$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft File: Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json) Hash identifier: YiqImtSV0XawcBXgeIrx5vT/HwR1c1Bf5enxMAd8yr0= Subject key identifier: C0:23:CB:28:52:CD:42:BB:32:D8:09:55:94:0D:70:22:31:1F:5F:AD Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 Certificate issuer: /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft Manifest number: 0B Signing time: Mon 11 May 2026 09:19:34 +0000 Manifest this update: Mon 11 May 2026 09:19:34 +0000 Manifest next update: Mon 18 May 2026 09:19:34 +0000 Files and hashes: 1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: ET1Y393VYSYwSXFGRvKUZlTCnyn6c8zngQGpjhwhv6o=) 2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Validity Not Before: May 11 09:19:34 2026 GMT Not After : May 18 09:19:34 2026 GMT Subject: CN=6a019f26-7b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:9a:32:e4:94:c6:1e:41:cc:c5:05:54:42: c1:00:3d:f1:e4:ff:fd:f8:6f:90:4d:6b:34:bf:91: 10:1c:8a:e5:0d:67:75:fd:f6:5c:8a:4d:45:ab:c9: e7:95:8d:73:5f:6b:3d:a9:6e:a9:f4:ab:b9:1c:46: de:da:b4:5a:a2:17:fb:e7:06:02:db:d6:4a:c3:1f: a5:f4:63:f5:1b:49:b7:b9:70:0c:e5:62:86:26:de: fd:52:d4:7d:9b:40:80:40:e0:cb:9e:8d:7f:ad:1e: 58:f6:77:19:57:e4:78:54:ff:53:e3:87:84:73:cc: 23:f6:e8:0a:78:a4:f6:cf:07:ec:0a:35:fe:b3:04: d2:f8:77:5e:55:b6:eb:ea:5d:75:9a:59:d3:02:2d: 87:50:5e:94:42:fd:dc:8e:65:59:d6:51:f1:b0:4d: ac:77:45:47:19:52:39:f8:b5:06:0c:33:ba:db:77: ea:02:66:96:3b:d6:e0:4e:61:17:46:36:12:2a:6f: 32:f5:c3:b2:66:17:18:e6:fa:b7:c9:6c:d4:80:52: d2:d8:f7:ee:e2:7f:fa:b0:b0:a6:05:32:b5:f1:64: 87:de:be:aa:35:a7:05:71:08:46:63:dd:61:35:81: cb:59:fa:b6:c5:7d:32:62:34:e3:93:2b:e4:b8:7e: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:CB:28:52:CD:42:BB:32:D8:09:55:94:0D:70:22:31:1F:5F:AD X509v3 Authority Key Identifier: keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e4:b8:90:0c:67:39:4d:14:a8:9d:cf:f9:50:4c:ce:88:90: e2:1c:b2:35:71:df:98:de:5b:1e:66:ad:24:f8:fa:a7:07:a5: d2:ee:e2:8c:7c:2d:df:69:3b:23:f9:eb:ac:3c:40:e0:fd:d2: 4f:b3:56:e9:e2:66:19:92:99:fb:d4:b4:1a:e8:22:f4:d4:c6: 69:fe:64:72:18:40:42:a2:17:70:a1:41:54:2b:47:4b:c4:07: 94:a3:c1:68:34:b7:af:9b:ed:0d:68:86:0a:06:9e:60:39:b6: 3c:36:e8:a2:96:53:d6:61:a5:4a:84:1b:5a:f3:bd:16:2a:22: fd:52:c9:98:2a:95:f0:77:2c:d5:ee:79:ed:b0:f4:76:4c:e1: 4a:26:5b:39:c7:52:de:dc:1c:16:56:03:da:58:2c:b1:52:0d: c0:00:fa:3f:18:20:09:ef:d0:2c:cd:f9:82:51:f0:62:ef:e1: 30:2a:fd:02:4a:2f:59:c6:f0:da:27:98:1c:b2:67:ea:80:3f: e7:6b:96:57:41:2f:6d:c2:af:68:c6:63:33:ea:11:04:24:ba: ed:1b:da:a9:97:10:72:bb:56:89:f7:6f:63:a4:04:c1:cb:65: 79:20:33:d8:c8:e5:d9:fe:8a:32:be:93:c1:64:d2:3a:87:5e: 98:8b:7e:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU3MjExMC8GA1UEBRMoNjdDQjExNDVBODlDRDhCNjdBRUQ5RTRFNTI4NzAzRjU1 QzE1MjFCMzAeFw0yNjA1MTEwOTE5MzRaFw0yNjA1MTgwOTE5MzRaMBgxFjAUBgNV BAMTDTZhMDE5ZjI2LTdiNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWy5oy5JTGHkHMxQVUQsEAPfHk//34b5BNazS/kRAciuUNZ3X99lyKTUWryeeV jXNfaz2pbqn0q7kcRt7atFqiF/vnBgLb1krDH6X0Y/UbSbe5cAzlYoYm3v1S1H2b QIBA4MuejX+tHlj2dxlX5HhU/1Pjh4RzzCP26Ap4pPbPB+wKNf6zBNL4d15Vtuvq XXWaWdMCLYdQXpRC/dyOZVnWUfGwTax3RUcZUjn4tQYMM7rbd+oCZpY71uBOYRdG NhIqbzL1w7JmFxjm+rfJbNSAUtLY9+7if/qwsKYFMrXxZIfevqo1pwVxCEZj3WE1 gctZ+rbFfTJiNOOTK+S4fjXPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwCPLKFLN Qrsy2AlVlA1wIjEfX60wHwYDVR0jBBgwFoAUZ8sRRaic2LZ67Z5OUocD9VwVIbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTcyLzA3MkZBODg2M0VD ODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxaNjdaNU9Vb2NEOVZ3Vkli TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjhzUlJhaWMyTFo2N1o1T1VvY0Q5VndWSWJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTcyLzA3MkZBODg2M0VDODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxa NjdaNU9Vb2NEOVZ3VkliTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCx5LiQDGc5TRSonc/5UEzOiJDiHLI1cd+Y3lseZq0k+PqnB6XS7uKMfC3faTsj +eusPEDg/dJPs1bp4mYZkpn71LQa6CL01MZp/mRyGEBCohdwoUFUK0dLxAeUo8Fo NLevm+0NaIYKBp5gObY8NuiillPWYaVKhBta870WKiL9UsmYKpXwdyzV7nntsPR2 TOFKJls5x1Le3BwWVgPaWCyxUg3AAPo/GCAJ79AszfmCUfBi7+EwKv0CSi9ZxvDa J5gcsmfqgD/na5ZXQS9twq9oxmMz6hEEJLrtG9qplxByu1aJ929jpATBy2V5IDPY yOXZ/ooyvpPBZNI6h16Yi34q -----END CERTIFICATE-----Generated at Wed May 13 03:16:21 2026 by rpki-client