$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: BgDQ55gvA/jKvtrjPT3AhbxWHX2J9ny1y8CVSpk8zqs= Subject key identifier: 9C:25:3A:F8:52:C5:40:28:D4:77:F4:C5:9F:C7:32:89:4B:35:DE:D3 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 01B1 Signing time: Sun 05 Apr 2026 03:30:53 +0000 Manifest this update: Sun 05 Apr 2026 03:30:52 +0000 Manifest next update: Sun 12 Apr 2026 03:30:52 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: THRvDjyJGVIx792ZHPRI2il9/YX0tvYK5KzpK5OotVo=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: ic3XiW85ytxsS/pCp16b77ysR8VYoeEBpJGQ+I0T1aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Apr 5 03:30:52 2026 GMT Not After : Apr 12 03:30:52 2026 GMT Subject: CN=69d1d76d-6d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:ae:cf:12:fa:8b:f4:d2:f8:d2:b9:71:fc: 9e:ff:0e:64:a1:6a:1b:1d:52:53:cd:cf:42:f4:9d: fa:96:1c:33:6c:ed:d5:7c:36:d0:ff:ec:79:b9:44: 34:5c:7f:7c:6a:28:95:3b:61:4e:29:e3:2c:9b:9a: 31:64:60:d6:c7:7d:f3:0b:47:1b:47:db:06:1e:0a: c0:be:1b:1e:50:d8:49:05:f2:a8:fb:70:07:e3:a2: 49:d4:7e:69:bd:c8:bc:d3:13:33:54:96:43:8f:69: 05:93:5e:2b:2e:28:8c:0f:76:e8:0f:99:73:39:38: 1f:69:19:8e:a0:05:42:c8:03:2b:82:19:db:14:89: a3:3a:80:84:13:b2:77:b2:fd:c3:2c:bb:f7:26:7e: 15:bc:08:49:0c:4b:87:0f:fc:90:81:3b:be:5a:ce: 94:c1:2b:64:84:b5:98:bf:c0:88:b2:7e:9e:9e:79: 24:8b:73:9e:f7:11:be:07:a4:7a:c6:a2:3e:6c:1e: 34:62:62:09:c0:db:ca:fc:02:89:e9:a5:d6:ff:f3: b6:76:66:f5:5e:0c:bc:35:1b:96:e8:0f:51:97:66: a3:12:e6:20:98:e5:1b:c7:6e:87:a4:ab:bd:52:c0: 8a:ed:cb:37:56:21:40:8e:da:65:61:46:3c:35:5c: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:25:3A:F8:52:C5:40:28:D4:77:F4:C5:9F:C7:32:89:4B:35:DE:D3 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:06:3c:19:52:ad:cb:cc:f2:1b:7a:e7:8a:89:39:92:e7:31: e7:11:22:f6:88:3e:7c:14:87:42:dc:22:88:c4:eb:a7:cf:53: 63:4a:ee:95:14:fb:03:c4:8a:32:5d:6e:ed:bc:98:d1:30:1f: fc:14:79:86:6a:6f:40:1d:ac:81:26:fa:92:0f:05:5f:0f:77: 73:48:5c:e8:0b:cd:a3:7f:68:8f:95:7c:02:4f:2e:ba:a2:f9: 38:02:13:80:f8:02:ac:3d:74:49:9a:62:83:19:e1:f1:76:29: 87:56:a1:3a:3e:7f:e8:0a:d0:23:36:6a:6b:a1:13:f6:71:c8: ad:b9:cc:3a:ef:3f:52:3c:86:1a:82:82:ff:9d:bd:20:2c:2b: ed:92:fe:d5:da:d2:9b:dc:31:9b:40:76:10:e0:3b:58:25:87: cb:7d:0e:2f:1f:54:94:1f:b1:82:b2:a0:55:50:6a:97:66:3f: aa:13:5d:15:b8:48:3f:97:69:39:d8:6b:f6:9c:36:24:3f:d6: 9c:54:61:b0:45:35:09:a3:61:99:ad:28:20:bf:ba:34:4d:4f: 4b:43:98:ff:23:20:27:7a:78:c6:39:f2:01:ea:bc:51:2f:f4: 2a:c0:72:61:f9:6b:86:11:d9:48:05:2d:8a:cd:c5:58:cb:bc: ad:eb:1f:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjYwNDA1MDMzMDUyWhcNMjYwNDEyMDMzMDUyWjAYMRYwFAYD VQQDEw02OWQxZDc2ZC02ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDuuzxL6i/TS+NK5cfye/w5koWobHVJTzc9C9J36lhwzbO3VfDbQ/+x5uUQ0 XH98aiiVO2FOKeMsm5oxZGDWx33zC0cbR9sGHgrAvhseUNhJBfKo+3AH46JJ1H5p vci80xMzVJZDj2kFk14rLiiMD3boD5lzOTgfaRmOoAVCyAMrghnbFImjOoCEE7J3 sv3DLLv3Jn4VvAhJDEuHD/yQgTu+Ws6UwStkhLWYv8CIsn6ennkki3Oe9xG+B6R6 xqI+bB40YmIJwNvK/AKJ6aXW//O2dmb1Xgy8NRuW6A9Rl2ajEuYgmOUbx26HpKu9 UsCK7cs3ViFAjtplYUY8NVzCkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwlOvhS xUAo1Hf0xZ/HMolLNd7TMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgY8GVKty8zyG3rniok5kucx5xEi9og+fBSHQtwiiMTrp89TY0rulRT7A8SK Ml1u7byY0TAf/BR5hmpvQB2sgSb6kg8FXw93c0hc6AvNo39oj5V8Ak8uuqL5OAIT gPgCrD10SZpigxnh8XYph1ahOj5/6ArQIzZqa6ET9nHIrbnMOu8/UjyGGoKC/529 ICwr7ZL+1drSm9wxm0B2EOA7WCWHy30OLx9UlB+xgrKgVVBql2Y/qhNdFbhIP5dp Odhr9pw2JD/WnFRhsEU1CaNhma0oIL+6NE1PS0OY/yMgJ3p4xjnyAeq8US/0KsBy YflrhhHZSAUtis3FWMu8resfag== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:56 2026 by rpki-client