$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: hg+Kn8eGfFk7nJzY1SXLsNMhxGvUxy0Gp4maeiirTNE= Subject key identifier: F1:2F:54:A1:72:86:50:3A:42:CD:C2:B3:05:BC:6C:DC:1C:D3:E8:46 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 86 Signing time: Fri 17 Apr 2026 07:23:43 +0000 Manifest this update: Fri 17 Apr 2026 07:23:43 +0000 Manifest next update: Fri 24 Apr 2026 07:23:43 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: lZwEmg5RQkWmqBv13BrTR0XwhBO9kfPp0H6zCTwExJg=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: BQkbdtjI99mxWqdYu14uU0wWLwTO/VUnPRItrckeDrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Apr 17 07:23:43 2026 GMT Not After : Apr 24 07:23:43 2026 GMT Subject: CN=69e1dfff-c448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:a7:fc:7a:17:67:c0:98:ae:51:68:6e:d4: 74:1d:e8:59:6c:26:c9:50:e2:5c:34:46:10:70:a9: 73:7b:e7:62:10:ba:4d:26:5a:38:6b:47:19:c6:0a: 11:7f:37:d9:f0:fb:bb:e8:1f:ba:89:d5:9d:f5:0a: a7:bf:f2:04:bc:7b:00:3a:0b:79:15:2b:cb:79:11: e5:b5:9f:c6:17:15:af:d2:31:5f:d8:15:dc:4a:2e: 52:52:b4:2a:f9:45:89:9b:4e:da:9e:32:1a:b4:e8: 79:72:57:cc:1d:5d:c5:87:a0:f8:91:2b:f2:40:37: 15:a9:dd:9f:73:29:4b:b2:d2:e4:e9:9b:e2:9e:f6: a5:a2:7f:4e:65:4a:72:9a:c4:11:1f:7e:fd:49:17: b7:30:3f:cf:3d:7d:93:55:ed:6f:54:7e:26:47:62: 6e:27:12:f2:10:25:20:a6:39:d9:6e:54:4b:18:dc: 88:d5:38:8a:4a:ad:a4:5a:55:c8:77:12:71:13:c5: de:b8:d3:c2:ce:a9:20:ad:93:84:d9:6e:e0:73:e1: fa:14:58:f4:a1:bf:66:22:5f:a6:e8:32:a2:e0:98: 25:fe:64:dc:7e:a7:91:8b:5e:8d:0f:e3:2f:21:46: 43:76:ef:b0:46:5c:f7:e7:84:1b:8e:d9:42:75:71: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2F:54:A1:72:86:50:3A:42:CD:C2:B3:05:BC:6C:DC:1C:D3:E8:46 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3a:c2:2c:e8:35:89:7f:a1:a7:23:19:9a:ba:e5:1d:be:e6: 8a:03:9d:4c:e6:c8:f8:f6:97:33:6c:f0:a6:fe:21:d0:9e:5d: 51:39:43:e3:92:89:07:db:35:66:ae:75:77:78:9f:9b:13:bf: 6e:b8:d9:ff:8c:62:f1:9b:c3:e7:df:32:70:e6:1d:f4:52:39: 82:90:d6:df:ac:08:12:b5:f7:a2:96:90:88:ff:d9:a8:20:3f: 92:d3:02:70:3c:6c:03:52:cd:2f:12:89:34:54:ab:20:67:8c: 28:4a:68:5d:d9:ed:34:32:30:d3:46:58:9f:96:8c:9c:44:19: 2f:b3:b2:ae:cc:ce:e7:b5:67:b8:85:13:f1:d0:a7:93:1e:00: 3f:a2:4b:fb:c9:6c:53:9c:f3:31:7c:a9:58:15:88:7c:8a:83: 1a:e4:26:73:6e:64:cf:61:fd:14:f3:dd:fb:8c:93:c1:92:3f: 77:1c:f4:7f:fc:4e:7f:89:18:d9:4c:d9:a0:fe:5a:cb:53:c9: 1e:75:0b:4b:b2:b2:b9:d2:5b:f0:ba:b1:ba:a4:3a:e8:06:5c: eb:dd:c4:b4:0a:9e:bf:7f:aa:8c:20:4a:48:10:1a:e2:71:6e: 3f:f1:66:3a:bd:8b:b3:5b:ed:52:f7:a8:f4:93:ea:d3:6b:b8: 7b:6a:4a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC NDhGQTJFMjEwHhcNMjYwNDE3MDcyMzQzWhcNMjYwNDI0MDcyMzQzWjAYMRYwFAYD VQQDEw02OWUxZGZmZi1jNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT+n/HoXZ8CYrlFobtR0HehZbCbJUOJcNEYQcKlze+diELpNJlo4a0cZxgoR fzfZ8Pu76B+6idWd9Qqnv/IEvHsAOgt5FSvLeRHltZ/GFxWv0jFf2BXcSi5SUrQq +UWJm07anjIatOh5clfMHV3Fh6D4kSvyQDcVqd2fcylLstLk6Zvinvalon9OZUpy msQRH379SRe3MD/PPX2TVe1vVH4mR2JuJxLyECUgpjnZblRLGNyI1TiKSq2kWlXI dxJxE8XeuNPCzqkgrZOE2W7gc+H6FFj0ob9mIl+m6DKi4Jgl/mTcfqeRi16ND+Mv IUZDdu+wRlz354QbjtlCdXE+fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEvVKFy hlA6Qs3CswW8bNwc0+hGMB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5 Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjrCLOg1iX+hpyMZmrrlHb7migOdTObI+PaXM2zwpv4h0J5dUTlD45KJB9s1 Zq51d3ifmxO/brjZ/4xi8ZvD598ycOYd9FI5gpDW36wIErX3opaQiP/ZqCA/ktMC cDxsA1LNLxKJNFSrIGeMKEpoXdntNDIw00ZYn5aMnEQZL7OyrszO57VnuIUT8dCn kx4AP6JL+8lsU5zzMXypWBWIfIqDGuQmc25kz2H9FPPd+4yTwZI/dxz0f/xOf4kY 2UzZoP5ay1PJHnULS7KyudJb8LqxuqQ66AZc693EtAqev3+qjCBKSBAa4nFuP/Fm Or2Ls1vtUveo9JPq02u4e2pKvg== -----END CERTIFICATE-----Generated at Sat Apr 18 22:24:20 2026 by rpki-client