$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: UBIbMrOMOLNfRRDq3l7sglsvee94bQcdlPkR8xc5lSY= Subject key identifier: C3:AB:15:E8:61:B5:35:2D:3F:DE:C8:B8:F6:7B:78:51:5F:C6:C9:FB Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 73 Signing time: Wed 29 Apr 2026 08:41:21 +0000 Manifest this update: Wed 29 Apr 2026 08:41:21 +0000 Manifest next update: Wed 06 May 2026 08:41:21 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: d/4P3rpf8ItTHnQjAbP9CVGEMQoi0saFfB54FbP2w1M=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Apr 29 08:41:21 2026 GMT Not After : May 6 08:41:21 2026 GMT Subject: CN=69f1c431-f0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:59:aa:4e:ff:b0:ef:b9:45:bc:f3:99:e4: 47:95:f6:96:00:3d:21:fb:f9:de:72:c5:85:b5:c4: fb:30:51:58:12:7e:a1:6a:52:60:4d:b5:41:44:47: 3d:48:a5:cb:0d:2e:72:68:c6:f6:a6:28:ab:2f:4e: c4:d7:01:f1:c5:8b:2d:d2:94:2e:5b:7e:98:77:86: 3f:d3:68:5f:35:a1:61:89:fb:31:5f:1b:bc:22:16: 8e:4d:be:6d:d2:0f:17:69:04:47:4b:89:71:65:4d: 94:b8:0e:ea:cb:ef:d3:59:ad:ed:c3:c5:37:f2:2d: 7a:ff:ac:4a:53:e2:42:93:98:fd:7a:ae:c4:a6:3f: d2:55:80:77:48:82:ab:25:98:d0:af:21:b5:c3:60: 3c:fa:4c:e4:53:23:29:38:2c:4b:37:70:c8:d9:74: d4:8e:11:66:f1:fa:65:03:b0:f7:6e:72:89:4b:5f: 16:a8:03:93:6f:7e:76:50:19:08:15:37:30:f9:cf: 53:7e:a4:41:ae:41:29:5e:7f:fc:99:2c:9d:a1:c3: b5:36:fd:6d:2a:0e:12:10:13:85:90:1b:3f:6e:13: f6:c5:f0:fd:50:15:32:0e:ed:9a:28:e0:97:d8:79: f4:83:32:53:e6:88:0f:3f:81:61:ca:db:59:ce:5b: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AB:15:E8:61:B5:35:2D:3F:DE:C8:B8:F6:7B:78:51:5F:C6:C9:FB X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5e:fe:dc:dc:2f:b6:e6:04:94:c0:b4:65:ea:79:9d:f5:1d: 6b:b7:ae:54:fb:3d:42:df:23:d0:ac:f2:b3:d3:34:f6:8c:90: 09:ea:db:8c:cc:f9:a7:6d:12:bc:8d:2e:92:d2:91:dc:e8:19: a3:88:43:bc:41:27:ea:01:7e:bd:9e:b6:89:d5:c0:6b:7a:78: 2b:f4:c7:00:de:7f:87:75:ad:1d:65:c6:f9:fd:5e:d9:42:4b: 15:4b:fb:c0:ce:10:8a:c1:81:73:70:72:6b:3a:82:17:75:a0: e9:3d:d6:7b:59:d4:a7:84:ae:a5:c3:ad:50:dd:1f:ec:05:44: ce:5f:b5:22:9b:f7:9a:6e:13:19:aa:00:3c:9c:5a:cc:d8:b7: a2:14:af:3d:4b:05:9a:6b:d5:4f:cf:47:61:1c:a0:c2:b3:d2: 98:2d:02:13:1f:d7:57:50:a7:6e:40:5f:53:5c:bf:e1:d2:6c: 9d:59:a9:9d:6f:8f:b2:11:b7:17:bf:c7:1f:46:f4:ee:d7:2d: 79:8f:38:fe:4d:d5:a7:8b:f6:f5:72:de:05:bb:50:41:ec:58: d6:98:71:6e:93:18:dc:c6:f4:6e:bd:e0:2a:de:84:12:3d:1c: 6a:88:d0:1a:99:6b:1e:24:ad:b1:de:d0:1a:60:07:bf:0b:08: f9:ec:e0:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNjA0MjkwODQxMjFaFw0yNjA1MDYwODQxMjFaMBgxFjAUBgNV BAMTDTY5ZjFjNDMxLWYwYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ4VmqTv+w77lFvPOZ5EeV9pYAPSH7+d5yxYW1xPswUVgSfqFqUmBNtUFERz1I pcsNLnJoxvamKKsvTsTXAfHFiy3SlC5bfph3hj/TaF81oWGJ+zFfG7wiFo5Nvm3S DxdpBEdLiXFlTZS4DurL79NZre3DxTfyLXr/rEpT4kKTmP16rsSmP9JVgHdIgqsl mNCvIbXDYDz6TORTIyk4LEs3cMjZdNSOEWbx+mUDsPducolLXxaoA5NvfnZQGQgV NzD5z1N+pEGuQSlef/yZLJ2hw7U2/W0qDhIQE4WQGz9uE/bF8P1QFTIO7Zoo4JfY efSDMlPmiA8/gWHK21nOW2ubAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw6sV6GG1 NS0/3si49nt4UV/GyfswHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+Xv7c3C+25gSUwLRl6nmd9R1rt65U+z1C3yPQrPKz0zT2jJAJ6tuMzPmnbRK8 jS6S0pHc6BmjiEO8QSfqAX69nraJ1cBrengr9McA3n+Hda0dZcb5/V7ZQksVS/vA zhCKwYFzcHJrOoIXdaDpPdZ7WdSnhK6lw61Q3R/sBUTOX7Uim/eabhMZqgA8nFrM 2LeiFK89SwWaa9VPz0dhHKDCs9KYLQITH9dXUKduQF9TXL/h0mydWamdb4+yEbcX v8cfRvTu1y15jzj+TdWni/b1ct4Fu1BB7FjWmHFukxjcxvRuveAq3oQSPRxqiNAa mWseJK2x3tAaYAe/Cwj57OAL -----END CERTIFICATE-----Generated at Wed Apr 29 13:46:21 2026 by rpki-client