$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: LTknycC7GyNRQCyytvvu6sj5gmrDMdEyTsbAe8M3tjM= Subject key identifier: 43:01:46:A0:86:27:EB:F0:67:E8:BF:61:18:DD:D8:EC:10:53:28:F3 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2535 Signing time: Mon 20 Apr 2026 15:43:08 +0000 Manifest this update: Mon 20 Apr 2026 15:43:08 +0000 Manifest next update: Mon 27 Apr 2026 15:43:08 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 0WKhxstY3CJFtza9E63tKZSIjvtgwTSwRUiMOoWP3no=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 15:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9557 (0x2555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Apr 20 15:43:08 2026 GMT Not After : Apr 27 15:43:08 2026 GMT Subject: CN=69e6498c-6868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:30:16:ae:b6:e0:e0:06:68:df:92:3e:29: 16:c7:91:96:1d:13:44:1d:51:50:cc:80:02:fa:00: 62:6d:08:46:0c:95:00:e5:04:8d:e9:85:a6:cb:28: 32:f8:e9:9c:77:3c:b1:0c:16:d0:3e:15:11:41:66: 82:f4:84:07:57:f1:07:6d:5a:13:c3:90:bc:20:79: c9:30:9b:f5:db:a9:85:b7:cd:a7:b7:da:77:9f:f4: 2a:62:81:88:45:26:6b:37:cd:e7:cd:e5:b5:25:60: 53:a3:14:e4:e5:c7:70:9c:ae:13:60:58:62:c2:67: 62:cb:77:34:2d:e6:76:0a:bb:73:33:ba:11:91:87: 88:2e:be:ee:d3:0b:2c:48:e1:f0:92:a4:16:19:ab: 03:01:f4:e2:56:a0:bc:51:21:37:d8:11:0f:32:ad: 40:86:0b:a2:8a:93:0b:a2:e6:7b:28:a0:ca:23:f4: b0:96:64:cb:0c:aa:52:de:36:21:85:37:51:ae:00: da:c6:f0:c6:12:e8:b7:cb:36:ea:28:bd:31:61:ed: 81:1b:51:1f:22:b2:a5:43:f0:32:49:92:a9:21:cb: 8d:01:3c:3a:00:56:5e:3d:26:3d:c0:98:21:ce:7a: 4a:38:98:fc:44:aa:f1:43:0f:6d:eb:99:e6:e3:13: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:01:46:A0:86:27:EB:F0:67:E8:BF:61:18:DD:D8:EC:10:53:28:F3 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:43:a7:90:b0:6a:53:f7:f9:06:68:8e:6a:40:45:76:26:3c: 4e:43:a5:6b:d7:71:d4:22:ae:f7:d1:1a:05:08:13:7d:ed:73: a0:4a:27:d3:70:b6:66:ba:2c:da:e3:86:3d:1d:66:cb:12:98: 91:4f:72:aa:9a:fb:d9:4e:7a:9e:b1:8e:38:84:42:d9:6f:b2: ba:ed:ba:3b:ab:d7:9b:76:94:7a:c0:82:ce:4c:3e:5b:a8:b9: ab:ed:38:06:b3:e5:a6:0d:3c:bc:1f:95:05:c8:19:4d:e3:af: 9a:bf:fa:59:ed:81:ba:ed:43:47:9f:83:62:9d:48:8d:0b:ad: 21:cc:d5:61:7d:0f:e8:1e:70:c5:aa:4d:98:33:f7:7d:33:d7: ef:67:bd:2a:7a:10:21:a1:0c:68:b9:f2:cc:de:7f:17:42:c1: cb:9c:2b:ce:e0:60:b1:dc:6a:05:94:15:f8:24:7c:80:10:cf: c9:7b:ca:c3:1e:03:e6:1e:2a:a2:a5:74:61:50:4e:6e:82:42: 25:81:80:7f:56:38:ce:06:24:04:58:3a:17:b3:dd:fd:b5:a6: f1:53:56:6a:1c:10:16:f7:5f:a4:21:61:83:46:2d:0e:06:c9: 42:c1:2f:98:9b:a3:26:b1:dc:0b:b5:41:38:91:97:0d:35:a1: 6a:ba:cb:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNDIwMTU0MzA4WhcNMjYwNDI3MTU0MzA4WjAYMRYwFAYD VQQDEw02OWU2NDk4Yy02ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAgwFq624OAGaN+SPikWx5GWHRNEHVFQzIAC+gBibQhGDJUA5QSN6YWmyygy +OmcdzyxDBbQPhURQWaC9IQHV/EHbVoTw5C8IHnJMJv126mFt82nt9p3n/QqYoGI RSZrN83nzeW1JWBToxTk5cdwnK4TYFhiwmdiy3c0LeZ2CrtzM7oRkYeILr7u0wss SOHwkqQWGasDAfTiVqC8USE32BEPMq1AhguiipMLouZ7KKDKI/SwlmTLDKpS3jYh hTdRrgDaxvDGEui3yzbqKL0xYe2BG1EfIrKlQ/AySZKpIcuNATw6AFZePSY9wJgh znpKOJj8RKrxQw9t65nm4xNk8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMBRqCG J+vwZ+i/YRjd2OwQUyjzMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMUOnkLBqU/f5BmiOakBFdiY8TkOla9dx1CKu99EaBQgTfe1zoEon03C2Zros 2uOGPR1myxKYkU9yqpr72U56nrGOOIRC2W+yuu26O6vXm3aUesCCzkw+W6i5q+04 BrPlpg08vB+VBcgZTeOvmr/6We2Buu1DR5+DYp1IjQutIczVYX0P6B5wxapNmDP3 fTPX72e9KnoQIaEMaLnyzN5/F0LBy5wrzuBgsdxqBZQV+CR8gBDPyXvKwx4D5h4q oqV0YVBOboJCJYGAf1Y4zgYkBFg6F7Pd/bWm8VNWahwQFvdfpCFhg0YtDgbJQsEv mJujJrHcC7VBOJGXDTWharrLzg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:10:40 2026 by rpki-client