$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: lyYUSiR77HAYwGfx63lmWufDEIPQ6+9Sm4dt+R4Jy1A= Subject key identifier: 1B:E1:2A:82:F0:C5:68:D5:FD:52:62:B3:10:3A:44:63:A8:69:29:3A Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 070F Signing time: Sat 04 Apr 2026 21:48:03 +0000 Manifest this update: Sat 04 Apr 2026 21:48:02 +0000 Manifest next update: Sat 11 Apr 2026 21:48:02 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: A9TOYQHEHulcFo0hakrhvVoLhHmk/j3PZgQBIIg6OT4=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: kfNHjmM4llhwfmGMMRHrrJHm+acq8kgyjCe1MOK7NGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: Apr 4 21:48:02 2026 GMT Not After : Apr 11 21:48:02 2026 GMT Subject: CN=69d18712-8144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:88:59:90:23:e0:0c:17:06:ff:fb:d1:8e: 04:f1:3e:cd:cd:61:77:ae:a1:76:f2:4f:0f:97:ee: a6:d8:87:7d:41:0b:c9:a7:4a:26:e1:9b:8d:25:f8: f3:d8:43:9a:90:33:ff:2b:3a:ee:fa:70:2f:84:b6: d4:d1:2a:63:76:53:c9:1b:7d:cf:a7:1e:46:d6:ff: 9e:bb:1c:e8:1c:24:25:84:66:0c:d6:5f:bb:9f:52: d4:e3:66:c0:b8:d4:cb:de:f7:be:87:44:ce:0c:8f: bb:5c:d8:db:ad:66:b4:2f:04:6b:48:6f:62:cf:8d: da:24:5c:5d:8c:f0:1d:25:e5:b2:ee:17:4d:36:1a: c9:0d:3b:f8:d4:f9:c6:bd:1f:ac:80:a4:b7:63:a3: 0d:b3:aa:04:4f:5e:c8:d0:90:73:af:5a:e5:36:2b: 37:3e:a0:99:52:88:fc:a8:90:f3:5a:8c:b8:ba:5e: cf:56:a2:ed:90:34:0f:77:17:23:d0:21:40:1f:fc: a1:51:96:5f:b6:da:61:14:64:c7:d1:a8:70:f5:79: bc:b8:d8:4c:13:cf:c8:35:d2:38:f9:50:a7:bf:f1: 3c:2c:bd:00:d8:ce:44:21:30:84:16:92:db:c6:14: 1c:01:cb:de:c0:96:de:01:6d:da:41:76:51:8b:0f: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E1:2A:82:F0:C5:68:D5:FD:52:62:B3:10:3A:44:63:A8:69:29:3A X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:19:16:09:11:0a:b1:dd:16:00:ea:86:02:e3:03:2e:47:0d: fc:f7:f8:11:89:cc:96:c1:58:ed:a5:b7:1e:9e:6f:7a:69:07: 2c:25:63:71:0b:a8:e4:e1:40:04:d6:78:cb:df:5c:a7:c1:ae: aa:c4:72:f5:a1:90:38:51:af:ad:34:da:ab:24:e1:2f:0f:4f: d5:0c:cc:ab:57:a7:99:3a:92:ff:3e:23:ba:0b:79:16:2e:cb: f1:58:3e:2a:eb:ca:85:d6:47:80:05:b8:c0:f5:6e:21:98:44: f9:16:19:34:df:e3:85:bf:39:28:e2:f3:d8:7f:9b:60:6b:df: 4c:98:03:6f:3e:f0:33:ec:53:89:4d:f5:12:4c:0e:b8:98:e0: a1:cb:ca:c7:5e:ec:40:83:0e:7b:9b:7a:f5:a9:a6:43:7b:66: d4:04:99:28:f0:34:e4:a7:6d:7e:73:1c:68:29:30:6e:01:2d: 10:15:33:22:2f:ec:52:8f:e4:dd:17:b4:ad:ca:b8:44:e3:a0: bc:b8:cf:1f:ae:75:d4:57:3f:c5:a4:87:ec:06:ef:70:59:d9: bb:20:4c:08:c2:97:53:9a:67:1d:41:76:c6:4a:cc:7e:b4:c5: 13:da:a4:dd:92:af:6e:4a:bc:46:d9:2d:55:2a:bc:e1:df:a9: 92:b8:80:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjYwNDA0MjE0ODAyWhcNMjYwNDExMjE0ODAyWjAYMRYwFAYD VQQDEw02OWQxODcxMi04MTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApouIWZAj4AwXBv/70Y4E8T7NzWF3rqF28k8Pl+6m2Id9QQvJp0om4ZuNJfjz 2EOakDP/Kzru+nAvhLbU0SpjdlPJG33Ppx5G1v+euxzoHCQlhGYM1l+7n1LU42bA uNTL3ve+h0TODI+7XNjbrWa0LwRrSG9iz43aJFxdjPAdJeWy7hdNNhrJDTv41PnG vR+sgKS3Y6MNs6oET17I0JBzr1rlNis3PqCZUoj8qJDzWoy4ul7PVqLtkDQPdxcj 0CFAH/yhUZZfttphFGTH0ahw9Xm8uNhME8/INdI4+VCnv/E8LL0A2M5EITCEFpLb xhQcAcvewJbeAW3aQXZRiw+3JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvhKoLw xWjV/VJisxA6RGOoaSk6MB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRkWCREKsd0WAOqGAuMDLkcN/Pf4EYnMlsFY7aW3Hp5vemkHLCVjcQuo5OFA BNZ4y99cp8GuqsRy9aGQOFGvrTTaqyThLw9P1QzMq1enmTqS/z4jugt5Fi7L8Vg+ KuvKhdZHgAW4wPVuIZhE+RYZNN/jhb85KOLz2H+bYGvfTJgDbz7wM+xTiU31EkwO uJjgocvKx17sQIMOe5t69ammQ3tm1ASZKPA05KdtfnMcaCkwbgEtEBUzIi/sUo/k 3Re0rcq4ROOgvLjPH6511Fc/xaSH7AbvcFnZuyBMCMKXU5pnHUF2xkrMfrTFE9qk 3ZKvbkq8RtktVSq84d+pkriAHA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:31 2026 by rpki-client