$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: j+BpbznxyqGcyZslZqZ49bkI0KtMa5O30oFQMtxxHQA= Subject key identifier: 4A:57:7E:43:66:CC:E9:6D:80:CF:76:7F:00:91:8D:CD:9D:35:49:BB Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 1657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 1657 Signing time: Tue 12 May 2026 16:43:17 +0000 Manifest this update: Tue 12 May 2026 16:43:17 +0000 Manifest next update: Tue 19 May 2026 16:43:17 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: t4Pl0VNnh77JkJw4gMO0fN9o8SyjwBbuPyVXcZg/Br0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5719 (0x1657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: May 12 16:43:17 2026 GMT Not After : May 19 16:43:17 2026 GMT Subject: CN=6a0358a5-e5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:3b:b6:fe:90:b4:7f:5f:98:6f:ac:f1:ee: 09:fd:3d:39:5d:ba:60:b9:36:4c:4e:e8:ed:de:5c: 62:65:75:08:c3:c1:4b:26:6b:86:41:40:dd:73:76: a3:84:62:91:57:dc:aa:0d:e3:8f:94:8c:7f:9c:79: 8b:4f:3c:92:af:be:43:f4:b7:17:99:84:47:9d:be: 90:ac:a1:ce:fb:58:98:74:42:04:b6:2b:b1:94:b2: 32:a9:b6:27:a1:28:c9:63:e1:fd:12:51:71:66:48: 30:01:7f:27:67:35:5d:11:99:73:45:aa:79:35:7d: a4:85:46:53:f0:e7:81:5c:72:3e:b3:20:81:71:1d: d5:23:b1:7c:0a:48:a5:bf:41:3b:68:4d:09:6e:e9: fc:23:55:2b:44:07:27:cc:0f:ca:ca:1c:81:d7:29: 6b:f5:29:93:a3:cc:00:ef:41:68:31:e6:39:ce:77: 50:99:28:e5:08:8e:9b:14:a6:4e:35:e0:04:03:d3: 43:7d:d5:59:22:67:1e:fe:7e:75:16:2c:e0:85:08: d8:a0:c6:e4:95:60:8b:22:bb:1d:fd:03:df:a8:68: 20:03:4a:ea:d9:64:ed:2f:b2:28:45:ae:5d:27:eb: 4b:ee:df:08:41:54:7b:7e:d9:d6:2f:78:ed:cf:a7: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:57:7E:43:66:CC:E9:6D:80:CF:76:7F:00:91:8D:CD:9D:35:49:BB X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:5d:4a:f2:da:5e:66:6e:b9:76:6f:5e:a1:c0:6d:4e:42: ad:b5:2b:41:bb:7d:5e:4a:fc:60:ae:5e:ef:15:1d:f3:c9:14: c3:9e:15:13:a7:7b:3b:c9:c3:bd:50:3b:f7:9c:af:6f:49:50: 2c:72:d2:1f:d5:63:45:f0:d9:6d:c9:dc:dd:56:fb:e6:cf:1f: 18:f8:d4:6e:b6:ec:fb:ac:df:9c:d1:8b:81:e2:41:cf:63:81: 2c:a3:88:aa:44:ab:44:24:c0:39:1b:97:74:55:46:a4:18:23: 45:79:a7:47:f9:39:01:b0:60:f7:fe:d2:e7:72:57:17:be:18: 03:08:8d:ac:77:70:39:7b:55:2d:08:25:45:83:c3:a4:dd:9d: c5:9f:b0:91:fe:69:74:d1:f0:fd:d0:66:8a:88:29:fc:3d:56: ec:ce:cb:37:f0:db:01:d4:ef:04:37:b5:92:94:88:9a:1f:d9: 9b:54:0b:35:b5:1f:6f:7b:bd:57:e3:d7:a7:2e:00:b9:a9:94: af:d2:d4:85:aa:8b:af:ab:5a:d9:6c:a2:76:8c:5d:e6:3d:b5: 7d:df:1b:5d:b2:25:9c:d3:bf:e9:40:1b:c4:db:58:52:2b:5f: 82:54:85:f8:19:0c:d3:9c:d0:07:0b:36:41:c6:82:51:1f:ab: a8:64:ce:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjYwNTEyMTY0MzE3WhcNMjYwNTE5MTY0MzE3WjAYMRYwFAYD VQQDEw02YTAzNThhNS1lNWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1I7tv6QtH9fmG+s8e4J/T05XbpguTZMTujt3lxiZXUIw8FLJmuGQUDdc3aj hGKRV9yqDeOPlIx/nHmLTzySr75D9LcXmYRHnb6QrKHO+1iYdEIEtiuxlLIyqbYn oSjJY+H9ElFxZkgwAX8nZzVdEZlzRap5NX2khUZT8OeBXHI+syCBcR3VI7F8Ckil v0E7aE0Jbun8I1UrRAcnzA/KyhyB1ylr9SmTo8wA70FoMeY5zndQmSjlCI6bFKZO NeAEA9NDfdVZImce/n51FizghQjYoMbklWCLIrsd/QPfqGggA0rq2WTtL7IoRa5d J+tL7t8IQVR7ftnWL3jtz6fHZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpXfkNm zOltgM92fwCRjc2dNUm7MB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABrpdSvLaXmZuuXZvXqHAbU5CrbUrQbt9Xkr8YK5e7xUd88kUw54VE6d7O8nD vVA795yvb0lQLHLSH9VjRfDZbcnc3Vb75s8fGPjUbrbs+6zfnNGLgeJBz2OBLKOI qkSrRCTAORuXdFVGpBgjRXmnR/k5AbBg9/7S53JXF74YAwiNrHdwOXtVLQglRYPD pN2dxZ+wkf5pdNHw/dBmiogp/D1W7M7LN/DbAdTvBDe1kpSImh/Zm1QLNbUfb3u9 V+PXpy4AuamUr9LUhaqLr6ta2Wyidoxd5j21fd8bXbIlnNO/6UAbxNtYUitfglSF +BkM05zQBws2QcaCUR+rqGTOvw== -----END CERTIFICATE-----Generated at Wed May 13 13:18:47 2026 by rpki-client