$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: WyajJ00Uva6kjQHTouM6mEJ6B/MX0YqlmpMJXFIdFAM= Subject key identifier: 7D:E0:5B:5D:8F:18:89:22:A2:18:51:38:3D:2D:21:F0:1B:0F:C8:73 Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 2F Signing time: Tue 21 Apr 2026 08:32:26 +0000 Manifest this update: Tue 21 Apr 2026 08:32:25 +0000 Manifest next update: Tue 28 Apr 2026 08:32:25 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: L/dFPuG2tRE0TaCwtldD5HQe7c1ZLQwEMeT9Bpv48a0=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Apr 21 08:32:25 2026 GMT Not After : Apr 28 08:32:25 2026 GMT Subject: CN=69e73619-c543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:a8:e5:36:c8:a4:38:c9:4a:86:74:bc:be: c8:28:ce:a3:85:c8:bf:2d:5d:84:4a:02:c8:7f:76: 57:0c:b6:c5:cc:46:d1:58:75:c1:fb:b7:6a:5f:dc: 4e:e0:d3:2e:c3:3a:0b:27:c5:4c:36:1e:4b:e9:bc: 2e:f0:12:d1:6c:25:0f:ad:f3:dc:74:61:e1:06:cd: 68:4a:64:ce:8f:ce:da:ab:92:fc:58:eb:62:38:ca: 3c:72:c6:10:33:1a:b5:57:f0:24:c3:67:8e:e6:72: a1:be:b8:0f:a6:94:11:da:be:fc:57:b9:7e:25:ff: ea:3b:12:1d:b8:5a:a2:3b:9c:6d:1d:ee:21:19:28: 67:af:cb:ac:af:e2:74:f7:6e:d2:4f:aa:3d:f8:3e: b7:ae:ec:72:72:03:24:da:ca:eb:0f:82:3b:96:6e: e1:f3:8a:d9:eb:aa:b0:b1:91:34:56:94:c5:87:68: 89:44:95:76:7e:c2:f0:db:8a:85:ce:87:4e:87:2e: c8:ab:16:2d:a3:0a:21:da:28:6a:9a:d3:ff:92:1a: fa:1d:e5:ed:7f:6e:8d:26:ff:d9:bc:15:0f:e6:fb: 54:d9:60:7e:ef:7e:a0:2b:63:7a:d7:9b:dd:1a:8b: 0a:a3:56:41:52:64:9e:bf:9e:20:73:ec:53:d1:bf: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:5B:5D:8F:18:89:22:A2:18:51:38:3D:2D:21:F0:1B:0F:C8:73 X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ee:4f:43:94:26:44:ad:05:db:76:06:b0:ca:76:f2:49:5a: ed:75:1b:9b:cc:8d:3c:9e:51:77:bf:d6:a8:c5:be:c1:25:d0: 5e:62:f9:a2:9d:1a:97:98:7b:50:63:a6:01:ff:e8:9d:c0:e3: 7a:df:0b:d8:0e:b9:07:7a:80:a2:18:79:8b:55:4b:71:80:43: a0:3b:84:8d:8f:f1:f9:54:1d:73:b2:30:11:4a:a1:74:bc:17: d8:b8:42:35:84:94:c7:18:e3:fd:dc:4d:c6:e2:76:41:05:5f: d2:81:89:26:67:05:7b:01:98:6f:54:62:4e:b4:b9:4f:f5:3f: 1f:bd:7b:bf:87:73:a1:67:74:6f:6f:ca:5e:68:a9:92:59:88: 34:2f:84:19:49:87:1b:5a:c6:20:89:0c:f8:5d:57:cf:ae:03: 64:f9:b1:77:77:bc:6a:66:2d:8a:cd:05:c6:bd:46:65:2a:79: a3:d0:ea:a6:97:65:fa:9c:d8:77:f4:1e:c0:20:08:31:80:6c: 8d:ca:6e:4e:e0:d7:84:44:43:00:19:d1:a4:80:de:d8:e1:70: 13:90:69:47:6c:48:d4:8b:de:a8:9c:c2:e6:e4:e2:31:98:b6: 25:6a:95:4b:67:3e:e9:5d:cb:12:00:b5:73:f3:9d:58:5e:ab: 54:b7:76:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1 RUVCREE0RjAeFw0yNjA0MjEwODMyMjVaFw0yNjA0MjgwODMyMjVaMBgxFjAUBgNV BAMTDTY5ZTczNjE5LWM1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvV6jlNsikOMlKhnS8vsgozqOFyL8tXYRKAsh/dlcMtsXMRtFYdcH7t2pf3E7g 0y7DOgsnxUw2HkvpvC7wEtFsJQ+t89x0YeEGzWhKZM6PztqrkvxY62I4yjxyxhAz GrVX8CTDZ47mcqG+uA+mlBHavvxXuX4l/+o7Eh24WqI7nG0d7iEZKGevy6yv4nT3 btJPqj34Preu7HJyAyTayusPgjuWbuHzitnrqrCxkTRWlMWHaIlElXZ+wvDbioXO h06HLsirFi2jCiHaKGqa0/+SGvod5e1/bo0m/9m8FQ/m+1TZYH7vfqArY3rXm90a iwqjVkFSZJ6/niBz7FPRv1q7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfeBbXY8Y iSKiGFE4PS0h8BsPyHMwHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0UxQTY2RjE4MDBERTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpY YXZ4N3pGX0ViYVY3cjJrOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBi7k9DlCZErQXbdgawynbySVrtdRubzI08nlF3v9aoxb7BJdBeYvminRqXmHtQ Y6YB/+idwON63wvYDrkHeoCiGHmLVUtxgEOgO4SNj/H5VB1zsjARSqF0vBfYuEI1 hJTHGOP93E3G4nZBBV/SgYkmZwV7AZhvVGJOtLlP9T8fvXu/h3OhZ3Rvb8peaKmS WYg0L4QZSYcbWsYgiQz4XVfPrgNk+bF3d7xqZi2KzQXGvUZlKnmj0Oqml2X6nNh3 9B7AIAgxgGyNym5O4NeEREMAGdGkgN7Y4XATkGlHbEjUi96onMLm5OIxmLYlapVL Zz7pXcsSALVz851YXqtUt3ZK -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:39 2026 by rpki-client