$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: y7DuDO+/pKBevxqnlmVKJz0HYEsz/CNAnlN4nZSEq28= Subject key identifier: CE:9D:3C:00:C0:32:E9:63:7D:03:83:95:6E:0A:01:01:2A:77:75:D2 Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 86 Signing time: Sun 05 Apr 2026 07:00:46 +0000 Manifest this update: Sun 05 Apr 2026 07:00:46 +0000 Manifest next update: Sun 12 Apr 2026 07:00:46 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: /+K6bKvJCKhl+rQv53hGwNrybChKWoXOE8PCIBSV1gI=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: M6rkGSeZPUm0wxx29VHDM0R87EJ/m/X/nduKyOdgs7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: Apr 5 07:00:46 2026 GMT Not After : Apr 12 07:00:46 2026 GMT Subject: CN=69d2089e-06cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:fa:69:10:43:10:e2:de:ed:26:0a:61:3e: 48:4e:01:98:e0:66:a9:ea:38:aa:43:97:b8:7b:d5: fa:d6:8f:b8:27:cd:fb:d3:07:e1:10:e4:af:73:9f: 28:a0:40:fe:53:71:ee:1a:c9:38:a7:55:af:ee:db: 9a:b9:0b:97:25:2f:69:b5:60:76:f5:d7:ec:ef:e5: 05:a0:81:0e:f3:e0:b1:ec:db:14:45:a8:85:4c:b5: c2:d5:e5:17:67:26:68:21:5e:92:85:f1:8a:1f:ff: a2:0e:5d:5c:b2:04:ae:79:55:1e:33:7d:6e:35:0a: a4:b0:84:ca:84:e3:f8:75:ee:7a:b2:0c:bf:18:c7: 8d:67:53:d0:56:4d:60:cb:be:25:4a:fa:67:c1:5a: 45:2c:20:cc:b2:57:19:68:8e:a9:de:67:b5:0f:52: ea:5c:3a:a2:2e:a7:b6:13:f8:d3:dc:10:a6:83:55: be:c7:9d:3e:89:9d:e4:97:33:6f:1f:8f:ed:9b:e1: 50:e8:f1:4b:b9:71:f3:b0:63:f1:70:4c:65:2a:ed: 36:47:f6:c9:89:f2:be:66:b7:30:0a:98:1e:bf:cf: fa:7a:08:f6:85:a4:ee:92:42:ec:f3:41:b2:06:07: 7d:9b:c5:ff:8c:e5:ec:c8:fc:07:88:fc:7a:bc:a9: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:3C:00:C0:32:E9:63:7D:03:83:95:6E:0A:01:01:2A:77:75:D2 X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:64:5e:e0:e8:d2:3f:17:8f:1f:d3:03:aa:b7:f3:d3:e3:de: 9b:ce:2e:96:2a:fe:01:84:c1:73:76:1f:a5:b5:9d:1a:75:24: ee:f5:aa:1c:a1:70:4e:64:de:4c:f7:e6:00:a7:bb:f4:e2:e4: 6d:3d:36:e8:27:fc:ae:cd:8c:74:f7:ac:5e:6d:9c:53:b6:42: 9e:04:66:f4:37:d4:d5:5b:45:0b:33:a0:0b:5e:2b:6a:14:08: 3c:c0:91:a5:b2:e7:77:3d:a2:18:72:92:a7:6d:fa:14:53:f8: b1:58:07:f7:23:cc:52:b4:7b:f8:b9:33:31:e0:4f:6f:93:5c: c1:26:34:7f:7d:71:4d:a9:d8:75:40:76:6f:9f:2d:c5:e3:2a: 7e:5f:38:74:05:4e:9e:10:53:75:1c:99:c0:6f:50:28:24:7c: f4:2a:61:26:81:2f:5e:83:eb:ea:b6:fa:5a:c1:85:55:be:6d: 68:d8:24:49:be:8f:e0:77:3f:dc:95:a2:ce:56:1c:97:88:64: 97:d5:3f:77:c2:f5:94:f2:71:9f:b7:45:c3:cc:cf:99:06:54: 98:17:bf:e8:09:71:f1:e2:2c:13:dc:91:ab:b8:2c:2a:7e:7d: 2e:86:1e:ef:97:63:fe:ea:07:27:4d:8d:78:da:d2:f9:e3:11: f4:b0:ea:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFRDUxMTAvBgNVBAUTKDY2NzgxNzlBNURBOEU1RTkxRTdEOURERkM5RkY1QjM1 NDNFRDRENzQwHhcNMjYwNDA1MDcwMDQ2WhcNMjYwNDEyMDcwMDQ2WjAYMRYwFAYD VQQDEw02OWQyMDg5ZS0wNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdT6aRBDEOLe7SYKYT5ITgGY4Gap6jiqQ5e4e9X61o+4J8370wfhEOSvc58o oED+U3HuGsk4p1Wv7tuauQuXJS9ptWB29dfs7+UFoIEO8+Cx7NsURaiFTLXC1eUX ZyZoIV6ShfGKH/+iDl1csgSueVUeM31uNQqksITKhOP4de56sgy/GMeNZ1PQVk1g y74lSvpnwVpFLCDMslcZaI6p3me1D1LqXDqiLqe2E/jT3BCmg1W+x50+iZ3klzNv H4/tm+FQ6PFLuXHzsGPxcExlKu02R/bJifK+ZrcwCpgev8/6egj2haTukkLs80Gy Bgd9m8X/jOXsyPwHiPx6vKlRYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6dPADA MuljfQODlW4KAQEqd3XSMB8GA1UdIwQYMBaAFGZ4F5pdqOXpHn2d38n/WzVD7U10 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUVENS9BRkE0NjQ2NDY3 MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVla2VmWjNmeWY5Yk5VUHRU WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUVENS9BRkE0NjQ2NDY3MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVl a2VmWjNmeWY5Yk5VUHRUWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdGRe4OjSPxePH9MDqrfz0+Pem84ulir+AYTBc3YfpbWdGnUk7vWqHKFwTmTe TPfmAKe79OLkbT026Cf8rs2MdPesXm2cU7ZCngRm9DfU1VtFCzOgC14rahQIPMCR pbLndz2iGHKSp236FFP4sVgH9yPMUrR7+LkzMeBPb5NcwSY0f31xTanYdUB2b58t xeMqfl84dAVOnhBTdRyZwG9QKCR89CphJoEvXoPr6rb6WsGFVb5taNgkSb6P4Hc/ 3JWizlYcl4hkl9U/d8L1lPJxn7dFw8zPmQZUmBe/6Alx8eIsE9yRq7gsKn59LoYe 75dj/uoHJ02NeNrS+eMR9LDq2w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:37:54 2026 by rpki-client