$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: OOmnxVC0Jlyw5SmPKyYSPAQDDffRnU8h+g8uqLbmNZQ= Subject key identifier: AA:54:64:6E:AD:AE:7F:50:99:10:61:EE:03:94:26:CA:CC:07:67:F6 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1DAF Signing time: Sat 04 Apr 2026 16:02:04 +0000 Manifest this update: Sat 04 Apr 2026 16:02:03 +0000 Manifest next update: Sat 11 Apr 2026 16:02:03 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: G9x5ShZrHAi8Mkj4JrwBkMP7Y3o0p9ql+PbL3GJu2MQ=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: aoK1qMo+XLiglTyrOyoKUd3w0AOhsSnhUEAZl5VjK2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7615 (0x1dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Apr 4 16:02:03 2026 GMT Not After : Apr 11 16:02:03 2026 GMT Subject: CN=69d135fc-c496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:27:82:e5:4e:42:8e:60:99:1a:09:e3:8f: ec:78:53:ca:e3:6e:30:cc:ee:c9:7f:00:22:92:ca: 4a:0f:b2:f6:1f:6a:20:b4:ed:5e:7d:01:10:23:f4: f1:fb:f5:f6:e1:61:69:2a:bd:5c:87:ca:8c:66:2f: 3d:b2:63:ba:a4:77:ff:67:94:05:51:9c:ff:94:22: 91:43:a4:e5:2f:76:cd:9d:3b:9d:4f:c3:44:5a:80: a7:16:b2:13:d2:20:13:f3:93:ef:04:4f:ac:5c:d8: 53:e4:06:ba:2c:3f:a4:24:55:6f:bf:f0:dd:76:91: 27:f5:9d:15:50:61:ef:07:87:c8:de:8b:39:cf:04: 7b:4d:1a:ad:53:cb:c6:aa:a5:60:67:33:4b:64:b1: ed:fd:1d:c3:9a:5b:97:4a:be:08:b6:54:90:09:09: 3a:ac:bd:7c:51:65:71:02:8c:08:0e:08:18:18:c9: 9f:3d:61:a4:d1:13:da:2c:40:e1:de:d0:cd:d9:c3: aa:d9:fb:b1:21:85:a2:e1:8e:5a:56:d0:fc:fb:84: cf:6f:de:d4:e5:bb:bb:86:7b:84:0b:7e:0b:7b:7b: c9:64:fa:be:62:ad:61:0d:3a:f4:a2:84:66:4e:4b: e9:9c:12:44:d8:61:0c:d8:00:ca:3d:bd:c9:28:b2: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:54:64:6E:AD:AE:7F:50:99:10:61:EE:03:94:26:CA:CC:07:67:F6 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:a4:9c:59:4e:bc:aa:19:5f:04:ec:11:64:6b:bf:14:39: 44:ec:5c:a1:10:5a:40:34:a6:ad:f1:ae:e0:5b:20:3f:23:f0: 09:55:0b:6f:1b:5b:66:ec:25:00:47:d6:07:53:5e:1a:71:c3: e4:49:11:0e:0a:10:9e:29:ec:f3:cf:e4:c4:a1:4f:ea:33:ae: eb:94:c3:87:c5:52:5d:4e:9d:6c:f4:d2:06:a1:fc:fe:92:7d: e8:a3:a0:4b:4f:d2:35:10:c8:e6:3a:a6:35:37:0f:32:4b:33: 79:bf:ba:8c:6b:c4:c5:a5:91:17:64:ac:51:c6:10:f5:10:86: 79:82:ca:c7:29:4a:99:23:92:6e:e9:7a:e0:c1:52:23:76:f9: 6e:1b:75:c2:ce:3c:51:e2:00:d8:a4:5f:72:3c:5c:6e:a4:13: 44:65:11:a5:51:b8:e0:fb:cb:ab:b0:e7:14:c6:14:7c:3a:fe: 3c:51:af:0f:dc:d5:05:38:d2:ab:37:04:ed:46:d8:be:c3:e5: ab:2a:fe:3c:b8:b0:33:66:00:52:26:0d:d5:1a:9d:e4:4b:1e: 98:7e:40:6f:0d:13:8d:32:2b:c2:70:b3:ea:29:13:ce:81:75: 84:2b:6d:7a:0d:9a:e4:c9:81:24:5d:dd:ac:b7:e9:ec:bc:7e: e5:ab:47:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjYwNDA0MTYwMjAzWhcNMjYwNDExMTYwMjAzWjAYMRYwFAYD VQQDEw02OWQxMzVmYy1jNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiMnguVOQo5gmRoJ44/seFPK424wzO7JfwAikspKD7L2H2ogtO1efQEQI/Tx +/X24WFpKr1ch8qMZi89smO6pHf/Z5QFUZz/lCKRQ6TlL3bNnTudT8NEWoCnFrIT 0iAT85PvBE+sXNhT5Aa6LD+kJFVvv/DddpEn9Z0VUGHvB4fI3os5zwR7TRqtU8vG qqVgZzNLZLHt/R3DmluXSr4ItlSQCQk6rL18UWVxAowIDggYGMmfPWGk0RPaLEDh 3tDN2cOq2fuxIYWi4Y5aVtD8+4TPb97U5bu7hnuEC34Le3vJZPq+Yq1hDTr0ooRm TkvpnBJE2GEM2ADKPb3JKLIFKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpUZG6t rn9QmRBh7gOUJsrMB2f2MB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACBKknFlOvKoZXwTsEWRrvxQ5ROxcoRBaQDSmrfGu4FsgPyPwCVULbxtbZuwl AEfWB1NeGnHD5EkRDgoQnins88/kxKFP6jOu65TDh8VSXU6dbPTSBqH8/pJ96KOg S0/SNRDI5jqmNTcPMkszeb+6jGvExaWRF2SsUcYQ9RCGeYLKxylKmSOSbul64MFS I3b5bht1ws48UeIA2KRfcjxcbqQTRGURpVG44PvLq7DnFMYUfDr+PFGvD9zVBTjS qzcE7UbYvsPlqyr+PLiwM2YAUiYN1Rqd5EsemH5Abw0TjTIrwnCz6ikTzoF1hCtt eg2a5MmBJF3drLfp7Lx+5atHhQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:57:31 2026 by rpki-client