$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: E6D1n6Z84i1OA0Curvb9ccJ/sXDJTqTSKLe49L2D2AY= Subject key identifier: 61:74:3A:4F:8D:8E:9A:22:FA:29:D1:D7:6E:DE:C7:53:CB:75:6E:1F Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 01AD Signing time: Sun 05 Apr 2026 03:39:33 +0000 Manifest this update: Sun 05 Apr 2026 03:39:32 +0000 Manifest next update: Sun 12 Apr 2026 03:39:32 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: t55C0yV595BqCTqkIMjmoPZ5UKxgNqcu6qXCTBcEk/A=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oegRAcugKLatUbTXSLvKEbrye0Tdi4sy7aoKF/I5tTI=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: MiKf/hrtY4nGNwWt8u8etuZ0Gw3xF9JGpGA4BCKSaOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Apr 5 03:39:32 2026 GMT Not After : Apr 12 03:39:32 2026 GMT Subject: CN=69d1d974-c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:3f:f7:01:06:b8:24:50:6b:cc:b4:10:44: 98:40:72:53:8d:51:47:7a:37:95:d7:34:8b:f1:8d: 9e:b6:a5:14:cb:11:f7:94:f2:c3:a0:37:7f:d5:68: 94:45:21:99:66:f5:5a:f4:34:5a:ce:94:9e:1e:1a: 1f:76:a0:1d:95:72:15:3e:55:90:61:be:9f:03:59: e8:29:59:ec:c9:11:8b:43:12:95:99:7b:38:7d:83: bc:a1:e3:7c:37:b2:fc:e2:e7:9a:61:5f:f3:e3:9a: ce:40:59:e5:45:49:4f:c9:eb:e7:9c:66:5a:0b:9b: f9:9d:df:ef:f3:68:90:15:6e:49:71:89:10:13:0c: 7a:a6:1c:45:cf:7d:d5:b7:39:68:b6:a2:a6:10:ad: 37:3a:b1:1d:95:62:e8:81:13:e9:e2:52:80:13:fa: 15:36:a1:72:7e:08:4f:5f:1d:34:6c:3d:e1:55:66: 0d:67:d3:62:b6:72:53:2c:7d:a7:57:8e:f9:ba:ea: af:08:8e:77:8e:a8:13:df:c1:c6:4c:03:68:99:4b: b4:05:6f:a1:74:25:42:c4:eb:0f:3c:37:e8:fa:7f: fa:5f:03:84:9d:be:59:93:74:43:bc:30:23:03:8c: 5e:56:08:6e:62:8a:29:51:af:a5:59:59:91:9c:09: d6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:3A:4F:8D:8E:9A:22:FA:29:D1:D7:6E:DE:C7:53:CB:75:6E:1F X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f1:1c:df:9c:cb:d8:95:d2:24:7b:60:96:5c:7c:35:8d:bf:b1: 69:3a:ff:b8:fa:e0:3d:e4:b7:ed:70:ff:cd:51:fe:ff:41:e6: a6:5d:41:94:63:00:aa:1e:ce:e4:ea:db:20:b4:55:9f:86:e3: 27:2d:6e:0b:84:2e:82:b4:b4:e3:64:57:84:1d:c5:15:bb:bb: b0:34:ac:0a:35:9b:40:41:61:13:b2:71:cf:ff:1f:cc:86:25: af:b5:f7:f0:eb:5c:fe:43:c3:f7:4d:e7:02:16:b1:b3:5c:c4: 72:97:7b:9d:11:fe:34:51:52:c6:bc:ac:f1:f3:6d:49:5e:40: 5f:8e:5a:61:24:bf:98:40:1d:ee:b2:a3:ac:ad:af:43:49:33: 04:61:16:90:d4:81:2f:a1:89:ac:82:9b:37:11:3b:14:0f:31: 81:cb:51:04:9c:b7:dc:76:a7:51:a8:f6:73:b1:ca:5c:ed:e0: 97:a2:80:cb:a4:d2:22:a0:8f:0d:36:16:fb:9b:25:00:bd:23: ec:c2:c9:2a:4c:7d:3b:a3:13:88:9a:15:a6:75:f3:77:62:6e: 3d:7b:da:37:f9:54:c5:df:15:59:fd:d3:01:ff:aa:68:b5:4a: 6b:c0:8a:c3:c2:b3:c6:79:2d:e5:5b:33:55:0d:7e:4b:a2:80: ac:29:8a:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjYwNDA1MDMzOTMyWhcNMjYwNDEyMDMzOTMyWjAYMRYwFAYD VQQDEw02OWQxZDk3NC1jODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuws/9wEGuCRQa8y0EESYQHJTjVFHejeV1zSL8Y2etqUUyxH3lPLDoDd/1WiU RSGZZvVa9DRazpSeHhofdqAdlXIVPlWQYb6fA1noKVnsyRGLQxKVmXs4fYO8oeN8 N7L84ueaYV/z45rOQFnlRUlPyevnnGZaC5v5nd/v82iQFW5JcYkQEwx6phxFz33V tzlotqKmEK03OrEdlWLogRPp4lKAE/oVNqFyfghPXx00bD3hVWYNZ9NitnJTLH2n V475uuqvCI53jqgT38HGTANomUu0BW+hdCVCxOsPPDfo+n/6XwOEnb5Zk3RDvDAj A4xeVghuYoopUa+lWVmRnAnWuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGF0Ok+N jpoi+inR127ex1PLdW4fMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8RzfnMvYldIke2CWXHw1jb+xaTr/uPrgPeS37XD/zVH+/0Hmpl1BlGMAqh7O 5OrbILRVn4bjJy1uC4QugrS042RXhB3FFbu7sDSsCjWbQEFhE7Jxz/8fzIYlr7X3 8Otc/kPD903nAhaxs1zEcpd7nRH+NFFSxrys8fNtSV5AX45aYSS/mEAd7rKjrK2v Q0kzBGEWkNSBL6GJrIKbNxE7FA8xgctRBJy33HanUaj2c7HKXO3gl6KAy6TSIqCP DTYW+5slAL0j7MLJKkx9O6MTiJoVpnXzd2JuPXvaN/lUxd8VWf3TAf+qaLVKa8CK w8Kzxnkt5VszVQ1+S6KArCmK0A== -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:25 2026 by rpki-client