$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: nrVjjk0XZpZnhYtxFwx71FTxJ8YuvcsDjb+2Il9xYmw= Subject key identifier: F2:53:F5:47:63:22:94:14:6A:55:2D:9F:1D:69:13:AF:8A:D3:A2:48 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0B9F Signing time: Sat 04 Apr 2026 18:53:31 +0000 Manifest this update: Sat 04 Apr 2026 18:53:31 +0000 Manifest next update: Sat 11 Apr 2026 18:53:31 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: WxRD9D6Syn9nNoPz1rANPTb/wn/ZEfAAsFlrPvkDNoU=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: Apr 4 18:53:31 2026 GMT Not After : Apr 11 18:53:31 2026 GMT Subject: CN=69d15e2b-0db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:ea:51:ef:5b:93:9a:9f:61:18:3e:33:a3: 71:5a:6d:a8:02:61:bf:a3:71:c7:99:20:8e:d3:bc: 6a:8e:a1:a9:27:ec:3b:31:52:a6:0e:f8:69:b9:50: 27:b1:f1:50:70:90:8b:52:ab:fd:f6:c3:dd:e2:52: e5:24:59:53:54:3b:d2:2d:c9:87:0b:27:b2:18:a5: ca:6a:3a:72:f8:f6:cd:9d:05:4b:47:b8:8c:fc:27: 80:6d:d3:4d:32:74:aa:c2:27:f4:c5:b0:50:c2:fd: d8:2a:77:77:a9:94:6d:f3:46:26:bd:d9:04:08:fc: fa:3e:2e:7e:ab:8b:4e:b9:45:01:67:d2:54:82:b9: a5:f0:e0:c4:7b:be:86:b8:be:ed:8e:83:fa:fe:66: f4:af:a1:a0:b9:aa:4b:38:5c:b6:34:ab:b5:e7:e8: b6:3d:6a:5e:21:a8:7f:c5:0f:90:c0:19:74:a6:a7: d3:ad:c7:4a:48:a4:7b:61:e4:67:14:a2:2d:1d:a2: ed:0b:51:f5:89:e2:58:bb:b0:1e:71:63:56:3a:44: c1:d1:ee:aa:3f:ac:f1:4a:1d:07:fd:6d:96:36:be: 1f:63:dd:9c:12:e1:92:92:75:59:06:a7:07:f6:8e: 76:42:f5:bc:3a:9d:15:d9:26:53:99:5a:0a:eb:90: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:53:F5:47:63:22:94:14:6A:55:2D:9F:1D:69:13:AF:8A:D3:A2:48 X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6c:b8:db:17:0b:a5:b3:b3:1e:d2:74:4b:a2:aa:31:08:71: cc:9f:4c:e7:57:2a:78:03:14:41:bf:2c:dd:1a:90:99:ae:ce: d5:ff:30:0e:91:19:74:4b:dd:a3:03:b6:04:3c:f9:96:99:fb: 73:57:e3:ab:4a:85:4a:00:a0:e3:1c:06:f6:c9:a3:f7:30:fd: c8:1f:39:51:a0:7d:20:ee:a8:20:d6:5b:55:6b:b1:d4:5a:01: ab:d1:4e:2b:7e:83:97:4c:81:de:6c:5c:0e:68:43:b9:23:65: 09:ef:54:e3:3d:8b:6d:e1:74:b0:d8:30:54:51:00:10:00:33: 0c:67:60:d6:38:5f:7b:db:b0:2c:2b:43:78:ac:2b:ac:62:c1: fb:5f:56:66:f5:3d:4d:1a:d9:8c:5e:06:81:a2:f7:0b:e6:c0: 7e:ee:61:4a:7c:34:10:06:13:e9:6b:ae:e3:e6:d3:9f:b8:29: a4:14:81:09:b9:9d:d5:fa:0d:cf:e0:82:56:fe:4a:e9:3b:a9: 31:f4:f9:ce:a9:44:21:62:bd:64:68:65:30:fe:60:25:09:21: 5f:e5:1d:63:09:5b:be:c1:26:30:a4:b1:92:e5:47:d8:a4:2a: f3:71:c9:fb:e1:6f:6e:5a:6b:dc:0b:c8:36:a1:a8:5f:6e:38: bd:ad:3c:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjYwNDA0MTg1MzMxWhcNMjYwNDExMTg1MzMxWjAYMRYwFAYD VQQDEw02OWQxNWUyYi0wZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH/qUe9bk5qfYRg+M6NxWm2oAmG/o3HHmSCO07xqjqGpJ+w7MVKmDvhpuVAn sfFQcJCLUqv99sPd4lLlJFlTVDvSLcmHCyeyGKXKajpy+PbNnQVLR7iM/CeAbdNN MnSqwif0xbBQwv3YKnd3qZRt80YmvdkECPz6Pi5+q4tOuUUBZ9JUgrml8ODEe76G uL7tjoP6/mb0r6GguapLOFy2NKu15+i2PWpeIah/xQ+QwBl0pqfTrcdKSKR7YeRn FKItHaLtC1H1ieJYu7AecWNWOkTB0e6qP6zxSh0H/W2WNr4fY92cEuGSknVZBqcH 9o52QvW8Op0V2SZTmVoK65AqOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJT9Udj IpQUalUtnx1pE6+K06JIMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWy42xcLpbOzHtJ0S6KqMQhxzJ9M51cqeAMUQb8s3RqQma7O1f8wDpEZdEvd owO2BDz5lpn7c1fjq0qFSgCg4xwG9smj9zD9yB85UaB9IO6oINZbVWux1FoBq9FO K36Dl0yB3mxcDmhDuSNlCe9U4z2LbeF0sNgwVFEAEAAzDGdg1jhfe9uwLCtDeKwr rGLB+19WZvU9TRrZjF4GgaL3C+bAfu5hSnw0EAYT6Wuu4+bTn7gppBSBCbmd1foN z+CCVv5K6TupMfT5zqlEIWK9ZGhlMP5gJQkhX+UdYwlbvsEmMKSxkuVH2KQq83HJ ++Fvblpr3AvINqGoX244va08hw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:00 2026 by rpki-client