$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: Y1b9u+u/ci0haL6CigBgCYWxc3cMM/BTTvcIKXRauME= Subject key identifier: 1B:97:7E:45:7D:1B:10:46:87:2B:E3:84:0B:18:7F:08:B0:2B:64:07 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0CD5 Signing time: Sat 04 Apr 2026 18:11:47 +0000 Manifest this update: Sat 04 Apr 2026 18:11:47 +0000 Manifest next update: Sat 11 Apr 2026 18:11:47 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: kpcCjkfj0CZ8TPIpgTjay4tBQ1D9QDDZmlI/J3Sbfww=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: AajdPkJ4rEa4vqdqvJqj9eo6LBkmjEKm6+u/Jv10pOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Apr 4 18:11:47 2026 GMT Not After : Apr 11 18:11:47 2026 GMT Subject: CN=69d15463-58cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:65:bc:51:ac:0f:3f:5f:ff:d2:b2:4b:64: 08:b1:95:ec:d1:fa:6c:e2:2b:73:5b:05:e5:98:fc: 0e:09:28:3d:f7:e8:38:77:b3:76:b0:3b:06:5f:3a: c6:3d:d1:20:8c:6d:e5:54:8e:12:63:41:3c:e2:0c: d0:fb:02:d9:e2:1d:2b:c7:8f:44:56:4b:04:5a:3f: 75:53:83:d1:41:97:a7:0b:a5:6e:81:67:43:18:67: 43:1b:7e:81:7b:01:f9:27:81:df:3a:bf:63:f1:9e: 41:6f:c0:ba:00:cc:5e:fe:66:53:f7:44:03:4e:43: f3:1c:54:a5:a0:6c:bb:42:8d:94:64:7d:69:da:82: be:b6:0b:5d:e5:c8:7b:d1:7c:61:52:c0:9e:25:5d: 88:dc:6c:b2:a5:89:40:60:c3:59:8f:27:d3:b6:b6: 8e:7e:e3:42:81:b2:83:82:f1:5f:44:05:a9:2b:29: 50:ee:a0:af:18:0c:5f:22:13:fe:52:c1:d9:63:e7: 2c:56:94:0f:a2:44:63:17:7f:39:40:08:49:58:f1: 11:3f:eb:bb:31:81:fb:b0:4a:29:57:51:42:0c:3b: 75:bd:3d:a9:22:58:a8:3e:b6:e4:16:77:45:71:ab: ce:5c:d8:77:b9:c8:95:88:cd:df:9a:3e:95:c4:2c: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:97:7E:45:7D:1B:10:46:87:2B:E3:84:0B:18:7F:08:B0:2B:64:07 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:09:23:df:11:c1:09:42:fe:f5:f2:0c:22:29:02:02:a3:cb: b7:d5:72:29:b0:28:86:8b:0d:fb:ad:71:33:15:5d:bb:d2:0d: 9a:bf:61:24:2d:53:dc:0a:e3:e0:05:32:8e:f9:e3:8e:4b:e7: 7c:cf:7b:10:4f:eb:80:e8:97:a7:90:81:fc:1a:38:47:35:59: 97:8a:db:e1:29:72:7f:4e:74:c9:9a:17:e5:48:4a:bc:de:a1: 58:97:75:51:41:a5:ce:40:6b:bb:45:e4:09:26:f8:c2:9f:e8: 74:b9:ee:52:dc:9d:6a:b5:02:49:59:45:70:c8:8f:dc:78:d3: 03:3f:36:27:24:3f:8f:69:90:ee:97:bd:1f:06:ba:1b:8c:08: 89:51:da:04:1b:fa:d1:6f:de:9c:b7:01:8b:96:7c:5b:53:93: 6d:53:90:01:f1:e1:33:dd:e0:88:ec:d9:e1:74:19:fd:e8:e5: a5:c1:b6:b0:7c:54:7b:ac:6b:b1:4b:bc:08:7b:fd:df:64:d1: 50:fd:df:e3:ac:2f:f7:a6:ce:e1:21:36:d3:b8:44:d8:8c:16: cd:ca:f3:bc:82:46:d0:71:b4:d6:8a:88:36:29:36:59:5e:7d: 48:0a:d0:65:60:ac:cd:a7:ce:38:fc:ad:e7:42:a2:9d:f6:97: 90:ab:35:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjYwNDA0MTgxMTQ3WhcNMjYwNDExMTgxMTQ3WjAYMRYwFAYD VQQDEw02OWQxNTQ2My01OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yRlvFGsDz9f/9KyS2QIsZXs0fps4itzWwXlmPwOCSg99+g4d7N2sDsGXzrG PdEgjG3lVI4SY0E84gzQ+wLZ4h0rx49EVksEWj91U4PRQZenC6VugWdDGGdDG36B ewH5J4HfOr9j8Z5Bb8C6AMxe/mZT90QDTkPzHFSloGy7Qo2UZH1p2oK+tgtd5ch7 0XxhUsCeJV2I3GyypYlAYMNZjyfTtraOfuNCgbKDgvFfRAWpKylQ7qCvGAxfIhP+ UsHZY+csVpQPokRjF385QAhJWPERP+u7MYH7sEopV1FCDDt1vT2pIlioPrbkFndF cavOXNh3uciViM3fmj6VxCzM9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuXfkV9 GxBGhyvjhAsYfwiwK2QHMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeQkj3xHBCUL+9fIMIikCAqPLt9VyKbAohosN+61xMxVdu9INmr9hJC1T3Arj 4AUyjvnjjkvnfM97EE/rgOiXp5CB/Bo4RzVZl4rb4Slyf050yZoX5UhKvN6hWJd1 UUGlzkBru0XkCSb4wp/odLnuUtydarUCSVlFcMiP3HjTAz82JyQ/j2mQ7pe9Hwa6 G4wIiVHaBBv60W/enLcBi5Z8W1OTbVOQAfHhM93giOzZ4XQZ/ejlpcG2sHxUe6xr sUu8CHv932TRUP3f46wv96bO4SE207hE2IwWzcrzvIJG0HG01oqINik2WV59SArQ ZWCszafOOPyt50KinfaXkKs1BQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:56:43 2026 by rpki-client