$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: D3UlJhT2jaaDRi/rOVU9H8v+tTdBTdyTiDasBOHe0WY= Subject key identifier: 09:5D:39:43:70:D6:58:B0:95:98:89:55:86:3D:7B:75:25:1D:34:B3 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 02DF Signing time: Sun 05 Apr 2026 01:05:16 +0000 Manifest this update: Sun 05 Apr 2026 01:05:16 +0000 Manifest next update: Sun 12 Apr 2026 01:05:16 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: H5Fl+qbxD7kb5Ok+GWTOrkE2zThI2CGOxukrZCzmwck=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Apr 5 01:05:16 2026 GMT Not After : Apr 12 01:05:16 2026 GMT Subject: CN=69d1b54c-ea9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:42:ff:79:c8:a9:a3:42:b9:6d:a8:fe:27: 2e:95:05:43:1c:0c:1e:db:e9:6f:a7:fd:dd:9c:ab: ee:b6:cb:85:2a:57:d8:be:c9:17:c9:8e:38:0b:9c: a8:0f:c9:92:76:1e:17:aa:f3:10:f9:5e:19:70:56: 85:83:6f:70:71:66:9c:fb:6f:96:38:f1:2c:67:bb: 40:9b:b0:50:22:0c:f7:1b:a6:41:fe:be:d6:aa:0e: 49:bd:ef:2a:70:c2:9c:35:87:65:36:ff:62:af:21: 7a:a5:e4:19:b0:c4:9b:9b:d8:cb:e0:07:ca:82:8c: b7:68:7a:69:7e:1e:2c:d4:7c:78:cd:17:bf:9a:7b: 0d:16:5c:a7:25:a5:25:75:7a:f2:b0:a9:b7:d3:8e: c0:43:f8:62:81:e9:90:ab:d7:9e:55:01:be:d3:c9: ea:e1:86:6b:08:f8:e7:89:03:05:94:50:93:a1:e3: ce:c7:6f:a6:ed:dc:16:61:41:a1:4c:88:80:b3:81: a5:d0:a8:31:b8:c2:85:31:b1:dd:76:a4:20:a7:b1: f4:61:5c:4f:4e:dc:18:fa:b5:e6:d1:fe:4b:dd:75: e4:22:2e:83:1c:1a:0e:dc:0c:48:c7:4e:f9:27:21: e4:8a:7e:74:35:f7:50:c7:15:39:06:ee:58:d8:c5: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:39:43:70:D6:58:B0:95:98:89:55:86:3D:7B:75:25:1D:34:B3 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:bc:ec:0d:3c:74:c4:e1:37:21:c9:a7:d3:7a:cb:2b:f0:31: 98:67:c3:0b:bb:65:c9:22:5e:38:f6:11:37:3f:eb:48:8d:ae: 88:e2:87:df:ea:19:d4:66:2c:e1:cb:68:c1:3b:fb:24:70:27: c1:ce:06:58:15:c8:67:b5:61:bc:fe:4a:a5:ba:95:b3:72:5e: 5c:ae:cf:8f:20:ff:14:4d:37:61:8b:1a:21:12:b2:d1:ae:70: c3:ef:7e:63:62:74:b5:ba:e6:38:72:61:44:1b:60:0d:8b:a4: 9b:f7:4e:0e:bd:b5:c9:34:90:86:65:fe:ce:7c:90:8f:61:b0: be:03:b7:7b:3a:4d:05:c0:9a:c0:21:4d:d0:68:cd:18:72:c6: 55:d8:1e:54:66:66:72:88:08:c2:d3:99:e8:3e:b6:6c:b9:20: 2a:46:ed:a3:e5:4d:64:42:55:fa:53:37:d3:37:26:bc:90:30: 77:9d:71:b8:66:aa:b7:29:82:b7:96:a7:8c:f3:37:5f:26:43: c1:66:29:af:92:0d:b8:87:aa:18:f4:c4:c7:89:3b:ab:0d:c4: ab:3c:14:6b:ac:c2:25:20:a3:48:1c:e9:5e:cc:b6:48:80:39: f6:a1:7b:51:ea:96:dd:7c:11:85:a1:55:c5:96:92:27:a4:6b: 45:30:0d:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjYwNDA1MDEwNTE2WhcNMjYwNDEyMDEwNTE2WjAYMRYwFAYD VQQDEw02OWQxYjU0Yy1lYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ1C/3nIqaNCuW2o/iculQVDHAwe2+lvp/3dnKvutsuFKlfYvskXyY44C5yo D8mSdh4XqvMQ+V4ZcFaFg29wcWac+2+WOPEsZ7tAm7BQIgz3G6ZB/r7Wqg5Jve8q cMKcNYdlNv9iryF6peQZsMSbm9jL4AfKgoy3aHppfh4s1Hx4zRe/mnsNFlynJaUl dXrysKm3047AQ/higemQq9eeVQG+08nq4YZrCPjniQMFlFCToePOx2+m7dwWYUGh TIiAs4Gl0KgxuMKFMbHddqQgp7H0YVxPTtwY+rXm0f5L3XXkIi6DHBoO3AxIx075 JyHkin50NfdQxxU5Bu5Y2MVtbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAldOUNw 1liwlZiJVYY9e3UlHTSzMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLzsDTx0xOE3Icmn03rLK/AxmGfDC7tlySJeOPYRNz/rSI2uiOKH3+oZ1GYs 4ctowTv7JHAnwc4GWBXIZ7VhvP5KpbqVs3JeXK7PjyD/FE03YYsaIRKy0a5ww+9+ Y2J0tbrmOHJhRBtgDYukm/dODr21yTSQhmX+znyQj2GwvgO3ezpNBcCawCFN0GjN GHLGVdgeVGZmcogIwtOZ6D62bLkgKkbto+VNZEJV+lM30zcmvJAwd51xuGaqtymC t5anjPM3XyZDwWYpr5INuIeqGPTEx4k7qw3EqzwUa6zCJSCjSBzpXsy2SIA59qF7 UeqW3XwRhaFVxZaSJ6RrRTANwQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:04 2026 by rpki-client