$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: xt4Z59Juy4MKBtyJ5j1fbHr2QpnRxP3pQIz8YAMjixU= Subject key identifier: 1F:CD:FE:52:C0:DC:B6:C2:0C:80:E2:A6:4C:B9:71:56:94:C7:E3:AB Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 097F Signing time: Sat 04 Apr 2026 20:02:44 +0000 Manifest this update: Sat 04 Apr 2026 20:02:44 +0000 Manifest next update: Sat 11 Apr 2026 20:02:44 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: paQDEiC4+e88azegfiiuxCt/IhNBO3xh1MLT8LMC4Aw=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Apr 4 20:02:44 2026 GMT Not After : Apr 11 20:02:44 2026 GMT Subject: CN=69d16e64-ca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:66:1e:d4:93:8d:0f:c6:da:ae:f1:ab:81: 86:de:8b:34:91:2f:58:77:6d:ef:e0:71:d9:3f:34: 5d:16:d5:8f:d2:34:f9:87:45:c1:8b:7b:f6:f2:58: a4:63:e8:78:8b:d1:42:ab:57:3f:dd:1a:60:a0:5c: 33:6f:67:ab:af:88:0d:10:5e:42:ac:25:39:d7:56: f8:0b:17:bc:da:4f:e4:cf:c1:c6:bc:70:a8:2f:36: 59:be:a4:55:62:c8:ad:b6:ea:4f:65:a1:6b:e7:98: 59:6f:55:cf:83:7f:17:5a:23:52:dc:61:2d:60:41: 66:f4:a8:0c:40:fc:fc:04:d5:b3:c7:db:35:bf:ac: 1c:5e:74:25:54:58:13:f2:c0:16:61:1e:37:3e:d4: fc:82:a4:15:a2:9f:9f:aa:f0:4e:bd:23:67:86:34: 91:27:d0:ae:12:c9:7b:04:5b:6e:17:37:67:dd:a3: de:3e:35:bc:71:a9:ba:25:48:2d:dd:42:fc:aa:89: 47:40:a4:5d:6b:6b:89:54:66:1e:c2:03:87:70:1f: 53:d8:d6:ae:16:37:af:c0:60:a3:31:93:47:9a:58: 88:cb:c5:e6:aa:81:39:e3:4a:29:1f:02:d4:ec:ac: 76:f4:69:d1:04:47:ce:95:22:d0:02:3b:9b:58:24: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CD:FE:52:C0:DC:B6:C2:0C:80:E2:A6:4C:B9:71:56:94:C7:E3:AB X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:38:cb:64:56:69:a3:58:df:c3:be:64:c1:f8:a2:58:66:21: 2e:e5:eb:ac:8f:c6:e8:ba:25:a8:73:2c:12:db:50:23:56:03: b6:be:14:fc:ab:4f:d4:52:f6:22:ed:7b:23:39:54:3e:9a:36: ef:aa:71:b8:71:4b:9e:ae:b0:8a:dd:84:84:3a:3c:c7:56:2b: 6e:39:7d:43:d4:2d:c2:60:24:c7:e0:94:37:af:09:43:f7:ab: 45:5f:48:d5:90:d2:7b:6b:49:30:3c:a5:c5:27:ac:4e:f3:37: d9:ba:37:b9:a8:83:f6:34:c7:5c:b6:71:fc:02:be:46:48:4a: 57:cb:36:fd:ae:0d:01:11:3b:35:d8:34:0d:bb:39:12:f3:75: 16:d1:c5:35:d0:3d:08:53:a8:40:0f:8d:6e:09:3a:9a:0b:5f: 6d:f7:fc:e1:0a:85:42:95:a6:56:f7:d4:e9:f7:14:01:22:7d: 28:9b:54:60:40:23:04:ac:57:4f:af:7d:26:1c:9d:3d:c0:ed: 72:40:da:96:5b:ea:c9:81:b4:81:52:ee:ee:c7:dd:87:52:66: 65:01:4a:b7:51:15:ca:12:c1:1b:56:d2:41:7f:e4:3c:eb:9f: e3:fe:86:1b:ed:e9:b3:b4:73:57:e5:f0:9d:50:ab:3b:e7:ad: 3b:50:3a:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNjA0MDQyMDAyNDRaFw0yNjA0MTEyMDAyNDRaMBgxFjAUBgNV BAMTDTY5ZDE2ZTY0LWNhNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0UmYe1JOND8barvGrgYbeizSRL1h3be/gcdk/NF0W1Y/SNPmHRcGLe/byWKRj 6HiL0UKrVz/dGmCgXDNvZ6uviA0QXkKsJTnXVvgLF7zaT+TPwca8cKgvNlm+pFVi yK226k9loWvnmFlvVc+DfxdaI1LcYS1gQWb0qAxA/PwE1bPH2zW/rBxedCVUWBPy wBZhHjc+1PyCpBWin5+q8E69I2eGNJEn0K4SyXsEW24XN2fdo94+NbxxqbolSC3d QvyqiUdApF1ra4lUZh7CA4dwH1PY1q4WN6/AYKMxk0eaWIjLxeaqgTnjSikfAtTs rHb0adEER86VItACO5tYJGdVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH83+UsDc tsIMgOKmTLlxVpTH46swHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+OMtkVmmjWN/DvmTB+KJYZiEu5eusj8bouiWocywS21AjVgO2vhT8q0/UUvYi 7XsjOVQ+mjbvqnG4cUuerrCK3YSEOjzHVituOX1D1C3CYCTH4JQ3rwlD96tFX0jV kNJ7a0kwPKXFJ6xO8zfZuje5qIP2NMdctnH8Ar5GSEpXyzb9rg0BETs12DQNuzkS 83UW0cU10D0IU6hAD41uCTqaC19t9/zhCoVClaZW99Tp9xQBIn0om1RgQCMErFdP r30mHJ09wO1yQNqWW+rJgbSBUu7ux92HUmZlAUq3URXKEsEbVtJBf+Q865/j/oYb 7emztHNX5fCdUKs75607UDpo -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:30 2026 by rpki-client