$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: ExJcrbngNVNKX3fs+oQiyLkPOD4Ke4EUXI7YwQFKCNo= Subject key identifier: 65:4C:E1:81:4F:65:4C:74:CC:C7:DF:99:1B:4A:8D:3F:10:06:C0:FA Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 0125 Signing time: Wed 29 Apr 2026 06:19:38 +0000 Manifest this update: Wed 29 Apr 2026 06:19:38 +0000 Manifest next update: Wed 06 May 2026 06:19:38 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: oEV77mrEiIvQDtyYrvCHlWY4tWIKFjvUzSUlArBsx1c=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 06:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Apr 29 06:19:38 2026 GMT Not After : May 6 06:19:38 2026 GMT Subject: CN=69f1a2fa-99d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:be:d0:35:ea:b1:d1:25:9e:b5:08:ce:2f: 55:2c:f7:3e:2a:03:8b:4f:fd:5f:56:56:ce:40:df: 0d:58:84:5e:f0:3c:ec:43:5b:2b:f2:41:c8:da:7f: 4d:db:22:a7:07:de:c4:53:bc:be:f2:a1:c4:4d:c0: db:b1:a6:a8:96:60:b4:e3:b5:4a:7c:64:98:55:f3: 28:cc:b9:b2:48:d5:f6:b9:22:8d:b9:ee:2a:68:6c: 54:3d:0a:cd:61:e1:39:b2:50:44:3a:d7:91:d2:88: 9a:f7:3c:a3:f9:ba:b1:b8:5b:e1:a4:fd:b0:57:73: 43:2a:76:a0:79:c4:7f:b6:14:6f:fc:9a:e6:91:1f: e5:73:7d:ae:75:b4:f3:23:e4:f4:32:01:b6:a3:84: 86:f9:ae:21:ad:b7:1a:02:46:f6:96:33:f4:e4:3e: 51:08:60:9c:74:ea:3e:70:af:ed:e9:79:22:da:2c: bc:bf:f7:94:30:f0:a8:ed:b3:60:b1:c9:f1:f4:96: 1d:93:59:26:6b:fa:0a:2c:de:a0:f0:9e:1c:6c:0e: f4:d3:3e:a1:61:f1:d9:7d:b2:10:5c:e3:a9:bf:af: ed:a7:24:89:d6:04:79:82:65:8f:24:a4:bc:a8:8d: a3:09:b1:63:3a:a8:c8:12:63:db:0a:54:24:fe:d6: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:E1:81:4F:65:4C:74:CC:C7:DF:99:1B:4A:8D:3F:10:06:C0:FA X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:05:b7:88:d5:7a:4a:b1:9b:62:16:3b:75:91:81:22:4c:dc: 0f:40:2b:95:5b:2e:a5:b8:1c:17:07:ac:70:fd:1b:d0:44:88: 2f:35:fd:c8:80:75:82:4e:15:7c:44:4c:42:7c:78:d3:67:28: 64:2c:f5:a9:e4:3e:9d:00:13:81:ba:98:05:10:15:c5:4f:b8: b9:02:8f:55:bd:8e:70:b6:2c:51:f1:0a:ee:7a:5a:43:cd:41: 60:f5:6c:60:78:be:41:9b:d6:c3:7c:37:f3:44:f1:3a:0f:88: ce:cc:e7:2e:a6:7b:8b:4e:e2:d4:ca:1f:03:00:7e:e5:05:68: 13:a8:bb:d1:23:21:b6:38:27:84:37:b4:a3:f4:5b:69:2f:51: d7:00:8b:6c:5d:94:f4:82:1d:dd:65:bc:a6:87:60:e4:7e:0d: 9f:ff:c4:90:03:b8:19:e1:4a:8f:17:ae:ec:d3:88:02:89:a4: 49:a4:24:9a:3d:ee:be:ce:db:85:a6:44:9b:ec:3b:70:48:66: 97:ee:a8:02:12:45:92:2d:5d:24:c2:cf:92:4d:ad:a5:cc:1e: 8c:9d:ad:e8:c2:27:75:58:6b:b3:a5:80:40:56:d1:47:47:57: 00:e9:b1:be:20:f4:8e:05:06:a4:66:d0:32:c9:3c:cc:43:ff: 8b:84:28:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYwNDI5MDYxOTM4WhcNMjYwNTA2MDYxOTM4WjAYMRYwFAYD VQQDEw02OWYxYTJmYS05OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTq+0DXqsdElnrUIzi9VLPc+KgOLT/1fVlbOQN8NWIRe8DzsQ1sr8kHI2n9N 2yKnB97EU7y+8qHETcDbsaaolmC047VKfGSYVfMozLmySNX2uSKNue4qaGxUPQrN YeE5slBEOteR0oia9zyj+bqxuFvhpP2wV3NDKnagecR/thRv/JrmkR/lc32udbTz I+T0MgG2o4SG+a4hrbcaAkb2ljP05D5RCGCcdOo+cK/t6Xki2iy8v/eUMPCo7bNg scnx9JYdk1kma/oKLN6g8J4cbA700z6hYfHZfbIQXOOpv6/tpySJ1gR5gmWPJKS8 qI2jCbFjOqjIEmPbClQk/tYCwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVM4YFP ZUx0zMffmRtKjT8QBsD6MB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdAW3iNV6SrGbYhY7dZGBIkzcD0ArlVsupbgcFwescP0b0ESILzX9yIB1gk4V fERMQnx402coZCz1qeQ+nQATgbqYBRAVxU+4uQKPVb2OcLYsUfEK7npaQ81BYPVs YHi+QZvWw3w380TxOg+IzsznLqZ7i07i1MofAwB+5QVoE6i70SMhtjgnhDe0o/Rb aS9R1wCLbF2U9IId3WW8podg5H4Nn//EkAO4GeFKjxeu7NOIAomkSaQkmj3uvs7b haZEm+w7cEhml+6oAhJFki1dJMLPkk2tpcwejJ2t6MIndVhrs6WAQFbRR0dXAOmx viD0jgUGpGbQMsk8zEP/i4Qoqw== -----END CERTIFICATE-----Generated at Thu Apr 30 16:02:00 2026 by rpki-client