$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: 3VA+cwCgNaGXi5/liF9JY1cZbnklWsiKfUb83+Otc1A= Subject key identifier: 29:48:12:8D:32:43:54:3E:2E:6B:ED:46:03:E7:21:9F:7F:C9:58:3C Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 04D3 Signing time: Sat 04 Apr 2026 23:39:12 +0000 Manifest this update: Sat 04 Apr 2026 23:39:12 +0000 Manifest next update: Sat 11 Apr 2026 23:39:12 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: cfHHv34d0WFHVf6O/pIQMnCfu4PqjF9A29fZ0aOSI0g=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: nDKlIV5XCKKFEVpkwUv/eg1d2ekpQE5TiySuHisuD2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Apr 4 23:39:12 2026 GMT Not After : Apr 11 23:39:12 2026 GMT Subject: CN=69d1a120-39c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:f4:76:96:70:3e:b4:5b:66:81:41:62:58: d8:58:17:1e:f5:01:87:f2:25:95:e3:c9:8e:51:1c: bc:cc:4b:51:1d:63:35:4e:38:4e:68:df:be:42:78: b4:1e:2b:ad:80:aa:fd:cb:53:26:ad:19:d1:5c:89: 52:37:5c:61:57:7c:af:0a:62:e0:8a:a5:7d:d3:a0: dc:b6:3b:30:98:74:76:8a:84:a0:0a:d5:73:0c:87: ee:f6:bd:60:44:d3:ea:18:e4:97:00:ba:bf:17:ff: b0:30:8e:5d:5c:28:87:a2:4b:b0:fb:d1:33:51:45: 46:ea:50:01:d1:e7:5e:11:5f:c6:48:23:6c:cc:c7: e4:c6:d9:2d:19:90:35:dc:dc:1f:89:96:54:bd:69: 86:c6:cd:61:c7:6e:dd:95:62:e0:cf:d0:cb:d5:12: 0a:71:7b:e6:9d:6a:7c:ae:4e:fb:48:fd:be:e4:ff: 57:3c:99:ee:d1:3f:e4:9d:7b:74:26:ed:24:7e:81: 5f:a3:aa:0c:97:86:0d:6a:ef:36:eb:e1:28:15:ee: 27:7d:43:de:79:b8:19:2b:08:4a:54:bf:f3:0a:b2: 4b:52:51:f7:e0:d9:23:c6:27:1f:a4:14:62:66:ac: ca:25:9f:50:c8:96:d2:58:96:e3:9e:47:50:4c:12: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:48:12:8D:32:43:54:3E:2E:6B:ED:46:03:E7:21:9F:7F:C9:58:3C X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:c0:8c:c5:64:6c:a6:2f:de:c4:2d:16:6d:5b:30:68:34: 39:04:b6:71:71:bf:8b:4a:b7:8e:05:b3:9e:dc:4c:ab:e5:6e: 8a:a1:28:00:91:a8:0e:36:49:aa:17:91:bb:ef:d4:2d:0c:4c: 14:d1:d1:37:2d:b4:f7:83:d3:89:4e:2a:af:ce:cc:2c:b2:fe: e8:53:cd:36:f4:91:a5:60:17:9b:96:44:10:70:44:38:6d:68: 04:c8:46:7b:ed:c9:47:a1:b0:da:9c:15:ec:dd:a4:33:01:f6: 22:66:7f:65:9d:05:3f:2c:9f:67:c0:5f:a2:69:93:c0:e7:6d: 3c:f8:3f:09:53:82:e4:59:3c:d5:00:ec:b4:17:dd:d2:04:29: f6:77:47:cf:b0:13:f7:d6:63:bf:2a:a4:ce:16:b3:88:9b:02: f5:f9:15:8c:fb:31:8c:12:63:5a:d0:f2:7e:e8:f6:89:50:2d: f3:c8:67:c1:a5:6c:9b:89:aa:6b:f1:b2:a1:6a:2d:94:8a:6e: ef:b8:c5:91:50:0a:60:ea:18:fa:4b:36:f9:0a:37:c5:16:e2: 4a:31:14:4f:7b:28:94:7f:b6:4a:3b:60:0d:37:f9:42:18:60: 94:05:84:54:dd:82:d7:51:89:8f:ad:4b:eb:b6:75:ce:ff:b9: d4:91:ca:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjYwNDA0MjMzOTEyWhcNMjYwNDExMjMzOTEyWjAYMRYwFAYD VQQDEw02OWQxYTEyMC0zOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvH0dpZwPrRbZoFBYljYWBce9QGH8iWV48mOURy8zEtRHWM1TjhOaN++Qni0 HiutgKr9y1MmrRnRXIlSN1xhV3yvCmLgiqV906DctjswmHR2ioSgCtVzDIfu9r1g RNPqGOSXALq/F/+wMI5dXCiHokuw+9EzUUVG6lAB0edeEV/GSCNszMfkxtktGZA1 3NwfiZZUvWmGxs1hx27dlWLgz9DL1RIKcXvmnWp8rk77SP2+5P9XPJnu0T/knXt0 Ju0kfoFfo6oMl4YNau826+EoFe4nfUPeebgZKwhKVL/zCrJLUlH34NkjxicfpBRi ZqzKJZ9QyJbSWJbjnkdQTBJwSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClIEo0y Q1Q+LmvtRgPnIZ9/yVg8MB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMs7AjMVkbKYv3sQtFm1bMGg0OQS2cXG/i0q3jgWzntxMq+VuiqEoAJGoDjZJ qheRu+/ULQxMFNHRNy2094PTiU4qr87MLLL+6FPNNvSRpWAXm5ZEEHBEOG1oBMhG e+3JR6Gw2pwV7N2kMwH2ImZ/ZZ0FPyyfZ8BfommTwOdtPPg/CVOC5Fk81QDstBfd 0gQp9ndHz7AT99ZjvyqkzhaziJsC9fkVjPsxjBJjWtDyfuj2iVAt88hnwaVsm4mq a/GyoWotlIpu77jFkVAKYOoY+ks2+Qo3xRbiSjEUT3solH+2SjtgDTf5QhhglAWE VN2C11GJj61L67Z1zv+51JHKtg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:28 2026 by rpki-client