$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: Z68DnCJ04L/4Hr3XdQlgYKXQ0TTd5a7wgzPbtJ4Lqk4= Subject key identifier: F7:8E:78:FC:59:3F:81:DC:90:0B:71:38:67:64:B0:B5:6A:6B:94:E9 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: 013F Signing time: Mon 20 Apr 2026 21:33:15 +0000 Manifest this update: Mon 20 Apr 2026 21:33:14 +0000 Manifest next update: Mon 27 Apr 2026 21:33:14 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: pTt+474sVUErrvIK6PSADXivcfWxzZxabJ2sDW2WtGo=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Apr 20 21:33:14 2026 GMT Not After : Apr 27 21:33:14 2026 GMT Subject: CN=69e69b9a-665d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:a9:2d:8a:bd:4f:d4:82:fb:01:a1:a7:84: 3a:6e:14:f4:bd:c9:e8:5e:f2:ec:aa:04:64:f1:f2: bc:a9:29:fb:a0:cf:26:7e:69:e9:4f:88:5d:6b:ed: 54:54:aa:66:04:34:1d:ec:1f:4b:a5:6e:82:a5:f4: c0:45:bb:83:c2:3a:d1:5b:b4:41:45:66:16:3e:96: 31:ab:28:27:88:3b:60:6e:95:08:65:36:84:2b:f6: e1:f2:cf:d4:b1:b8:45:ab:de:76:18:2c:25:7b:45: 52:6f:d4:34:de:17:b9:40:45:c3:66:ab:9a:af:51: 35:9b:48:8f:93:74:ba:0b:83:85:17:2d:15:37:bb: 49:43:69:2d:92:ec:b5:a2:41:60:2e:5b:b2:cf:79: 4c:7e:33:1a:a4:19:be:a1:a6:26:6b:4e:b2:ff:af: 45:d9:8e:7b:e8:f1:54:f0:89:65:52:67:46:56:f5: cd:9e:20:3f:ca:e0:c0:8d:4a:76:47:a6:37:47:7f: 76:0c:bd:cf:5e:d2:c9:e4:3b:34:ae:35:a6:7f:3d: 15:b4:39:d0:4a:77:cd:84:e9:ed:0f:5e:0e:c7:be: 56:4e:c1:a8:e0:0b:9e:b8:4c:e3:d8:1e:92:c3:63: cb:5c:a7:f4:30:d1:ee:b7:1c:c1:82:a4:2c:7f:1d: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8E:78:FC:59:3F:81:DC:90:0B:71:38:67:64:B0:B5:6A:6B:94:E9 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:55:24:2b:2a:9e:18:90:a5:3d:5b:14:9f:08:81:75:90:94: 45:f5:58:1e:60:0d:1d:6b:10:3c:0f:16:4e:8f:b1:17:35:dd: f2:1b:d9:61:af:3d:45:eb:b7:63:5a:46:24:49:47:12:29:02: 00:25:6b:80:8e:ef:4e:67:59:60:92:42:48:87:4d:b8:24:2f: 28:ae:2f:04:68:a1:a8:b7:4f:11:8f:46:ef:3a:c3:fc:63:d1: 3c:51:73:04:eb:6b:c9:96:21:f5:37:16:7c:ae:45:16:65:b5: 5e:66:96:75:ea:7a:bd:a1:80:c9:6d:7f:ac:fb:eb:25:42:29: 86:7d:f4:ce:08:57:e4:43:b4:70:e4:0a:c6:bb:eb:57:be:59: 09:af:7c:a0:a1:5b:20:2c:2c:61:dd:ea:83:72:11:28:08:f8: 4a:bf:59:48:b3:56:71:54:e6:03:c3:ad:05:90:63:3a:1c:81: 13:b2:07:ae:51:6b:8c:9e:d0:3d:ba:70:e8:f6:4d:95:64:77: 4f:87:ca:86:d3:83:b7:cc:f9:f2:10:f5:16:49:06:32:3e:56: 13:1f:97:50:90:45:01:84:e4:36:f5:ed:d1:63:59:e4:f4:27: 88:cc:e8:11:f7:41:2f:6d:0a:52:cc:d6:69:26:5f:9b:fe:6e: 44:08:e2:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjYwNDIwMjEzMzE0WhcNMjYwNDI3MjEzMzE0WjAYMRYwFAYD VQQDEw02OWU2OWI5YS02NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6upLYq9T9SC+wGhp4Q6bhT0vcnoXvLsqgRk8fK8qSn7oM8mfmnpT4hda+1U VKpmBDQd7B9LpW6CpfTARbuDwjrRW7RBRWYWPpYxqygniDtgbpUIZTaEK/bh8s/U sbhFq952GCwle0VSb9Q03he5QEXDZquar1E1m0iPk3S6C4OFFy0VN7tJQ2ktkuy1 okFgLluyz3lMfjMapBm+oaYma06y/69F2Y576PFU8IllUmdGVvXNniA/yuDAjUp2 R6Y3R392DL3PXtLJ5Ds0rjWmfz0VtDnQSnfNhOntD14Ox75WTsGo4AueuEzj2B6S w2PLXKf0MNHutxzBgqQsfx3B0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeOePxZ P4HckAtxOGdksLVqa5TpMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK1UkKyqeGJClPVsUnwiBdZCURfVYHmANHWsQPA8WTo+xFzXd8hvZYa89Reu3 Y1pGJElHEikCACVrgI7vTmdZYJJCSIdNuCQvKK4vBGihqLdPEY9G7zrD/GPRPFFz BOtryZYh9TcWfK5FFmW1XmaWdep6vaGAyW1/rPvrJUIphn30zghX5EO0cOQKxrvr V75ZCa98oKFbICwsYd3qg3IRKAj4Sr9ZSLNWcVTmA8OtBZBjOhyBE7IHrlFrjJ7Q Pbpw6PZNlWR3T4fKhtODt8z58hD1FkkGMj5WEx+XUJBFAYTkNvXt0WNZ5PQniMzo EfdBL20KUszWaSZfm/5uRAjibw== -----END CERTIFICATE-----Generated at Wed Apr 22 04:09:19 2026 by rpki-client