$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: LbN4nU/bAVS3JaFJo3tKMIDqBl8GNHX7qMeyISAyAak= Subject key identifier: C8:0B:D4:F4:61:BC:C7:BF:3C:BA:12:08:D4:79:2B:FA:70:C2:29:17 Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 59 Signing time: Sun 05 Apr 2026 07:26:59 +0000 Manifest this update: Sun 05 Apr 2026 07:26:59 +0000 Manifest next update: Sun 12 Apr 2026 07:26:59 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: Whq5UVVgvwS9orGQNxHYRAO7Q0fikQxhSt23QmwFA14=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: cUM/YRlGCUalihANb69w5cZ0Y6p6DB5jdCl/LBiwJeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Apr 5 07:26:59 2026 GMT Not After : Apr 12 07:26:59 2026 GMT Subject: CN=69d20ec3-56f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:a7:ad:f2:6f:5f:47:fd:b7:9e:02:c0:f2: ec:0e:23:cc:7b:ca:0a:23:90:ab:c6:a7:39:ad:94: 54:d8:2c:f8:3c:ab:47:99:5f:3d:4b:f5:7f:d3:68: fb:1c:52:48:f8:94:8f:13:dd:e7:ad:a2:76:d3:49: e0:5a:eb:89:11:12:65:57:f2:8e:e0:80:9b:b0:90: 78:12:c9:60:5c:25:b0:97:b8:6b:2c:a7:e3:d9:5f: 2a:9a:52:b5:db:d8:e0:f8:4a:01:96:83:ca:cf:d3: 6a:b7:4c:9b:9a:d9:85:98:02:c0:b9:b2:62:67:91: ad:44:c8:36:15:6b:23:f4:96:15:3d:f4:48:d4:44: 51:f6:c7:75:b2:ab:64:08:4b:d8:5d:d0:a2:f1:61: 1d:ea:20:5f:eb:29:08:ef:95:41:80:9a:53:1b:63: 78:99:fa:0b:ca:c9:b0:3d:aa:2d:57:11:d4:65:b7: 54:b0:d8:49:6d:2b:02:f0:e1:03:4d:f4:6d:32:66: 56:84:c6:b4:42:0d:91:e9:4b:7e:02:32:41:ea:66: eb:09:f3:c9:a7:cd:af:4f:e4:d4:09:2e:47:a7:11: c7:ac:98:39:1f:ed:11:df:c2:c2:9c:cc:90:e0:07: f0:ea:33:f8:fa:52:b0:ef:cc:10:e0:38:63:e4:55: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0B:D4:F4:61:BC:C7:BF:3C:BA:12:08:D4:79:2B:FA:70:C2:29:17 X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d7:b6:6e:5d:86:85:5a:84:9d:78:fe:2b:e4:a4:12:5b:d8: 16:cb:ab:ac:17:ee:f3:6e:9c:3e:5e:d4:43:cc:b8:ed:3b:23: 10:83:24:3a:28:4a:50:7b:74:bb:57:81:25:78:c8:fc:87:68: af:fa:82:d7:1e:61:08:36:59:a2:7d:9b:b8:f8:7e:c1:96:bf: 18:d5:79:14:a8:b8:8c:24:33:ee:64:aa:e5:24:ca:c9:e7:bd: f5:d1:58:70:8e:23:dd:df:8c:06:61:21:46:31:4b:28:5d:83: 36:04:3a:d6:f1:24:11:e3:cf:48:bd:21:40:a0:ee:f9:ad:53: 4f:b8:e6:b9:db:fc:3d:4a:21:bb:ab:fb:68:8d:f3:a2:79:ec: 5c:b5:24:61:0e:d8:ce:3d:ca:72:d2:17:99:1d:82:55:66:46: fa:c5:83:0e:93:5a:87:4d:cf:03:f7:eb:69:4d:56:e9:fe:86: ac:aa:61:9e:85:66:81:64:11:61:67:27:0f:56:ed:8e:52:fa: 1d:e2:97:db:53:a4:1f:70:1e:24:5a:ac:92:9e:0c:52:a1:ea: f9:46:ed:ee:16:7a:81:9e:dc:08:8d:72:c9:14:5e:50:fc:3a: 84:f6:ad:b3:07:f7:9d:67:42:46:ea:c1:b8:eb:07:6d:0d:02: e2:40:f6:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNjA0MDUwNzI2NTlaFw0yNjA0MTIwNzI2NTlaMBgxFjAUBgNV BAMTDTY5ZDIwZWMzLTU2ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPbaet8m9fR/23ngLA8uwOI8x7ygojkKvGpzmtlFTYLPg8q0eZXz1L9X/TaPsc Ukj4lI8T3eetonbTSeBa64kREmVX8o7ggJuwkHgSyWBcJbCXuGssp+PZXyqaUrXb 2OD4SgGWg8rP02q3TJua2YWYAsC5smJnka1EyDYVayP0lhU99EjURFH2x3Wyq2QI S9hd0KLxYR3qIF/rKQjvlUGAmlMbY3iZ+gvKybA9qi1XEdRlt1Sw2EltKwLw4QNN 9G0yZlaExrRCDZHpS34CMkHqZusJ88mnza9P5NQJLkenEcesmDkf7RHfwsKczJDg B/DqM/j6UrDvzBDgOGPkVR3fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyAvU9GG8 x788uhII1Hkr+nDCKRcwHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCt17ZuXYaFWoSdeP4r5KQSW9gWy6usF+7zbpw+XtRDzLjtOyMQgyQ6KEpQe3S7 V4EleMj8h2iv+oLXHmEINlmifZu4+H7Blr8Y1XkUqLiMJDPuZKrlJMrJ57310Vhw jiPd34wGYSFGMUsoXYM2BDrW8SQR489IvSFAoO75rVNPuOa52/w9SiG7q/tojfOi eexctSRhDtjOPcpy0heZHYJVZkb6xYMOk1qHTc8D9+tpTVbp/oasqmGehWaBZBFh ZycPVu2OUvod4pfbU6QfcB4kWqySngxSoer5Ru3uFnqBntwIjXLJFF5Q/DqE9q2z B/edZ0JG6sG46wdtDQLiQPaL -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:55 2026 by rpki-client