$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: mDiWCyRLfMhbROib4CT3cSX2P7wtPr+BFgpjMon/OJo= Subject key identifier: 44:2B:0C:2B:8F:EB:DE:9F:6C:A7:87:E0:08:47:7C:F9:BD:26:55:A8 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 01A5 Signing time: Fri 03 Apr 2026 04:17:00 +0000 Manifest this update: Fri 03 Apr 2026 04:17:00 +0000 Manifest next update: Fri 10 Apr 2026 04:17:00 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: rTCzjkiiQ4trY16FKkkGNPNa7PHEmR/dXrrClUyLwIw=) 2: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: Rk3j/x7/aK9tyzGNZkRW4uYz1dTdbytFeBnr/OmzBX8=) 3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: 1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=) 4: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: Uj11T+QW0pwuoYmi/Tug3FzEFRy1nbJISrOyCvJDnIQ=) 5: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: YSqNnOxJ+Xkes9UNemwulrLNoP9a1fzLC+DIw2bAtgY=) 6: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: lU5HELzK1HgvUgy9a8UOHW1aya85BnCwdaSrvas6AAk=) 7: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: L+Pr2GihRWoedBardrydLcushDGXI9FYHRtqemwZ37o=) 8: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fSlbtUc39UCW3k1Yy6pAqJg048Gxa2v6PcevURxg5Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Apr 2026 04:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Apr 3 04:17:00 2026 GMT Not After : Apr 10 04:17:00 2026 GMT Subject: CN=69cf3f3c-dbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:f2:31:14:1f:98:0d:1d:5f:79:45:b7:0b: 84:b9:56:2e:55:1e:44:b3:a7:f8:3d:0c:ee:24:17: 9e:16:40:a8:0f:01:40:43:8b:c2:3a:23:8c:42:26: f4:ac:c2:bd:90:0b:3b:b2:52:f8:0c:f0:d8:6d:65: ef:a7:de:b5:5e:8a:6b:41:b5:41:0b:b9:a0:b3:7e: 53:6c:ae:39:56:6c:f4:cb:dc:0a:4a:92:5e:0c:56: 55:61:4b:74:26:05:f4:02:c1:cf:dc:b9:16:22:f5: 24:17:f1:04:54:18:2c:fd:3d:20:b6:48:78:b1:b8: de:93:63:c2:3d:0a:52:51:de:4e:c8:15:5a:2e:63: 67:81:ef:60:13:fc:44:e2:b1:34:80:41:48:33:9d: c0:a6:e6:4b:8f:36:ff:2f:8e:db:74:b8:28:23:65: e2:1c:71:bb:04:3d:1c:bf:7c:d4:7f:25:92:c2:8b: b4:b8:89:c2:88:df:53:97:6d:80:10:ef:ae:37:2d: f1:57:3b:ee:d7:2f:3d:e5:f8:13:e3:54:ca:59:38: bf:51:9a:e4:73:8c:09:78:6e:27:b7:2a:0d:dd:dc: 23:3f:fb:97:34:35:51:38:5e:68:34:8b:81:6b:ed: ad:34:9b:12:a8:8c:ec:00:0e:10:4f:2f:85:fa:2a: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:0C:2B:8F:EB:DE:9F:6C:A7:87:E0:08:47:7C:F9:BD:26:55:A8 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:eb:34:d3:2e:19:21:21:27:21:f4:ee:aa:81:39:a0:51:b0: bb:4b:a7:8a:71:7a:d3:c4:bd:bc:a7:66:23:ed:df:33:25:db: 4e:f0:34:26:b4:93:0d:96:2f:ea:1c:ac:62:6e:34:97:ca:c8: 2d:75:67:4a:5f:ad:68:25:9a:27:78:83:44:18:22:6c:7e:7c: 65:00:b2:b8:b6:1a:90:11:7e:74:4f:95:2e:98:7a:6a:19:97: d5:d4:b0:4b:32:b0:19:d6:f8:88:42:26:ff:ef:6f:b1:2a:a4: 46:67:7d:95:af:fa:10:0b:7f:90:e1:e8:73:48:7b:44:4b:8d: 4b:c2:ec:f4:63:c2:1d:18:a4:75:65:36:3c:86:e4:53:aa:1c: 1e:6c:22:c4:e8:d0:80:68:55:fc:2f:23:7a:cc:2e:31:96:10: 1a:61:d4:34:49:a4:23:d5:12:e7:69:76:23:61:5d:68:4f:03: d2:f1:5a:3f:54:70:de:74:a1:8e:09:29:90:59:eb:4b:f4:a3: e9:88:a8:6d:90:7f:5e:aa:b4:5f:42:64:c6:65:96:c0:8d:a1: 64:b7:f3:cb:31:bc:c0:52:2e:b3:11:6a:6c:fa:ee:4f:46:f7: 53:b8:50:50:e9:28:15:40:e9:aa:9c:59:eb:2e:25:9a:7a:02: 3a:0f:80:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjYwNDAzMDQxNzAwWhcNMjYwNDEwMDQxNzAwWjAYMRYwFAYD VQQDEw02OWNmM2YzYy1kYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjzyMRQfmA0dX3lFtwuEuVYuVR5Es6f4PQzuJBeeFkCoDwFAQ4vCOiOMQib0 rMK9kAs7slL4DPDYbWXvp961XoprQbVBC7mgs35TbK45Vmz0y9wKSpJeDFZVYUt0 JgX0AsHP3LkWIvUkF/EEVBgs/T0gtkh4sbjek2PCPQpSUd5OyBVaLmNnge9gE/xE 4rE0gEFIM53ApuZLjzb/L47bdLgoI2XiHHG7BD0cv3zUfyWSwou0uInCiN9Tl22A EO+uNy3xVzvu1y895fgT41TKWTi/UZrkc4wJeG4ntyoN3dwjP/uXNDVROF5oNIuB a+2tNJsSqIzsAA4QTy+F+iq19QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQrDCuP 696fbKeH4AhHfPm9JlWoMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+s00y4ZISEnIfTuqoE5oFGwu0uninF608S9vKdmI+3fMyXbTvA0JrSTDZYv 6hysYm40l8rILXVnSl+taCWaJ3iDRBgibH58ZQCyuLYakBF+dE+VLph6ahmX1dSw SzKwGdb4iEIm/+9vsSqkRmd9la/6EAt/kOHoc0h7REuNS8Ls9GPCHRikdWU2PIbk U6ocHmwixOjQgGhV/C8jeswuMZYQGmHUNEmkI9US52l2I2FdaE8D0vFaP1Rw3nSh jgkpkFnrS/Sj6YiobZB/Xqq0X0JkxmWWwI2hZLfzyzG8wFIusxFqbPruT0b3U7hQ UOkoFUDpqpxZ6y4lmnoCOg+AVw== -----END CERTIFICATE-----Generated at Fri Apr 3 10:15:15 2026 by rpki-client