 Manifest next update: Fri 24 Apr 2026 08:12:10 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: BkHF1LLe/JHEGvuIt9nInhR02WUNEbqHsKbUOU1V2JM=) 2: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=) 3: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=) 4: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Apr 17 08:12:10 2026 GMT Not After : Apr 24 08:12:10 2026 GMT Subject: CN=69e1eb5b-b095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:f8:88:b6:a3:2a:60:56:56:7e:e8:cd:ad: f1:b3:36:07:68:69:34:37:2e:e4:94:63:23:db:8a: 97:91:f0:4d:10:10:1f:6b:81:92:2e:12:0d:fe:36: b2:9e:f1:7f:8c:e5:71:36:56:89:3d:ed:f4:94:11: 67:06:4c:19:71:31:0e:dd:95:80:7e:a2:2c:68:de: 5b:53:7c:a4:53:d2:70:54:bd:6e:9f:f1:3d:21:b7: d1:a7:f4:e3:e5:6e:4c:cd:e0:86:75:10:24:76:fe: fa:2a:f1:83:e6:41:6d:b8:30:d3:39:7b:4c:9c:34: b0:e9:0c:da:db:97:61:4e:cd:bb:a8:37:c3:04:00: aa:1e:f9:2a:64:bc:5b:e3:84:cd:44:e7:65:31:72: f2:dc:43:31:62:bd:5a:fb:92:22:a8:d2:3a:03:30: 06:39:f3:66:eb:0f:db:47:b7:0a:5b:f2:f9:52:d9: 6d:a7:56:17:3b:31:47:06:60:53:88:35:1e:79:81: 48:8b:d2:65:50:5c:64:fc:e4:e1:db:55:3a:28:c2: be:01:0e:9b:a1:a1:fe:47:b5:51:c8:cd:c0:25:16: 17:64:76:27:0d:04:ae:fa:51:46:d5:30:bb:f8:e9: d1:83:15:3b:84:f1:4e:52:f5:ff:2f:bb:11:18:43: b6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:AE:70:D3:06:F7:71:60:40:EE:B8:84:F3:EE:A1:DB:95:8C:C7 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b1:6d:20:53:66:a3:0c:40:2d:01:56:ab:fe:a4:2d:03:44: eb:ba:36:0e:27:a2:4b:c1:d3:23:57:24:55:c9:e6:ec:9c:81: bf:b6:17:1b:e3:7c:c4:d2:21:a1:32:63:c6:06:ee:6a:32:5a: ad:86:13:be:8f:e0:56:88:b8:f3:0e:80:fa:e2:8d:9b:45:39: 7e:d9:17:67:bc:da:b4:0e:e2:62:48:d7:7e:72:7e:bc:01:c4: 5c:04:a8:8e:18:94:ff:66:46:42:4d:e0:e5:2c:f9:96:44:41: 3c:c3:f6:e4:c8:d2:88:e2:8d:af:02:56:1c:07:2d:27:8c:b0: 53:12:50:a4:71:e7:fb:2c:17:1a:fc:cc:1a:8a:61:c5:ba:b2: d0:16:b7:91:20:ed:61:22:56:47:1b:57:2c:ea:00:7e:df:25: 23:f4:3a:a1:9c:b6:65:05:26:83:7e:7b:32:a5:33:89:f5:b5: ac:9a:e3:cd:10:49:76:9c:ea:36:f7:60:ba:07:fa:ad:b0:9b: 32:a1:83:84:37:d3:56:a5:74:43:bb:95:bb:22:ad:34:44:e0: 9f:65:ac:c6:38:29:da:4b:34:42:05:61:d7:61:a0:e8:cc:b1: 48:5f:55:26:dc:04:e1:f0:33:54:df:44:4f:8f:29:80:dc:67: 2b:75:c1:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNjA0MTcwODEyMTBaFw0yNjA0MjQwODEyMTBaMBgxFjAUBgNV BAMTDTY5ZTFlYjViLWIwOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC7/iItqMqYFZWfujNrfGzNgdoaTQ3LuSUYyPbipeR8E0QEB9rgZIuEg3+NrKe 8X+M5XE2Vok97fSUEWcGTBlxMQ7dlYB+oixo3ltTfKRT0nBUvW6f8T0ht9Gn9OPl bkzN4IZ1ECR2/voq8YPmQW24MNM5e0ycNLDpDNrbl2FOzbuoN8MEAKoe+SpkvFvj hM1E52UxcvLcQzFivVr7kiKo0joDMAY582brD9tHtwpb8vlS2W2nVhc7MUcGYFOI NR55gUiL0mVQXGT85OHbVToowr4BDpuhof5HtVHIzcAlFhdkdicNBK76UUbVMLv4 6dGDFTuE8U5S9f8vuxEYQ7aVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw8GucNMG 93FgQO64hPPuoduVjMcwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0IxNzFEQjUwRTFBQTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4 TTYxd3N1UnMwMnhURDY4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBUsW0gU2ajDEAtAVar/qQtA0TrujYOJ6JLwdMjVyRVyebsnIG/thcb43zE0iGh MmPGBu5qMlqthhO+j+BWiLjzDoD64o2bRTl+2RdnvNq0DuJiSNd+cn68AcRcBKiO GJT/ZkZCTeDlLPmWREE8w/bkyNKI4o2vAlYcBy0njLBTElCkcef7LBca/MwaimHF urLQFreRIO1hIlZHG1cs6gB+3yUj9DqhnLZlBSaDfnsypTOJ9bWsmuPNEEl2nOo2 92C6B/qtsJsyoYOEN9NWpXRDu5W7Iq00ROCfZazGOCnaSzRCBWHXYaDozLFIX1Um 3ATh8DNU30RPjymA3GcrdcEp -----END CERTIFICATE-----Generated at Sat Apr 18 21:05:23 2026 by rpki-client