$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: FETsOnunEHnRJk8WeXjtai/73A1fFhh2WLG5bFYHLhM= Subject key identifier: A6:1F:F7:DC:96:39:17:2A:F6:3E:28:A6:F8:0B:37:E2:B2:E2:13:EA Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E86 Signing time: Tue 12 May 2026 17:46:40 +0000 Manifest this update: Tue 12 May 2026 17:46:40 +0000 Manifest next update: Tue 19 May 2026 17:46:40 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: ZTfdwZa2hgqmuOZvuLmyO4v/Xh1xUJj7Q/zC1/cxAsQ=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: NpwlTwI8Xm9ihx5f2AI8RzaFuXlf3KaqQ3R0nM1i1CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3727 (0xe8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: May 12 17:46:40 2026 GMT Not After : May 19 17:46:40 2026 GMT Subject: CN=6a036780-a4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:92:53:80:23:5f:1e:70:e2:26:97:13:8f: dc:bd:fe:73:17:b9:95:68:dd:d2:32:ec:c0:c0:85: 8f:a8:fd:7c:cc:d4:e4:cb:d8:49:ad:57:29:6f:db: da:27:08:a1:06:31:29:00:32:22:71:c7:c7:4d:a7: 63:b4:94:39:51:9c:01:a7:76:d6:23:78:c6:5b:c9: 3c:af:58:b2:34:3e:40:73:47:50:0f:bd:5e:28:bb: 01:dd:35:df:62:4e:ec:e1:73:e3:af:10:ed:1a:7a: ee:3d:7d:28:af:5d:4e:ad:45:2f:f8:c2:95:d2:5b: aa:b7:42:25:c8:69:b9:c3:ef:a9:e8:c8:e3:1e:02: 0f:96:c1:d2:f2:71:93:d6:d3:c9:3a:c9:35:c5:42: 02:81:2a:fd:d1:6b:01:8c:5e:31:11:f7:96:72:87: 63:8a:71:ec:fb:2c:08:d5:ab:29:b0:94:e4:1d:6a: d2:25:71:cc:df:93:1c:e0:24:d9:0a:31:d5:b3:72: 89:a6:d7:41:24:32:c4:fd:b3:4b:c3:ed:76:93:d3: 45:5d:19:d7:23:91:41:4e:14:85:ee:6a:50:8d:f3: 79:65:8c:78:72:b5:dd:d1:e9:23:ad:a7:ba:02:04: 69:78:e7:f4:a2:d0:25:f8:e7:55:06:f6:c4:95:a6: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1F:F7:DC:96:39:17:2A:F6:3E:28:A6:F8:0B:37:E2:B2:E2:13:EA X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:37:b0:19:10:54:ae:bb:1f:b4:c2:89:74:57:b6:09:0b:cd: b9:23:24:1d:19:c1:39:f4:78:7c:8f:5b:9f:b1:1e:41:9a:78: 5d:bd:a0:0a:76:48:84:8b:09:e2:eb:e6:32:2e:b7:1b:54:53: d4:26:9d:28:e1:3f:b2:79:39:40:9b:ba:cd:1a:f3:3c:da:f7: 8a:f9:8d:d3:65:e6:4b:5f:a8:f1:92:5b:81:31:f1:d3:68:3e: 01:75:ef:45:f7:11:e7:cd:00:6e:c1:0b:d2:28:69:59:bf:d3: 7e:ca:ef:5d:5b:3a:1b:24:58:c9:1a:f0:f1:14:2d:a1:39:e7: 9f:10:6d:40:d5:6a:42:cb:1f:6f:c9:bd:96:bd:c1:a8:a8:9e: 6e:86:b9:7c:28:e8:7e:7c:58:d5:41:c5:9b:f5:f1:36:ac:2d: 51:4c:3a:94:50:2c:be:9c:34:d6:6d:ed:72:25:0c:03:4a:20: 75:f9:ff:9e:66:78:4b:a2:9c:09:5a:95:ab:62:3e:8a:03:3b: 52:a3:36:09:13:42:4e:0c:c1:b9:16:86:be:f6:d4:ff:28:22: 76:7d:ea:d2:0a:1b:99:29:c1:0d:eb:3d:b3:23:51:dc:06:36: c6:bc:e2:45:7f:6e:f5:35:55:9d:97:d2:f6:78:16:06:2e:57: 69:e5:91:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjYwNTEyMTc0NjQwWhcNMjYwNTE5MTc0NjQwWjAYMRYwFAYD VQQDEw02YTAzNjc4MC1hNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IaSU4AjXx5w4iaXE4/cvf5zF7mVaN3SMuzAwIWPqP18zNTky9hJrVcpb9va JwihBjEpADIiccfHTadjtJQ5UZwBp3bWI3jGW8k8r1iyND5Ac0dQD71eKLsB3TXf Yk7s4XPjrxDtGnruPX0or11OrUUv+MKV0luqt0IlyGm5w++p6MjjHgIPlsHS8nGT 1tPJOsk1xUICgSr90WsBjF4xEfeWcodjinHs+ywI1aspsJTkHWrSJXHM35Mc4CTZ CjHVs3KJptdBJDLE/bNLw+12k9NFXRnXI5FBThSF7mpQjfN5ZYx4crXd0ekjrae6 AgRpeOf0otAl+OdVBvbElaZDtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYf99yW ORcq9j4opvgLN+Ky4hPqMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQzewGRBUrrsftMKJdFe2CQvNuSMkHRnBOfR4fI9bn7EeQZp4Xb2gCnZIhIsJ 4uvmMi63G1RT1CadKOE/snk5QJu6zRrzPNr3ivmN02XmS1+o8ZJbgTHx02g+AXXv RfcR580AbsEL0ihpWb/TfsrvXVs6GyRYyRrw8RQtoTnnnxBtQNVqQssfb8m9lr3B qKieboa5fCjofnxY1UHFm/XxNqwtUUw6lFAsvpw01m3tciUMA0ogdfn/nmZ4S6Kc CVqVq2I+igM7UqM2CRNCTgzBuRaGvvbU/ygidn3q0gobmSnBDes9syNR3AY2xrzi RX9u9TVVnZfS9ngWBi5XaeWRbg== -----END CERTIFICATE-----Generated at Wed May 13 03:26:05 2026 by rpki-client