$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: UDa+BrD2Uv3LshizH9mMwkMfu1bZA6NoqTTKrXbQs6w= Subject key identifier: C8:59:02:35:54:DE:DA:AA:5B:22:BA:9B:B9:A0:94:E7:51:35:23:33 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 0125 Signing time: Sun 05 Apr 2026 05:22:23 +0000 Manifest this update: Sun 05 Apr 2026 05:22:22 +0000 Manifest next update: Sun 12 Apr 2026 05:22:22 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: JiOmTNGOC2iWKsYfJ6ySUJsBrEePLmxEXT53g7RvUdI=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) 3: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: cuURsbxNvtOqTd1FnCF2I2C85rcA4nGp1HY8p4P3GjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Apr 5 05:22:22 2026 GMT Not After : Apr 12 05:22:22 2026 GMT Subject: CN=69d1f18f-0cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:91:bc:68:bb:b2:e6:a3:f3:e9:90:ef:0e: 90:82:c8:07:c5:90:7a:97:c1:eb:be:48:e2:5b:32: 02:2e:5a:96:e9:1a:88:b2:03:37:21:30:8b:b9:e0: f1:6a:4e:7a:2d:8e:8a:ad:d6:a6:a5:99:46:87:a3: e3:d7:bd:64:5b:ba:f4:3e:3d:ca:b2:5c:ef:0f:e8: 32:cb:32:67:15:fe:ca:8d:18:52:28:91:99:d3:f4: 46:4f:29:a8:b3:5e:10:a4:85:c9:77:8a:b9:b8:27: a1:94:d6:4b:e8:60:2a:73:67:87:56:1a:7b:db:3d: 3e:bd:c6:6f:ca:53:92:3a:5d:0d:86:82:db:41:49: d0:15:17:44:1c:98:87:c6:5d:b0:47:68:58:15:d9: d0:d2:06:8f:cd:3b:8d:86:c5:10:fa:8d:b8:ee:92: 58:fe:6e:7c:81:74:d7:28:5e:32:a0:d0:2e:f4:e2: e0:94:c5:f3:79:16:94:8f:bc:d0:f3:52:5f:58:77: 26:b5:1e:53:c6:76:6f:a8:89:b7:2b:a4:21:02:c4: 97:e7:34:a1:9b:25:79:37:64:ac:a1:97:e5:2d:ad: ae:9b:14:eb:79:67:26:85:90:bc:ae:d4:ba:b8:79: 97:14:e6:87:75:23:4c:d9:5f:bf:cc:8c:3c:e2:81: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:59:02:35:54:DE:DA:AA:5B:22:BA:9B:B9:A0:94:E7:51:35:23:33 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e5:89:72:d6:59:98:60:f6:d2:95:1f:5e:47:d2:a7:4a:7e: 3e:b9:1c:1c:06:f9:f0:88:25:26:6d:b3:48:92:27:8d:a4:d9: 2f:75:b2:bc:8b:98:4e:56:49:af:28:e2:80:df:4f:29:c5:c5: 33:c0:7c:27:48:00:e7:d0:0a:59:14:65:a5:c6:82:72:74:24: 00:6d:f0:33:cf:9b:46:52:f4:e7:6e:0b:41:93:54:1b:f4:c5: 5c:4a:44:0c:b5:86:c5:4a:97:0c:f9:60:43:be:d2:df:d2:b9: 25:39:46:9e:6c:b8:2d:b2:ba:f5:99:0d:07:8c:11:6b:de:32: cf:67:d0:87:24:c9:88:19:2e:06:95:b1:bf:15:16:96:05:c2: fc:6e:6b:90:2c:ec:b9:91:ef:2a:3c:40:fd:f6:82:0d:42:83: 37:4c:2f:82:ab:21:ba:43:4b:c3:ad:ab:2d:d2:a7:15:60:6b: c5:11:eb:cf:d0:b7:7d:ea:d0:ca:36:38:e7:d2:c3:aa:37:49: 7d:fc:37:3f:57:c2:4c:24:fa:d8:e3:57:94:fe:a1:20:d7:e2: 8e:2b:39:86:10:5a:d4:cf:65:3f:c2:b5:d6:1a:84:58:e2:a6: 57:e9:52:ef:96:e2:a5:fa:a9:2c:16:78:87:c4:44:4b:d9:42: a3:c9:59:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYwNDA1MDUyMjIyWhcNMjYwNDEyMDUyMjIyWjAYMRYwFAYD VQQDEw02OWQxZjE4Zi0wY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQiRvGi7suaj8+mQ7w6QgsgHxZB6l8HrvkjiWzICLlqW6RqIsgM3ITCLueDx ak56LY6KrdampZlGh6Pj171kW7r0Pj3KslzvD+gyyzJnFf7KjRhSKJGZ0/RGTymo s14QpIXJd4q5uCehlNZL6GAqc2eHVhp72z0+vcZvylOSOl0NhoLbQUnQFRdEHJiH xl2wR2hYFdnQ0gaPzTuNhsUQ+o247pJY/m58gXTXKF4yoNAu9OLglMXzeRaUj7zQ 81JfWHcmtR5TxnZvqIm3K6QhAsSX5zShmyV5N2SsoZflLa2umxTreWcmhZC8rtS6 uHmXFOaHdSNM2V+/zIw84oEBvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhZAjVU 3tqqWyK6m7mglOdRNSMzMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABuWJctZZmGD20pUfXkfSp0p+PrkcHAb58IglJm2zSJInjaTZL3WyvIuYTlZJ ryjigN9PKcXFM8B8J0gA59AKWRRlpcaCcnQkAG3wM8+bRlL0524LQZNUG/TFXEpE DLWGxUqXDPlgQ77S39K5JTlGnmy4LbK69ZkNB4wRa94yz2fQhyTJiBkuBpWxvxUW lgXC/G5rkCzsuZHvKjxA/faCDUKDN0wvgqshukNLw62rLdKnFWBrxRHrz9C3ferQ yjY459LDqjdJffw3P1fCTCT62ONXlP6hINfijis5hhBa1M9lP8K11hqEWOKmV+lS 75bipfqpLBZ4h8RES9lCo8lZAA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:22 2026 by rpki-client