$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: 6FKWRVVom23MT+1fmD2mtXjWhtEHjajZ9zpCy9FliIY= Subject key identifier: 57:CA:A2:BE:08:CF:CF:27:68:20:C2:22:82:14:A2:A5:37:02:C3:55 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: CD Signing time: Sun 05 Apr 2026 06:14:39 +0000 Manifest this update: Sun 05 Apr 2026 06:14:38 +0000 Manifest next update: Sun 12 Apr 2026 06:14:38 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: 5OU06juO5nyAwqF47F2A4oNajRSj77zkL4Q6rGyrodk=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Apr 5 06:14:38 2026 GMT Not After : Apr 12 06:14:38 2026 GMT Subject: CN=69d1fdcf-1f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:df:d2:33:53:f7:b5:d8:ee:2d:b7:f2:28: 64:3f:76:49:f8:7b:cc:63:36:34:da:53:a1:e3:51: 1f:f2:a8:0f:68:02:57:50:f4:df:fe:9b:ac:0b:c4: 3f:1a:a9:7f:50:4f:56:45:7c:ba:3f:ba:54:d4:44: 99:a9:ad:94:a2:81:cd:b9:dc:26:a8:a0:88:a0:b2: 7f:1e:c4:58:ed:99:2f:df:b6:1d:ae:09:a9:2c:37: 24:25:b0:d6:8d:e8:33:53:38:2f:28:82:01:35:2d: 04:12:99:bc:89:ba:75:92:31:38:f7:57:e8:cf:73: e5:09:91:45:78:ec:d7:97:de:37:02:f0:51:b9:ac: 06:de:2b:84:19:5c:f3:a5:45:ee:a5:cc:e7:98:5c: fe:75:68:97:08:9b:2c:01:ef:fb:8b:7e:3d:7c:e6: 13:f7:f0:63:8b:e3:e5:bb:1b:c8:0d:87:0a:85:c3: 98:ab:53:4e:ae:65:c1:72:a6:6f:89:89:e1:4d:c7: 76:1d:4d:7d:02:aa:ce:a1:84:93:6b:00:9f:85:25: 52:23:48:6a:aa:d0:8a:ee:e9:4c:22:0c:c2:99:70: ef:37:18:82:40:ac:f0:61:96:ff:57:71:24:b1:15: 9a:60:db:78:c0:ed:2d:b7:b9:87:b8:2a:11:f0:d7: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CA:A2:BE:08:CF:CF:27:68:20:C2:22:82:14:A2:A5:37:02:C3:55 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:88:4e:95:a8:99:5b:4b:ef:b2:53:27:2a:8c:5e:82:d9: fc:a4:77:76:9b:79:ff:a0:a7:67:7a:fe:f4:1a:f5:7b:7b:3b: a1:9e:2c:24:a9:3b:ce:13:53:0d:69:f1:59:01:96:64:12:9c: 41:39:e7:fa:80:ce:98:b3:c5:ad:0f:bf:ea:2e:50:5b:b3:8c: be:3b:71:c7:14:ef:d1:29:f3:50:c2:3c:2a:99:3e:a0:3d:e7: 1b:99:a3:83:a9:fa:c4:5e:70:9f:3c:da:ac:3b:92:e3:71:52: 20:71:1c:49:d2:b6:cd:42:75:43:46:9d:5f:62:8c:40:74:6a: 8b:f9:f2:b2:2d:7c:4e:6b:7e:02:9e:90:73:8d:23:60:f1:2d: c3:1f:a7:92:0b:e6:dd:42:1a:72:9d:38:a9:c5:f4:b9:bb:81: 0b:19:59:27:7f:38:1d:c8:4d:cd:18:e5:70:50:cb:9b:48:c7: 87:30:c6:d4:e1:a0:83:11:0a:27:8b:5e:84:0b:f2:50:92:bb: 10:f8:86:36:4a:30:51:a6:4b:0b:fd:da:54:20:5f:55:a5:98: f3:85:fa:ef:60:c7:c4:7a:98:83:54:46:34:e2:6b:18:23:3b: e9:ad:6f:b4:4d:97:ab:1e:41:f9:7c:b5:61:d5:90:df:8e:26: 8b:ca:56:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc0ODgxMTAvBgNVBAUTKENENDFEQkMxODk3OEREMzg0RDRGNUM4RjhGOTZCNDBF NzFERUU2NDEwHhcNMjYwNDA1MDYxNDM4WhcNMjYwNDEyMDYxNDM4WjAYMRYwFAYD VQQDEw02OWQxZmRjZi0xZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs23f0jNT97XY7i238ihkP3ZJ+HvMYzY02lOh41Ef8qgPaAJXUPTf/pusC8Q/ Gql/UE9WRXy6P7pU1ESZqa2UooHNudwmqKCIoLJ/HsRY7Zkv37YdrgmpLDckJbDW jegzUzgvKIIBNS0EEpm8ibp1kjE491foz3PlCZFFeOzXl943AvBRuawG3iuEGVzz pUXupcznmFz+dWiXCJssAe/7i349fOYT9/Bji+PluxvIDYcKhcOYq1NOrmXBcqZv iYnhTcd2HU19AqrOoYSTawCfhSVSI0hqqtCK7ulMIgzCmXDvNxiCQKzwYZb/V3Ek sRWaYNt4wO0tt7mHuCoR8NeaDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfKor4I z88naCDCIoIUoqU3AsNVMB8GA1UdIwQYMBaAFM1B28GJeN04TU9cj4+WtA5x3uZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzQ4OC83OTAzQUJCQ0ZG MTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNUaE5UMXlQajVhMERuSGU1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNU aE5UMXlQajVhMERuSGU1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApT6ITpWomVtL77JTJyqMXoLZ/KR3dpt5/6CnZ3r+9Br1e3s7oZ4sJKk7zhNT DWnxWQGWZBKcQTnn+oDOmLPFrQ+/6i5QW7OMvjtxxxTv0SnzUMI8Kpk+oD3nG5mj g6n6xF5wnzzarDuS43FSIHEcSdK2zUJ1Q0adX2KMQHRqi/nysi18Tmt+Ap6Qc40j YPEtwx+nkgvm3UIacp04qcX0ubuBCxlZJ384HchNzRjlcFDLm0jHhzDG1OGggxEK J4tehAvyUJK7EPiGNkowUaZLC/3aVCBfVaWY84X672DHxHqYg1RGNOJrGCM76a1v tE2Xqx5B+Xy1YdWQ344mi8pWTw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:57:00 2026 by rpki-client