$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft File: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json) Hash identifier: MFwHBh/X0YmtsifOEbIz0ENnx5uclROjnFfwNczq6qs= Subject key identifier: 8E:64:98:76:E3:68:DB:83:85:AD:9C:41:CB:BB:15:94:CC:F9:33:5F Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft Manifest number: 99 Signing time: Wed 13 May 2026 07:42:22 +0000 Manifest this update: Wed 13 May 2026 07:42:21 +0000 Manifest next update: Wed 20 May 2026 07:42:21 +0000 Files and hashes: 1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: SjASTvTTl+DkjTij49kZJPR7Onmf88PUpG9c9OuPbD0=) 2: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: sp3MAA+6GdhSt6kFlIphgRJHq15Fvj4xCYLoWlCB5KA=) 3: CB09977AFB0D11F08355CD12746F56BC.roa (hash: Y6DTASD2URCdLE3oTBxAyH1XxTWqmt689U3qro6bvnY=) 4: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Va/KecTHSqGqStSgmBLK50Bj4LC+kYguO3MOtGhkk90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E Validity Not Before: May 13 07:42:21 2026 GMT Not After : May 20 07:42:21 2026 GMT Subject: CN=6a042b5e-cc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:6f:95:6e:a2:10:26:7f:aa:b0:59:92:e2: f1:e9:b5:de:a7:4c:70:af:a4:55:ca:64:41:6d:ee: 0f:51:6d:2a:57:bd:f9:ff:9d:b9:90:94:c0:97:b5: d2:26:6a:14:f5:fc:8c:04:d6:07:74:dc:03:05:15: 0f:ab:27:5a:ca:7d:ed:2a:00:7d:14:24:e5:c3:36: 83:01:62:14:34:79:34:1a:88:26:53:78:9b:40:e5: b2:01:ce:1c:8b:1b:28:3f:49:14:c5:80:83:e2:0f: ae:13:03:7e:27:68:3a:40:fc:58:88:94:c8:d4:09: 3d:6d:07:da:45:b8:8f:c0:b7:21:89:45:27:6e:49: 1f:94:20:f5:73:4c:74:7a:a5:05:ae:ff:9d:83:d1: 15:07:38:24:d4:17:ff:95:2b:b5:41:69:ad:32:9b: e8:2e:fc:2b:3a:30:f2:22:0d:c7:f7:77:f7:27:79: ca:0a:04:8b:68:33:b7:3d:16:52:92:30:e5:8c:3f: 75:9f:0a:3d:e4:41:8e:b8:d4:40:d3:e6:e0:06:ad: cd:f0:d0:93:b4:09:c4:50:7a:c9:27:6d:94:fd:76: 2b:95:b9:ec:51:26:58:f4:6e:54:e1:1a:c8:49:9e: de:bd:2d:73:db:f8:95:2c:b8:60:b6:67:49:70:0a: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:98:76:E3:68:DB:83:85:AD:9C:41:CB:BB:15:94:CC:F9:33:5F X509v3 Authority Key Identifier: keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:05:cb:13:45:db:3b:61:3d:db:d6:da:dc:e3:91:5c:66:86: e9:b9:8a:12:9e:d2:ed:45:bb:9f:01:df:46:45:45:7e:c6:9c: 1d:5e:e8:15:11:7b:88:d3:f3:03:56:a0:d5:57:ce:35:40:01: fb:c4:76:60:73:86:a5:23:4f:b9:51:54:3e:fe:a0:46:58:48: 9b:22:8d:0e:df:20:30:7f:98:60:43:af:af:a4:42:1e:16:41: 39:97:e0:75:f2:9c:85:b2:bf:05:67:c7:64:89:6b:14:3d:b6: 55:b7:f3:d9:59:80:f5:91:19:96:f2:ca:5b:58:b0:2f:24:79: b0:67:a4:34:a0:33:3c:76:ac:34:ed:12:ca:05:94:83:99:80: 91:f5:eb:4f:1e:d6:18:cc:d4:29:29:3d:57:af:d9:d4:41:bc: ae:60:a2:18:18:70:05:d0:2a:9a:57:e5:31:2c:e9:25:18:5d: ff:85:87:5d:75:02:1d:31:37:97:c8:1e:d1:2a:f1:e8:48:cb: 36:f1:b3:73:e7:2c:58:17:4a:f8:3a:f5:d2:ef:db:cb:c2:fc: a6:7f:57:85:e2:e8:4b:be:36:d5:72:1c:99:29:d3:82:fb:45: 2e:70:1b:d9:20:45:00:e3:cb:e1:f1:de:82:5c:53:4c:ea:e2: f5:d2:c8:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwNjUxMTAvBgNVBAUTKDY1NEJDRkQ3MEFCQzYwQjU0MTM5Mjg1MzA1RUZEMEUz MTVDMzM2OEUwHhcNMjYwNTEzMDc0MjIxWhcNMjYwNTIwMDc0MjIxWjAYMRYwFAYD VQQDEw02YTA0MmI1ZS1jYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/RvlW6iECZ/qrBZkuLx6bXep0xwr6RVymRBbe4PUW0qV735/525kJTAl7XS JmoU9fyMBNYHdNwDBRUPqydayn3tKgB9FCTlwzaDAWIUNHk0GogmU3ibQOWyAc4c ixsoP0kUxYCD4g+uEwN+J2g6QPxYiJTI1Ak9bQfaRbiPwLchiUUnbkkflCD1c0x0 eqUFrv+dg9EVBzgk1Bf/lSu1QWmtMpvoLvwrOjDyIg3H93f3J3nKCgSLaDO3PRZS kjDljD91nwo95EGOuNRA0+bgBq3N8NCTtAnEUHrJJ22U/XYrlbnsUSZY9G5U4RrI SZ7evS1z2/iVLLhgtmdJcAqOcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5kmHbj aNuDha2cQcu7FZTM+TNfMB8GA1UdIwQYMBaAFGVLz9cKvGC1QTkoUwXv0OMVwzaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzA2NS9EQjM1MTRCMDgy MzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9aVXZQMXdxOFlMVkJPU2hUQmVfUTR4WERO bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5vNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzA2NS9EQjM1MTRCMDgyMzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9aVXZQMXdxOFlM VkJPU2hUQmVfUTR4WERObzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwgXLE0XbO2E929ba3OORXGaG6bmKEp7S7UW7nwHfRkVFfsacHV7oFRF7iNPz A1ag1VfONUAB+8R2YHOGpSNPuVFUPv6gRlhImyKNDt8gMH+YYEOvr6RCHhZBOZfg dfKchbK/BWfHZIlrFD22Vbfz2VmA9ZEZlvLKW1iwLyR5sGekNKAzPHasNO0SygWU g5mAkfXrTx7WGMzUKSk9V6/Z1EG8rmCiGBhwBdAqmlflMSzpJRhd/4WHXXUCHTE3 l8ge0Srx6EjLNvGzc+csWBdK+Dr10u/by8L8pn9XheLoS7421XIcmSnTgvtFLnAb 2SBFAOPL4fHeglxTTOri9dLI4Q== -----END CERTIFICATE-----Generated at Wed May 13 16:39:00 2026 by rpki-client