$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: Ixj+g9UPW61fmdgM5bCczlPicODX2lUv5SeJm6/OPaY= Subject key identifier: 20:F4:AC:7A:EE:0F:FB:75:6E:73:73:86:84:29:9D:A2:31:0D:74:8A Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 09A2 Signing time: Sat 04 Apr 2026 19:45:43 +0000 Manifest this update: Sat 04 Apr 2026 19:45:43 +0000 Manifest next update: Sat 11 Apr 2026 19:45:43 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: tqp7AFBdCtrLrCAy5AAB+hEeXjEeJNJhfJ4esQ8HhOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Apr 4 19:45:43 2026 GMT Not After : Apr 11 19:45:43 2026 GMT Subject: CN=69d16a67-7337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:bb:17:86:5e:c7:6a:94:82:d1:91:82:2e: 76:60:af:a1:7d:af:11:7f:e2:67:5a:2e:c4:aa:77: 61:e0:3e:8f:83:2f:0d:85:90:c9:4c:08:9a:f1:ac: dc:d4:00:b1:83:4d:9f:1a:56:3a:d5:b2:2f:49:d1: 54:0d:c9:84:01:eb:97:d5:63:d7:03:8c:26:90:16: 29:7f:66:ec:13:3c:42:4a:04:da:1a:f2:a9:d8:09: d9:73:47:32:93:2f:d1:c1:ed:65:f1:00:ef:58:7c: ea:4f:82:7d:ea:f4:1f:e9:3b:fe:02:a5:f3:3d:8f: 8f:83:a7:f0:d8:c3:d0:5b:9d:a3:8c:aa:78:7e:f8: ed:0e:21:98:5b:01:9d:82:60:d4:6d:cf:ad:c1:93: 41:f7:1b:71:9d:b3:69:ec:6a:f3:cd:37:89:d2:4d: 3b:af:a4:01:b7:98:c2:0a:d7:b0:d0:75:b2:92:e5: 9c:29:3e:62:a8:1e:fb:c0:51:be:a1:6b:ba:0a:e6: a7:9d:5b:bd:16:86:03:7d:9f:79:cf:a4:00:59:88: 8a:91:f8:c9:41:ad:4d:9b:d1:43:ec:a2:5e:f2:4d: 5a:ee:a3:0b:9a:ac:6b:ee:23:1d:5c:26:11:09:26: 32:22:ea:e1:6c:9c:e4:4f:d6:3e:d6:fb:30:1d:2f: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F4:AC:7A:EE:0F:FB:75:6E:73:73:86:84:29:9D:A2:31:0D:74:8A X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:de:92:6a:bf:ae:d2:d0:4e:7d:c9:cb:7a:52:03:35:d2:82: 3b:31:f0:43:c9:37:28:98:1a:8f:66:6e:51:32:d2:d6:9b:c8: f3:74:d4:ed:ba:82:41:60:51:51:4b:0a:7c:12:15:02:be:6b: aa:19:29:8c:e4:92:b0:0e:0e:bd:bd:f7:07:b9:15:71:b3:8d: 8d:3e:7d:d2:08:ae:c9:0f:af:2b:a9:47:44:ca:2c:06:af:bb: e0:a8:8c:dd:c9:ad:c8:78:52:52:9e:f4:db:20:da:a9:96:b6: 66:c2:0b:76:64:45:45:97:a8:82:77:58:f3:c1:67:21:10:e3: d7:0d:78:31:45:60:cd:0f:03:fc:cc:89:53:11:9f:65:dd:47: 55:51:5c:3b:48:92:f7:27:2f:07:d4:e2:aa:09:0e:65:25:b3: 1c:13:f9:96:c7:15:0b:1d:f5:4d:6f:f3:4c:29:09:72:54:c1: 0a:93:b0:b8:e6:e1:a4:b0:85:92:6a:24:5e:de:56:53:0e:b6: 53:7d:98:e7:f1:1e:7a:6a:7c:48:71:ef:be:33:65:5a:0f:0e: c6:f9:87:c6:65:51:38:7d:db:14:95:74:06:67:42:0f:45:5d: 1f:ac:ac:f1:de:b9:55:e3:5f:31:77:b1:1e:47:c7:e4:4c:30: b8:ea:7e:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjYwNDA0MTk0NTQzWhcNMjYwNDExMTk0NTQzWjAYMRYwFAYD VQQDEw02OWQxNmE2Ny03MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6O7F4Zex2qUgtGRgi52YK+hfa8Rf+JnWi7Eqndh4D6Pgy8NhZDJTAia8azc 1ACxg02fGlY61bIvSdFUDcmEAeuX1WPXA4wmkBYpf2bsEzxCSgTaGvKp2AnZc0cy ky/Rwe1l8QDvWHzqT4J96vQf6Tv+AqXzPY+Pg6fw2MPQW52jjKp4fvjtDiGYWwGd gmDUbc+twZNB9xtxnbNp7GrzzTeJ0k07r6QBt5jCCtew0HWykuWcKT5iqB77wFG+ oWu6CuannVu9FoYDfZ95z6QAWYiKkfjJQa1Nm9FD7KJe8k1a7qMLmqxr7iMdXCYR CSYyIurhbJzkT9Y+1vswHS/dSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCD0rHru D/t1bnNzhoQpnaIxDXSKMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA196Sar+u0tBOfcnLelIDNdKCOzHwQ8k3KJgaj2ZuUTLS1pvI83TU7bqCQWBR UUsKfBIVAr5rqhkpjOSSsA4Ovb33B7kVcbONjT590giuyQ+vK6lHRMosBq+74KiM 3cmtyHhSUp702yDaqZa2ZsILdmRFRZeogndY88FnIRDj1w14MUVgzQ8D/MyJUxGf Zd1HVVFcO0iS9ycvB9TiqgkOZSWzHBP5lscVCx31TW/zTCkJclTBCpOwuObhpLCF kmokXt5WUw62U32Y5/Eeemp8SHHvvjNlWg8OxvmHxmVROH3bFJV0BmdCD0VdH6ys 8d65VeNfMXexHkfH5EwwuOp+ug== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:31 2026 by rpki-client