$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: hfkNV8HNX0Lk+wOTbuL/cXhning8JLGZ1X1MOc1V+SM= Subject key identifier: 8C:D8:F4:CF:82:13:EB:EB:85:74:6D:E8:F7:CE:30:AB:D3:82:17:6D Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 091C Signing time: Tue 12 May 2026 20:19:27 +0000 Manifest this update: Tue 12 May 2026 20:19:26 +0000 Manifest next update: Tue 19 May 2026 20:19:26 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: V5jVs/AT5NyCpRIps45468JXCQm7dKK5M0b18sq1/h8=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: FnGXHW3NTkfV5VQ0kQwJy6k6mXA3xyfslsGAqppArLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: May 12 20:19:26 2026 GMT Not After : May 19 20:19:26 2026 GMT Subject: CN=6a038b4e-7ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:77:99:20:62:a6:71:49:21:ec:fa:ee:e0: 2c:9f:8b:49:ca:80:a0:98:bd:09:4f:33:e4:27:b9: 5e:be:f9:e6:3d:79:21:c1:7d:57:f6:38:51:96:bb: f9:2e:90:fa:f9:9f:95:7d:14:48:fc:e7:0f:ac:8e: 2f:58:34:d1:d8:3f:69:6c:b4:91:9f:fe:73:6c:26: 4d:49:25:d6:99:26:bb:ee:59:05:5e:a5:ff:1a:4c: 4f:67:90:22:c6:97:94:e0:94:24:33:a3:2a:f6:0a: 8a:13:97:fa:e4:a8:82:1c:d3:3f:79:bd:92:0c:74: df:60:56:c8:13:19:b9:1e:fc:b3:83:58:c5:74:a4: 9b:e0:4e:c1:f6:f7:14:83:31:0c:c0:a7:48:f8:93: c2:f0:de:18:71:00:e4:e7:28:c8:a5:b1:cc:37:de: 28:16:8f:e2:c9:ca:4e:9b:a3:5b:f8:2d:26:b5:33: 23:e3:64:7d:fd:f6:8d:8b:e9:f5:6f:1b:5e:46:94: 74:0b:fd:6e:7c:43:ea:dd:47:c9:6f:fb:45:50:56: 95:49:02:8f:de:4e:2e:50:5b:d2:f4:c9:74:d3:78: 49:d9:c5:a5:36:df:b4:cf:03:97:b9:a6:a4:6c:68: 02:8e:74:13:8b:fa:58:b2:1c:f6:fd:cf:18:0b:5f: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D8:F4:CF:82:13:EB:EB:85:74:6D:E8:F7:CE:30:AB:D3:82:17:6D X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:91:a3:e3:59:6f:d1:d5:30:f3:d9:f2:d1:50:e3:07:4a:ba: 1c:82:a5:d3:e4:e5:0c:b2:a3:a5:72:76:03:ae:4e:ba:cc:4a: 30:46:1d:04:70:df:82:70:9e:67:2d:f4:1a:90:a9:e1:b0:8f: 06:58:65:27:f1:be:94:ba:2a:9a:74:32:82:ee:c6:3b:55:b8: 0f:0f:d3:e9:f2:87:42:8f:e6:b0:06:2c:75:6a:5f:8a:11:ae: 05:5f:6f:ff:e5:ae:ec:c6:1d:21:ac:b1:9d:92:98:6e:e0:a9: 3b:e1:ef:75:15:2d:8d:3b:73:d1:9a:a9:1a:11:58:4c:a5:19: f6:a4:86:82:55:99:34:ec:3f:29:57:48:f0:27:b8:fd:ff:77: bb:8d:16:08:7b:30:25:76:6b:d1:62:d2:c9:ef:25:72:4f:63: 8a:56:2a:fa:c0:b3:28:c8:69:33:e8:3c:06:05:79:82:d8:e3: 8a:18:3d:b9:b6:3e:7f:ad:51:58:ba:70:f8:5b:87:bf:c5:8d: f7:76:d3:22:70:d1:13:1d:a6:62:ef:25:c0:36:b4:a3:89:cf: e9:91:8b:df:04:4a:c8:9f:c7:ba:07:0d:43:77:23:54:95:c5: f7:17:73:16:bf:ce:9c:63:a7:af:2e:d7:0e:04:46:4a:37:e7: b9:82:87:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwNTEyMjAxOTI2WhcNMjYwNTE5MjAxOTI2WjAYMRYwFAYD VQQDEw02YTAzOGI0ZS03ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R93mSBipnFJIez67uAsn4tJyoCgmL0JTzPkJ7levvnmPXkhwX1X9jhRlrv5 LpD6+Z+VfRRI/OcPrI4vWDTR2D9pbLSRn/5zbCZNSSXWmSa77lkFXqX/GkxPZ5Ai xpeU4JQkM6Mq9gqKE5f65KiCHNM/eb2SDHTfYFbIExm5Hvyzg1jFdKSb4E7B9vcU gzEMwKdI+JPC8N4YcQDk5yjIpbHMN94oFo/iycpOm6Nb+C0mtTMj42R9/faNi+n1 bxteRpR0C/1ufEPq3UfJb/tFUFaVSQKP3k4uUFvS9Ml003hJ2cWlNt+0zwOXuaak bGgCjnQTi/pYshz2/c8YC1/81QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzY9M+C E+vrhXRt6PfOMKvTghdtMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJZGj41lv0dUw89ny0VDjB0q6HIKl0+TlDLKjpXJ2A65OusxKMEYdBHDfgnCe Zy30GpCp4bCPBlhlJ/G+lLoqmnQygu7GO1W4Dw/T6fKHQo/msAYsdWpfihGuBV9v /+Wu7MYdIayxnZKYbuCpO+HvdRUtjTtz0ZqpGhFYTKUZ9qSGglWZNOw/KVdI8Ce4 /f93u40WCHswJXZr0WLSye8lck9jilYq+sCzKMhpM+g8BgV5gtjjihg9ubY+f61R WLpw+FuHv8WN93bTInDREx2mYu8lwDa0o4nP6ZGL3wRKyJ/HugcNQ3cjVJXF9xdz Fr/OnGOnry7XDgRGSjfnuYKHFQ== -----END CERTIFICATE-----Generated at Wed May 13 08:32:18 2026 by rpki-client