$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: USpK9qwzdiG8QA7vawTfXvoss1oYldIK7v9d3b5asZ8= Subject key identifier: F1:09:96:9A:51:E9:B9:93:D1:48:37:5E:2A:01:3B:70:44:DC:F4:5F Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 013D Signing time: Sun 05 Apr 2026 04:47:13 +0000 Manifest this update: Sun 05 Apr 2026 04:47:13 +0000 Manifest next update: Sun 12 Apr 2026 04:47:13 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: XN1mRva693sCgrPOzQcsuzqBjTcxEYuN7a/NSuU8KKI=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: rQPLuDedWDyQSG967e0npTQmvnHAr1Plxeiiz+JB7Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Apr 5 04:47:13 2026 GMT Not After : Apr 12 04:47:13 2026 GMT Subject: CN=69d1e951-2d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:c1:88:c7:a2:f0:5f:39:30:f0:8d:8c:f3: ea:ae:16:9c:5b:cb:65:d6:38:fd:f1:86:5c:96:9f: b6:d0:36:bb:20:bc:56:a3:aa:d5:0e:38:76:33:13: c8:cd:4f:6b:5c:db:a1:bc:31:3b:03:92:46:59:d3: 7d:b5:22:17:49:95:a2:2f:70:4d:5c:85:56:e1:78: 67:4f:aa:0a:d6:a4:1c:52:e0:9c:fd:a8:a9:04:6e: 80:59:e6:46:c4:bb:9a:d4:a5:42:bf:f0:30:95:fb: 9f:55:9f:81:74:06:ef:19:9e:9d:ce:21:1c:45:e2: 75:49:9f:ff:a6:49:74:07:55:b3:75:bd:b3:4b:97: fb:a9:ef:b2:8f:ba:0b:9f:2e:b6:22:56:de:11:27: a0:ff:20:ac:06:af:b2:15:05:d2:03:83:07:de:38: 56:62:e1:1c:e0:48:32:de:f3:de:79:45:c2:2a:15: 54:07:80:36:1d:a2:dd:54:83:d3:e0:8e:34:03:8e: d8:f1:2f:40:ee:52:e7:21:23:72:ec:86:b1:bd:e1: e8:04:a2:a9:84:15:04:30:cc:ba:ff:7b:ab:93:eb: e7:6f:78:ad:a7:09:c8:62:4f:83:b1:1e:72:d9:b3: 56:40:8d:35:71:e3:1d:25:0d:c8:eb:b3:48:67:ba: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:09:96:9A:51:E9:B9:93:D1:48:37:5E:2A:01:3B:70:44:DC:F4:5F X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b7:47:6b:fd:62:86:20:b3:7c:66:3b:38:43:ca:f2:11:37: 53:5b:08:cf:c4:2d:2e:86:03:ef:ba:b4:8f:94:6c:2c:55:79: bc:2f:ba:a4:82:e7:57:14:b4:73:ed:75:ff:60:0b:63:16:25: 84:16:19:54:86:ff:dd:a7:f2:d7:f4:30:65:cc:40:08:d6:61: e3:c2:5d:bb:a0:fb:5d:d3:e2:b7:f4:90:ee:f6:46:54:ae:31: 72:96:70:ae:b9:4a:e1:30:df:3e:43:13:40:ab:04:75:7a:43: 89:2e:75:a4:69:39:99:5e:53:10:69:02:d0:22:c5:d7:a0:3e: 35:d2:13:2c:9d:53:e9:5b:23:70:a9:84:08:99:34:c4:d3:35: a5:ca:f2:f3:4b:cd:78:25:56:fa:8b:50:63:01:6f:ff:b4:0e: 64:25:a6:a1:12:0f:ff:10:41:b6:08:31:a3:2d:3b:f1:3e:86: f2:69:1c:5a:80:ad:67:e3:ec:b3:d7:b7:5e:17:ba:81:cd:72: 56:0b:ef:b6:3e:ea:b7:cf:82:41:82:36:4f:1a:2b:c9:2e:c1: fe:9b:b1:47:6b:3b:5c:fb:77:63:2e:88:c7:ac:56:42:96:ab: 4b:61:f4:d4:c2:24:4e:f9:79:09:12:24:66:a5:f5:b1:42:53: 91:19:8b:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjYwNDA1MDQ0NzEzWhcNMjYwNDEyMDQ0NzEzWjAYMRYwFAYD VQQDEw02OWQxZTk1MS0yZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEHBiMei8F85MPCNjPPqrhacW8tl1jj98YZclp+20Da7ILxWo6rVDjh2MxPI zU9rXNuhvDE7A5JGWdN9tSIXSZWiL3BNXIVW4XhnT6oK1qQcUuCc/aipBG6AWeZG xLua1KVCv/AwlfufVZ+BdAbvGZ6dziEcReJ1SZ//pkl0B1Wzdb2zS5f7qe+yj7oL ny62IlbeESeg/yCsBq+yFQXSA4MH3jhWYuEc4Egy3vPeeUXCKhVUB4A2HaLdVIPT 4I40A47Y8S9A7lLnISNy7IaxveHoBKKphBUEMMy6/3urk+vnb3itpwnIYk+DsR5y 2bNWQI01ceMdJQ3I67NIZ7p0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEJlppR 6bmT0Ug3XioBO3BE3PRfMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlrdHa/1ihiCzfGY7OEPK8hE3U1sIz8QtLoYD77q0j5RsLFV5vC+6pILnVxS0 c+11/2ALYxYlhBYZVIb/3afy1/QwZcxACNZh48Jdu6D7XdPit/SQ7vZGVK4xcpZw rrlK4TDfPkMTQKsEdXpDiS51pGk5mV5TEGkC0CLF16A+NdITLJ1T6VsjcKmECJk0 xNM1pcry80vNeCVW+otQYwFv/7QOZCWmoRIP/xBBtggxoy078T6G8mkcWoCtZ+Ps s9e3Xhe6gc1yVgvvtj7qt8+CQYI2TxoryS7B/puxR2s7XPt3Yy6Ix6xWQparS2H0 1MIkTvl5CRIkZqX1sUJTkRmLIQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:18 2026 by rpki-client