$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: PRmRd2kuuovMFEDxJRkBqWnUgV3u1k56VHy+unHw1dE= Subject key identifier: 06:7E:A4:A5:9D:0C:32:98:12:C9:C2:31:71:B5:97:C0:D9:54:03:D6 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 0128 Signing time: Mon 27 Apr 2026 05:32:47 +0000 Manifest this update: Mon 27 Apr 2026 05:32:47 +0000 Manifest next update: Mon 04 May 2026 05:32:47 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: MTNFVEqZEFj8QnH7PuAp+tMonH4CS4igGLhFmf62AZk=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 05:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Apr 27 05:32:47 2026 GMT Not After : May 4 05:32:47 2026 GMT Subject: CN=69eef4ff-d362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:93:27:5a:a0:4c:0a:3e:a3:75:3b:c5:85: 93:6e:1d:b5:19:7a:0b:14:93:6c:ea:f3:c2:1f:5b: 26:4c:69:63:06:07:17:38:01:04:87:20:9a:c7:f9: a3:60:cd:9f:ad:1b:ff:31:d1:1b:0c:e6:09:5b:42: f6:c4:b6:2e:9b:9a:3e:2b:91:21:6d:f4:dc:b4:29: c0:21:64:3a:67:ae:bf:cf:96:8e:09:da:e5:1f:b7: f3:5e:e4:da:a2:cf:28:65:6c:48:f8:b0:2c:32:8b: a6:07:2a:69:b1:dd:6d:2b:c0:99:52:f5:65:86:19: 19:ae:6f:b5:2f:61:fa:d3:a2:b5:49:1c:8c:20:73: f0:c9:0d:74:e5:70:dd:fc:8a:57:01:2f:a0:72:b7: 26:0f:11:07:c0:91:91:46:6e:5b:e9:21:cc:16:70: e1:26:c2:54:88:5b:b6:c1:48:22:9b:c2:13:30:b3: d9:2e:ec:55:3c:46:30:3f:ba:eb:3e:a4:07:f1:e3: ba:99:25:49:24:52:81:f8:e4:14:bb:d1:e2:e3:6a: 86:38:d1:f9:32:21:39:50:3e:7a:f0:88:a0:6c:1b: d3:05:fa:5b:ba:fc:b7:1b:76:00:83:cb:6c:9d:a0: ed:51:02:ae:ea:8a:ef:71:d2:f5:87:00:4d:07:05: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7E:A4:A5:9D:0C:32:98:12:C9:C2:31:71:B5:97:C0:D9:54:03:D6 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3f:10:32:7a:b3:94:61:3a:c8:91:fa:7c:84:67:b6:c1:7d: 70:2b:b5:66:d7:14:00:0d:e0:0d:0a:4c:06:7e:5e:4c:77:69: 5d:6f:cc:f3:94:fb:0e:16:d0:18:59:04:e7:a1:0a:cb:3e:48: 1f:24:11:0d:05:5f:f4:ff:b8:ad:48:b5:be:e2:c1:45:52:26: 04:33:2d:83:22:24:de:5c:96:58:f1:7c:77:02:19:03:f9:60: 23:ce:2c:47:fe:c2:73:a9:7e:47:09:73:ef:a4:b3:15:7f:28: 90:5f:af:e7:49:ba:a0:74:d5:15:61:33:b6:22:25:34:d3:9f: b7:25:72:aa:f9:f5:d4:88:ed:8c:b7:77:a1:22:36:70:60:89: 43:cd:21:1f:32:e3:69:71:b1:de:74:3c:4e:e5:87:d4:a4:be: 5b:b2:ad:a0:21:92:e9:10:98:ff:20:18:80:cb:16:c5:38:fc: 97:68:60:6c:9f:32:76:34:68:e4:cf:e0:a2:59:43:eb:56:5e: 08:2f:11:10:f3:e2:a2:5f:1a:e8:e9:bc:89:60:af:1b:af:ae: df:c1:f2:39:de:03:b6:85:55:fd:47:ca:0f:2f:9a:65:59:ef: 2b:b6:8d:b8:86:71:2f:5c:21:84:47:52:94:b0:bf:66:8a:a3: 34:bf:b3:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjYwNDI3MDUzMjQ3WhcNMjYwNTA0MDUzMjQ3WjAYMRYwFAYD VQQDEw02OWVlZjRmZi1kMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KGTJ1qgTAo+o3U7xYWTbh21GXoLFJNs6vPCH1smTGljBgcXOAEEhyCax/mj YM2frRv/MdEbDOYJW0L2xLYum5o+K5EhbfTctCnAIWQ6Z66/z5aOCdrlH7fzXuTa os8oZWxI+LAsMoumByppsd1tK8CZUvVlhhkZrm+1L2H606K1SRyMIHPwyQ105XDd /IpXAS+gcrcmDxEHwJGRRm5b6SHMFnDhJsJUiFu2wUgim8ITMLPZLuxVPEYwP7rr PqQH8eO6mSVJJFKB+OQUu9Hi42qGONH5MiE5UD568IigbBvTBfpbuvy3G3YAg8ts naDtUQKu6orvcdL1hwBNBwUDbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ+pKWd DDKYEsnCMXG1l8DZVAPWMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhD8QMnqzlGE6yJH6fIRntsF9cCu1ZtcUAA3gDQpMBn5eTHdpXW/M85T7DhbQ GFkE56EKyz5IHyQRDQVf9P+4rUi1vuLBRVImBDMtgyIk3lyWWPF8dwIZA/lgI84s R/7Cc6l+Rwlz76SzFX8okF+v50m6oHTVFWEztiIlNNOftyVyqvn11IjtjLd3oSI2 cGCJQ80hHzLjaXGx3nQ8TuWH1KS+W7KtoCGS6RCY/yAYgMsWxTj8l2hgbJ8ydjRo 5M/gollD61ZeCC8REPPiol8a6Om8iWCvG6+u38HyOd4DtoVV/UfKDy+aZVnvK7aN uIZxL1whhEdSlLC/ZoqjNL+zwg== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:43 2026 by rpki-client