$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: Ho2o+Oaanl1KF2e56VjsGWyZeoj4LlNKOpxbWqd1UlY= Subject key identifier: 65:1E:AC:AA:43:74:D2:F7:92:E2:D5:9F:73:53:6B:B4:D6:57:AB:CE Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01F2 Signing time: Wed 29 Apr 2026 03:51:28 +0000 Manifest this update: Wed 29 Apr 2026 03:51:28 +0000 Manifest next update: Wed 06 May 2026 03:51:28 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: 25ILxrutPCoPd9xyRKY6d20ap9B/Q4ynKG77IWpweMs=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 03:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Apr 29 03:51:28 2026 GMT Not After : May 6 03:51:28 2026 GMT Subject: CN=69f18040-626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:4b:5f:f4:6f:91:97:e5:90:25:42:68:7b: 5d:02:ca:dc:ee:aa:72:c4:43:d9:b2:1d:d5:6d:bd: a2:72:69:d6:e1:05:a1:59:6f:58:4d:44:ad:0a:c9: 0d:68:d4:bc:2e:58:12:4e:da:a3:fd:3f:d5:37:17: 71:f9:76:66:df:eb:82:07:aa:19:59:82:8f:81:46: 7d:d3:8d:e3:c9:a3:3c:75:24:51:25:67:c4:90:55: de:e6:78:71:b9:5f:7a:c1:72:c7:c6:43:92:73:52: 43:f6:70:02:6e:34:46:7d:16:cd:7c:90:36:be:41: 0a:9b:00:81:33:92:e9:50:64:86:91:3c:58:9b:f8: c1:d5:ef:0a:c4:fc:45:aa:10:38:65:56:5f:06:2c: 94:56:d2:56:e8:92:eb:8c:41:f7:56:6b:f8:bf:2d: c1:0f:af:79:58:ca:7f:7f:09:62:50:4f:97:5a:7f: 29:06:1d:bf:02:58:98:f7:bb:58:8a:36:0a:7c:5e: 32:c6:2b:89:fd:7a:69:fd:77:c1:c0:8e:f0:95:6e: 6d:67:aa:39:bb:be:84:15:4d:d8:3a:e7:de:52:9a: c0:cc:75:7d:24:67:5e:3e:c0:15:f9:01:e1:04:58: d2:b7:dd:a3:ff:c3:c0:72:7a:34:ba:b1:ec:21:2f: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1E:AC:AA:43:74:D2:F7:92:E2:D5:9F:73:53:6B:B4:D6:57:AB:CE X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a1:36:72:bd:43:db:1f:97:3c:54:70:61:56:2a:15:21:cc: 71:f3:cd:fb:ca:7b:ee:a5:44:8c:30:97:3f:e0:6e:37:bf:ed: 3f:94:87:67:72:42:0c:b0:73:2c:12:21:c5:b6:0b:e7:ee:90: 4e:2c:89:f8:10:e0:10:ad:b0:4c:ef:4f:af:12:61:17:34:1f: 5f:73:73:19:eb:c2:9e:e0:00:e5:62:58:1c:9a:2c:21:dc:de: 38:5e:ad:69:51:9f:bc:c1:e3:6c:4b:cd:05:ee:d4:6a:ab:23: 37:c0:15:22:fd:8b:10:c0:3e:78:82:75:1a:8f:1b:48:9e:d6: 3d:11:a8:ad:d4:d8:a1:46:30:93:0a:e1:16:3e:f2:15:de:7f: 03:0f:1f:e0:b8:cd:85:a9:e5:9c:b4:b1:3e:52:71:58:38:26: 55:fa:ba:e1:be:5a:e3:d1:26:b2:72:c3:06:d4:2e:9e:07:bd: ec:fe:f7:00:e7:bc:41:bc:75:2e:f7:b9:e9:77:80:ff:c7:75: 92:a3:a1:8f:15:04:7c:f2:89:ba:a7:d3:cb:0c:5e:5e:a0:e2: 7c:9c:e8:17:bc:39:c5:58:25:39:75:7d:8c:f4:ea:ba:be:04: 0e:1d:34:ed:3b:fb:ee:e4:fe:94:0a:a4:13:6c:26:df:55:94: c8:5c:bb:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwNDI5MDM1MTI4WhcNMjYwNTA2MDM1MTI4WjAYMRYwFAYD VQQDEw02OWYxODA0MC02MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rtLX/RvkZflkCVCaHtdAsrc7qpyxEPZsh3Vbb2icmnW4QWhWW9YTUStCskN aNS8LlgSTtqj/T/VNxdx+XZm3+uCB6oZWYKPgUZ9043jyaM8dSRRJWfEkFXe5nhx uV96wXLHxkOSc1JD9nACbjRGfRbNfJA2vkEKmwCBM5LpUGSGkTxYm/jB1e8KxPxF qhA4ZVZfBiyUVtJW6JLrjEH3Vmv4vy3BD695WMp/fwliUE+XWn8pBh2/AliY97tY ijYKfF4yxiuJ/Xpp/XfBwI7wlW5tZ6o5u76EFU3YOufeUprAzHV9JGdePsAV+QHh BFjSt92j/8PAcno0urHsIS90HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUerKpD dNL3kuLVn3NTa7TWV6vOMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGKE2cr1D2x+XPFRwYVYqFSHMcfPN+8p77qVEjDCXP+BuN7/tP5SHZ3JCDLBz LBIhxbYL5+6QTiyJ+BDgEK2wTO9PrxJhFzQfX3NzGevCnuAA5WJYHJosIdzeOF6t aVGfvMHjbEvNBe7UaqsjN8AVIv2LEMA+eIJ1Go8bSJ7WPRGordTYoUYwkwrhFj7y Fd5/Aw8f4LjNhanlnLSxPlJxWDgmVfq64b5a49EmsnLDBtQunge97P73AOe8Qbx1 Lve56XeA/8d1kqOhjxUEfPKJuqfTywxeXqDifJzoF7w5xVglOXV9jPTqur4EDh00 7Tv77uT+lAqkE2wm31WUyFy7ag== -----END CERTIFICATE-----Generated at Wed Apr 29 17:00:21 2026 by rpki-client