$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: qMgRhir4cJ7B+bFMZ2cnqilSxwSs6lWdRot5Y6khstk= Subject key identifier: 25:59:95:D6:86:C7:F4:AA:D1:A2:01:F1:FA:5E:E7:C6:3C:99:F1:AD Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 08D4 Signing time: Tue 12 May 2026 20:31:27 +0000 Manifest this update: Tue 12 May 2026 20:31:27 +0000 Manifest next update: Tue 19 May 2026 20:31:27 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: kTBMRiWT5bG93GQTFW9u9c6iLqBsB5hs2Szie/u7BzA=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: vKz2PhbUDYJZVs3/nsXYOspC2RoBm8DRbbH9FlMoAj4=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: Gdkzxdpe1ELyHXB0+EiJtJauU6nSffFqCiOdocyNC80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: May 12 20:31:27 2026 GMT Not After : May 19 20:31:27 2026 GMT Subject: CN=6a038e1f-7e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:21:b8:34:6a:3d:73:d5:ef:dd:85:e2:ec:24: 16:30:a7:a5:c4:d0:b6:2e:79:2e:8d:9c:d7:03:62: e2:ee:87:c9:79:67:9d:6e:32:ce:68:46:27:63:87: ff:9e:90:49:ec:e1:63:db:dc:e8:81:2a:4a:b9:8d: f8:ae:f8:67:5e:9a:a1:a9:7a:72:21:a4:85:94:7c: d1:58:70:97:f3:f7:24:3a:53:f3:0e:3b:2e:90:0a: 32:af:56:ae:89:d1:43:23:7d:82:0f:d8:52:b6:10: 2b:1b:4b:d5:85:3b:a4:d7:43:64:2f:e0:0c:a3:61: d9:9f:95:63:1a:2b:ce:61:6a:b4:2d:c6:b5:ac:f3: c1:ff:cc:4e:94:27:4a:81:72:ce:a9:79:e0:ce:1c: 9f:7b:19:83:5a:cb:35:c2:90:20:27:5c:99:f2:5a: 37:ff:b9:fe:1d:6a:9d:12:6b:49:eb:2c:0c:90:6c: 37:36:ab:d0:ac:73:19:e3:b5:f9:1b:11:44:88:15: 92:a5:70:aa:0d:0d:d1:30:36:ec:5a:80:89:5f:94: e5:71:69:cf:96:69:1c:d5:0b:f6:8f:81:a4:39:4d: fc:42:52:63:08:dd:0d:71:ab:92:ea:91:6d:13:dd: 79:8d:d9:fa:d8:e9:02:97:c0:fd:d5:ab:49:ce:f8: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:59:95:D6:86:C7:F4:AA:D1:A2:01:F1:FA:5E:E7:C6:3C:99:F1:AD X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:01:02:32:a3:0f:92:64:d6:26:fd:a1:cc:99:56:26:17:f9: 51:3a:29:29:42:9b:88:e0:50:84:62:0a:c0:c6:87:c5:2c:5e: f4:80:7d:c2:20:22:74:df:0d:08:3b:00:86:8f:05:c4:38:a6: b8:31:4a:f5:cc:d6:ad:6f:d7:e2:d6:be:1c:48:30:40:0e:d6: 5c:80:16:77:a0:99:01:5c:6b:42:99:9b:d0:f9:c3:4e:89:d1: 55:19:1f:a7:cd:cc:2b:5a:e6:15:7e:7d:b0:ec:c3:f4:a1:49: ee:1b:45:46:a1:56:4a:68:b3:02:f3:5c:e3:66:de:fa:75:0d: 58:70:f7:38:6f:75:2c:6e:d9:d7:af:ee:72:5e:1e:40:76:02: a6:bd:3e:59:9d:ac:e2:a0:82:52:10:f3:61:c0:77:54:2f:68: 85:6d:d1:6b:f1:c2:0a:5d:82:23:d4:a1:7c:c2:55:be:06:72: 67:de:2b:02:4f:58:3e:5e:ce:75:57:ef:6d:96:59:f4:e5:8f: c2:80:5a:02:2a:28:58:88:fa:9b:8f:57:2d:93:78:83:e5:b7: 27:be:58:43:ab:49:d9:96:3f:f9:88:36:5d:ca:98:7e:9a:27: 45:f2:be:58:a3:2f:75:45:9f:d8:0e:79:ba:1c:19:55:66:1e: 7a:dc:f1:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjYwNTEyMjAzMTI3WhcNMjYwNTE5MjAzMTI3WjAYMRYwFAYD VQQDEw02YTAzOGUxZi03ZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yG4NGo9c9Xv3YXi7CQWMKelxNC2LnkujZzXA2Li7ofJeWedbjLOaEYnY4f/ npBJ7OFj29zogSpKuY34rvhnXpqhqXpyIaSFlHzRWHCX8/ckOlPzDjsukAoyr1au idFDI32CD9hSthArG0vVhTuk10NkL+AMo2HZn5VjGivOYWq0Lca1rPPB/8xOlCdK gXLOqXngzhyfexmDWss1wpAgJ1yZ8lo3/7n+HWqdEmtJ6ywMkGw3NqvQrHMZ47X5 GxFEiBWSpXCqDQ3RMDbsWoCJX5TlcWnPlmkc1Qv2j4GkOU38QlJjCN0NcauS6pFt E915jdn62OkCl8D91atJzvjr3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVZldaG x/Sq0aIB8fpe58Y8mfGtMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPwECMqMPkmTWJv2hzJlWJhf5UTopKUKbiOBQhGIKwMaHxSxe9IB9wiAidN8N CDsAho8FxDimuDFK9czWrW/X4ta+HEgwQA7WXIAWd6CZAVxrQpmb0PnDTonRVRkf p83MK1rmFX59sOzD9KFJ7htFRqFWSmizAvNc42be+nUNWHD3OG91LG7Z16/ucl4e QHYCpr0+WZ2s4qCCUhDzYcB3VC9ohW3Ra/HCCl2CI9ShfMJVvgZyZ94rAk9YPl7O dVfvbZZZ9OWPwoBaAiooWIj6m49XLZN4g+W3J75YQ6tJ2ZY/+Yg2XcqYfponRfK+ WKMvdUWf2A55uhwZVWYeetzx+A== -----END CERTIFICATE-----Generated at Wed May 13 05:49:46 2026 by rpki-client