$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: XST3EkdZioV1/6Aa1usgNjfY55AzwrGQ49KTgfnn15s= Subject key identifier: 7E:F7:2C:6E:06:FC:16:0E:36:42:BD:D2:13:88:6A:90:95:41:20:96 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 5E Signing time: Wed 13 May 2026 08:16:34 +0000 Manifest this update: Wed 13 May 2026 08:16:34 +0000 Manifest next update: Wed 20 May 2026 08:16:34 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: oo6NgYDPPdgQM0EVrMn1PK7C7o0W1lEVj5ezL3c0RqE=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) 3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: May 13 08:16:34 2026 GMT Not After : May 20 08:16:34 2026 GMT Subject: CN=6a043362-d9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:b1:d0:dc:88:98:54:0c:41:32:15:b0:ae: 6c:8d:d9:e6:9a:f3:8e:bc:b3:0e:ef:c0:6c:0b:0b: e6:89:6c:4e:83:62:49:78:3d:83:e0:0c:77:f8:c8: 59:c5:ae:c4:08:d3:03:f9:ee:44:7a:6b:db:85:83: 27:3d:11:a9:ec:56:bd:cd:4d:00:e0:66:75:6d:41: 70:d5:d6:b4:13:06:44:62:85:6d:5b:67:36:f2:5b: f7:cf:d4:57:db:36:98:ee:6b:29:ae:d4:9a:09:d6: 35:a2:c2:14:1f:fc:e6:36:a5:ff:16:2d:a9:8b:79: c3:61:89:67:8d:69:ea:8c:4a:3a:68:d3:d7:54:78: 15:d6:05:d3:dd:86:4b:f9:fc:04:c6:58:8d:6b:ec: 3b:66:f6:0d:7c:3c:89:84:e4:28:83:43:d8:d2:45: b9:4e:a2:68:5a:32:27:5e:86:e7:9a:cd:c8:85:0b: 12:d0:5e:44:c2:4b:6e:17:0a:0b:f5:a1:2b:d1:be: 17:34:b6:44:2b:16:40:cf:e2:b7:48:b4:d2:36:67: 5f:4c:f5:ff:7e:bb:97:41:df:b0:23:c9:99:24:32: 5c:a9:15:fa:c9:52:54:e1:c5:14:05:11:e8:88:6c: cb:ce:09:2c:a5:ba:55:dc:8e:d2:c5:28:cc:0c:3b: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F7:2C:6E:06:FC:16:0E:36:42:BD:D2:13:88:6A:90:95:41:20:96 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:49:85:13:c9:e0:ae:c0:d0:71:1a:2f:01:e5:f4:3b:5c: 75:f0:e4:c4:7a:38:ec:29:fe:cf:15:48:2f:62:c6:83:92:7d: a2:f0:e1:cc:e2:8e:b7:8d:81:d5:53:0f:b0:f8:f9:4e:a1:c9: 93:50:a7:4d:d8:e6:c5:87:0f:fa:4e:63:38:c2:c4:97:2c:ff: f1:c4:55:38:80:00:da:aa:ec:11:e0:45:b4:4c:58:04:34:49: 94:39:0a:d5:de:ee:3b:ca:84:33:8b:c0:bd:c4:df:db:18:52: d7:31:f3:1c:b1:35:8d:47:f4:e6:d3:c8:16:38:01:73:a1:00: 4a:7c:22:5e:c1:95:0e:ed:b6:c2:58:44:e2:97:4b:57:3d:a6: d0:b5:c3:33:a6:71:87:51:9f:94:6c:88:9a:6a:97:81:bc:d4: 2b:b0:1c:13:82:72:1d:87:cf:00:a0:79:29:24:2a:62:ca:eb: 16:d4:c7:e1:f6:14:43:a1:ab:2f:30:b9:f4:1f:1d:e8:7e:24: ab:76:d7:c4:54:ae:1c:31:69:82:ff:bf:52:7a:b5:27:37:ab: f5:7f:be:1f:60:1f:7c:a0:e0:e7:03:1e:cb:c8:48:77:6a:f5: d3:9b:98:97:00:f2:9e:d7:7c:56:15:98:b8:43:b0:0d:3f:2b: fa:6a:8b:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjA1MTMwODE2MzRaFw0yNjA1MjAwODE2MzRaMBgxFjAUBgNV BAMTDTZhMDQzMzYyLWQ5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPr7HQ3IiYVAxBMhWwrmyN2eaa8468sw7vwGwLC+aJbE6DYkl4PYPgDHf4yFnF rsQI0wP57kR6a9uFgyc9EansVr3NTQDgZnVtQXDV1rQTBkRihW1bZzbyW/fP1Ffb Npjuaymu1JoJ1jWiwhQf/OY2pf8WLamLecNhiWeNaeqMSjpo09dUeBXWBdPdhkv5 /ATGWI1r7Dtm9g18PImE5CiDQ9jSRblOomhaMidehueazciFCxLQXkTCS24XCgv1 oSvRvhc0tkQrFkDP4rdItNI2Z19M9f9+u5dB37AjyZkkMlypFfrJUlThxRQFEeiI bMvOCSylulXcjtLFKMwMO6a1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfvcsbgb8 Fg42Qr3SE4hqkJVBIJYwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9fEmFE8ngrsDQcRovAeX0O1x18OTEejjsKf7PFUgvYsaDkn2i8OHM4o63jYHV Uw+w+PlOocmTUKdN2ObFhw/6TmM4wsSXLP/xxFU4gADaquwR4EW0TFgENEmUOQrV 3u47yoQzi8C9xN/bGFLXMfMcsTWNR/Tm08gWOAFzoQBKfCJewZUO7bbCWETil0tX PabQtcMzpnGHUZ+UbIiaapeBvNQrsBwTgnIdh88AoHkpJCpiyusW1Mfh9hRDoasv MLn0Hx3ofiSrdtfEVK4cMWmC/79SerUnN6v1f74fYB98oODnAx7LyEh3avXTm5iX APKe13xWFZi4Q7ANPyv6aou7 -----END CERTIFICATE-----Generated at Wed May 13 16:13:06 2026 by rpki-client