$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: Lwc25jXOmTavsa/L2pS+PPje5KYgGrIC3YQ8ycndlRA= Subject key identifier: AA:0E:BD:F8:0F:AF:51:96:3B:5C:6E:3F:28:B5:C4:F2:80:45:02:F2 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DFC Signing time: Sat 04 Apr 2026 15:27:25 +0000 Manifest this update: Sat 04 Apr 2026 15:27:24 +0000 Manifest next update: Sat 11 Apr 2026 15:27:24 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: nE/n4epwS0qIrtzTOxtPYB2CFOidMPABzLk0HNP6OUk=) 2: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) 3: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11810 (0x2e22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Apr 4 15:27:24 2026 GMT Not After : Apr 11 15:27:24 2026 GMT Subject: CN=69d12ddd-6648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ea:7a:0c:f9:02:9e:4f:b5:54:2a:73:44:76: 99:de:b5:b9:a4:89:59:5a:46:ca:8c:ed:df:c0:3f: 44:e2:d0:fc:7d:81:59:6b:c1:14:a1:8f:9a:e7:97: 5e:03:76:02:4a:82:1e:95:94:4f:f7:6b:38:1b:a3: fa:7e:6a:9f:a1:eb:8a:23:cc:c2:4c:e9:2e:35:b1: 01:6e:6b:04:57:b2:73:40:60:e0:f8:ab:1d:cc:fa: 9a:65:4d:b2:ed:49:e0:58:a4:13:e2:2a:24:3e:b5: b1:45:aa:c0:01:ef:3d:80:7d:4c:ce:2a:f6:57:5c: ce:d9:be:89:aa:da:46:3f:c0:af:2d:83:0b:c2:c0: 04:47:0c:45:45:fd:08:4e:10:8b:01:b4:e3:7c:f9: c5:df:c0:10:18:1c:64:9a:eb:e4:9d:f1:d6:39:8e: 2a:2f:f6:0b:33:03:a8:59:9d:fc:9d:f6:15:e7:0b: 7d:02:5a:e5:f5:18:44:d3:07:04:9e:72:08:3c:97: 47:75:db:c7:c1:7f:64:fc:55:ab:1b:37:d0:52:3f: 90:52:19:6e:52:22:57:3a:88:c0:71:85:0b:ac:b5: 5f:3d:b8:5d:ca:e1:d3:5c:71:52:79:82:cb:3c:0e: 51:73:4e:ac:62:12:cf:4b:3a:55:27:45:a0:d2:b3: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0E:BD:F8:0F:AF:51:96:3B:5C:6E:3F:28:B5:C4:F2:80:45:02:F2 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b0:5f:f1:f0:3c:cb:1e:65:69:c8:e7:b2:68:89:2b:cd:cf: dc:c3:9f:05:cd:2e:0d:84:6e:7d:f0:d6:57:26:96:f0:e2:9f: 04:f7:a2:de:f3:f5:cd:93:48:96:60:52:47:c3:74:82:ab:06: c4:ab:1e:8b:73:30:45:fa:af:57:d4:46:72:be:76:fc:7e:e8: 7f:c7:e9:b5:5f:af:9d:8f:b0:7b:92:f5:78:de:e8:d5:ec:a4: 5a:2a:5e:c8:19:48:ca:83:23:9f:18:01:1f:01:54:65:15:02: 1d:94:cd:9e:dd:4e:36:5c:e4:24:e0:66:36:46:c9:d4:0d:d9: 86:d2:65:50:92:b0:8c:61:b7:1a:77:5e:22:04:3b:df:6e:88: 5a:66:46:16:66:64:70:87:8d:4e:06:f0:8c:a6:79:94:d7:83: 1a:d7:e6:96:1d:d2:c5:79:62:95:46:c5:86:bb:33:c2:ae:e2: 3f:8e:b6:95:05:aa:ca:f0:63:25:d7:5d:50:4c:64:99:bf:17: c4:f4:dd:e4:41:24:5b:3a:31:fc:36:06:48:37:3b:06:2b:33: a7:65:9c:50:98:61:5a:bd:e0:c6:68:0b:ad:10:27:53:cc:7a: d7:dd:de:8e:3f:07:5d:28:b1:90:5d:7c:8c:4b:4a:d8:f8:05: 1e:3a:7c:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwNDA0MTUyNzI0WhcNMjYwNDExMTUyNzI0WjAYMRYwFAYD VQQDEw02OWQxMmRkZC02NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+p6DPkCnk+1VCpzRHaZ3rW5pIlZWkbKjO3fwD9E4tD8fYFZa8EUoY+a55de A3YCSoIelZRP92s4G6P6fmqfoeuKI8zCTOkuNbEBbmsEV7JzQGDg+KsdzPqaZU2y 7UngWKQT4iokPrWxRarAAe89gH1Mzir2V1zO2b6JqtpGP8CvLYMLwsAERwxFRf0I ThCLAbTjfPnF38AQGBxkmuvknfHWOY4qL/YLMwOoWZ38nfYV5wt9Alrl9RhE0wcE nnIIPJdHddvHwX9k/FWrGzfQUj+QUhluUiJXOojAcYULrLVfPbhdyuHTXHFSeYLL PA5Rc06sYhLPSzpVJ0Wg0rMq1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoOvfgP r1GWO1xuPyi1xPKARQLyMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7Bf8fA8yx5lacjnsmiJK83P3MOfBc0uDYRuffDWVyaW8OKfBPei3vP1zZNI lmBSR8N0gqsGxKsei3MwRfqvV9RGcr52/H7of8fptV+vnY+we5L1eN7o1eykWipe yBlIyoMjnxgBHwFUZRUCHZTNnt1ONlzkJOBmNkbJ1A3ZhtJlUJKwjGG3GndeIgQ7 326IWmZGFmZkcIeNTgbwjKZ5lNeDGtfmlh3SxXlilUbFhrszwq7iP462lQWqyvBj JdddUExkmb8XxPTd5EEkWzox/DYGSDc7Biszp2WcUJhhWr3gxmgLrRAnU8x6193e jj8HXSixkF18jEtK2PgFHjp8SQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:43 2026 by rpki-client