$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: tGyPJCCe0yeGE8T9J5gS47mietlwMshJjTzVbP4Tcag= Subject key identifier: 23:A5:CB:62:4D:76:22:89:87:E6:95:25:84:08:33:7B:78:41:11:5D Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 097E Signing time: Sat 04 Apr 2026 19:51:25 +0000 Manifest this update: Sat 04 Apr 2026 19:51:24 +0000 Manifest next update: Sat 11 Apr 2026 19:51:24 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: cHKuM/Ci58/SU/vUGET+ln/toQaeocvEv/N90pKxY6Q=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Apr 4 19:51:24 2026 GMT Not After : Apr 11 19:51:24 2026 GMT Subject: CN=69d16bbd-e1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:c1:1c:49:6f:de:f0:19:de:00:4c:14:ac: b5:f8:1d:ee:d5:84:bb:d5:e6:65:72:dd:ac:0c:45: 04:87:e0:ef:90:66:16:e8:31:3a:a8:00:dc:33:ef: ff:49:56:22:2c:b2:3c:78:a2:26:b5:30:82:c2:99: bd:62:7b:6d:89:8a:ff:3b:73:21:91:ee:0a:6e:b4: fe:0f:9a:b1:7e:6f:29:1a:98:cc:5e:b5:60:e9:c1: 18:f4:15:ba:9c:b3:c5:71:3f:63:5b:05:2f:c0:28: 3a:36:c3:2d:77:a1:fa:01:9a:7d:57:ae:23:46:a4: 6c:4c:b9:04:80:fd:db:d5:46:b0:1b:f4:32:1c:76: 78:d3:54:a4:cd:0f:d3:dc:c8:36:f1:7a:cc:31:ae: 2c:b7:15:2d:18:9b:4a:cf:77:e4:43:ed:9a:05:72: a0:14:bc:4f:3d:f0:2c:92:bd:50:9a:89:1b:d9:90: 21:2a:56:54:43:59:57:d4:46:b2:0f:5c:f7:93:88: c7:2b:63:fe:88:93:72:e6:81:4a:fe:ad:0b:0b:01: ef:bc:9e:26:2e:80:be:cb:68:d6:3f:ea:e1:2f:2a: b9:16:45:fe:eb:77:0a:55:a2:5f:b5:fb:22:88:69: 19:70:2a:ae:51:cf:c7:31:93:f2:1b:af:f3:f5:b0: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A5:CB:62:4D:76:22:89:87:E6:95:25:84:08:33:7B:78:41:11:5D X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:36:0c:e0:56:5f:15:c7:fa:46:bb:a5:e9:b9:cb:e7:28: 31:d6:9f:73:53:9c:59:e1:68:27:cb:48:77:f9:2b:30:e2:17: 66:f2:bc:4b:9d:88:68:57:86:78:7f:20:0c:be:0b:e8:cb:1f: 36:d1:94:f4:b7:b5:de:e9:ca:66:c6:a0:61:1f:81:e1:3b:af: 83:6a:b3:1c:67:98:b6:2a:9f:89:aa:57:c5:58:e9:43:eb:66: ca:c3:96:5d:ce:66:82:fa:d2:3f:31:69:44:2d:0c:ab:97:a8: af:66:4d:cb:cb:ba:85:d1:98:33:af:e1:c7:ef:22:67:fd:87: c3:61:7c:0d:86:2b:87:61:4f:98:88:aa:05:9b:37:da:1c:a8: 3a:0e:12:93:93:2d:fe:18:96:2f:ca:f6:d4:ab:19:90:2d:f4: 8e:7a:08:e9:b0:b3:b4:08:f2:3d:9c:32:0f:a8:1f:04:c3:19: 55:23:20:d9:16:c3:64:d5:37:d6:42:7e:0d:04:c5:fd:9f:59: d3:1e:0f:fd:d1:9b:23:1e:58:f6:7f:69:b8:63:be:9a:ce:76: b5:7e:20:c8:26:75:70:17:56:d5:77:74:73:de:c0:d3:da:7e: 5d:81:ec:dc:9e:8e:17:3f:97:86:a9:96:f9:34:b9:fb:ca:c5: e0:ef:5b:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwNDA0MTk1MTI0WhcNMjYwNDExMTk1MTI0WjAYMRYwFAYD VQQDEw02OWQxNmJiZC1lMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX3BHElv3vAZ3gBMFKy1+B3u1YS71eZlct2sDEUEh+DvkGYW6DE6qADcM+// SVYiLLI8eKImtTCCwpm9YnttiYr/O3Mhke4KbrT+D5qxfm8pGpjMXrVg6cEY9BW6 nLPFcT9jWwUvwCg6NsMtd6H6AZp9V64jRqRsTLkEgP3b1UawG/QyHHZ401SkzQ/T 3Mg28XrMMa4stxUtGJtKz3fkQ+2aBXKgFLxPPfAskr1Qmokb2ZAhKlZUQ1lX1Eay D1z3k4jHK2P+iJNy5oFK/q0LCwHvvJ4mLoC+y2jWP+rhLyq5FkX+63cKVaJftfsi iGkZcCquUc/HMZPyG6/z9bCY6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOly2JN diKJh+aVJYQIM3t4QRFdMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHq02DOBWXxXH+ka7pem5y+coMdafc1OcWeFoJ8tId/krMOIXZvK8S52IaFeG eH8gDL4L6MsfNtGU9Le13unKZsagYR+B4Tuvg2qzHGeYtiqfiapXxVjpQ+tmysOW Xc5mgvrSPzFpRC0Mq5eor2ZNy8u6hdGYM6/hx+8iZ/2Hw2F8DYYrh2FPmIiqBZs3 2hyoOg4Sk5Mt/hiWL8r21KsZkC30jnoI6bCztAjyPZwyD6gfBMMZVSMg2RbDZNU3 1kJ+DQTF/Z9Z0x4P/dGbIx5Y9n9puGO+ms52tX4gyCZ1cBdW1Xd0c97A09p+XYHs 3J6OFz+XhqmW+TS5+8rF4O9bzQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:43 2026 by rpki-client