$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: Vi68kHzVb3RTc6owX5rGtQlc00xaj9bQuWj6M0M4qcs= Subject key identifier: 97:33:03:57:72:EC:9D:79:40:11:8D:9C:F7:05:07:D2:12:F3:1B:4C Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 06E7 Signing time: Tue 12 May 2026 22:16:17 +0000 Manifest this update: Tue 12 May 2026 22:16:17 +0000 Manifest next update: Tue 19 May 2026 22:16:17 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: im4mLzwZE8XWDL7wjr8SOWmm4UNwFnVjgV/x66XXHw4=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: May 12 22:16:17 2026 GMT Not After : May 19 22:16:17 2026 GMT Subject: CN=6a03a6b1-f695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:e6:02:f1:0b:ea:5a:91:53:99:2b:0d:ec: 61:80:9c:26:b9:bb:9f:0d:e5:e9:b6:c4:40:a4:2e: 73:dc:d0:1e:79:bd:56:12:af:05:df:7f:d9:8a:ae: e4:2d:1c:03:ed:ec:f3:3a:fc:c7:1d:20:db:0e:42: a9:89:41:26:89:c4:3d:5a:02:af:fb:5a:f1:47:ed: 1f:49:8d:90:6f:68:2c:1d:9a:81:f3:1d:dd:7f:a5: 03:62:9b:2a:8a:a2:6d:b3:45:65:26:6f:93:3e:6c: 06:50:e1:1e:61:8f:4f:a8:2b:11:49:80:e4:6b:d2: 37:e8:31:32:64:c2:e7:58:cd:9e:d6:d4:e2:53:b2: 25:19:6f:df:b0:d9:4c:cf:e0:26:20:12:2b:4b:2c: db:2b:09:bd:ae:1e:6d:b7:55:1d:97:b1:b3:d0:44: 86:15:2b:c6:2f:8c:da:58:07:59:e4:2d:7d:a0:e1: 5b:0a:cc:0a:dd:1e:7c:1f:d3:f8:00:57:be:01:4b: 9c:ee:55:8f:b0:9e:fb:17:26:30:a3:4a:54:0b:20: 30:8d:d9:d8:99:da:ec:0f:90:ab:17:6b:39:10:b1: 99:74:8a:6b:b7:2e:d4:06:d6:1d:61:73:1d:27:4c: 05:fc:ed:ef:69:10:0d:77:c8:a5:8c:b2:3c:f4:05: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:03:57:72:EC:9D:79:40:11:8D:9C:F7:05:07:D2:12:F3:1B:4C X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:55:ac:3e:a0:f2:aa:94:54:c6:3f:bc:23:77:54:17:fe:11: 11:f8:da:bd:0b:2b:fb:44:48:0f:a7:ab:01:e3:c8:9c:ec:8c: 4b:30:fe:99:6c:38:00:db:bf:8d:bf:02:3a:52:aa:8c:72:a9: 92:b1:33:5a:24:78:ee:cf:1b:bf:d9:89:0e:82:83:07:27:09: 5b:a0:77:51:f6:af:45:3a:c0:c5:b9:a7:cc:dc:e3:92:56:4c: 6a:b6:39:29:57:4d:00:43:7e:95:7a:fa:81:e1:cb:6f:95:1d: cf:72:93:c6:53:3f:16:3a:43:4b:8f:e9:09:fa:74:36:eb:ac: a3:03:8c:25:5c:17:8e:a2:2c:69:ff:28:58:49:5f:ea:9c:12: c3:cc:26:58:f3:48:9a:4e:e1:d6:f8:a8:8f:01:a6:84:a6:09: eb:55:6d:2e:f6:ee:b2:f3:c5:2f:b7:a7:40:eb:92:1c:f8:b5: 7c:f6:68:f4:51:cb:78:c4:eb:53:91:68:0b:54:f6:5d:8e:9c: ac:ea:9b:28:d9:08:db:5e:18:53:10:24:61:9a:20:ad:b5:f3: c8:19:9b:d9:4d:4b:af:08:da:89:56:83:2f:2c:48:ca:81:6e: 75:b0:2b:1f:e3:1b:81:68:7d:32:f8:cc:f9:f1:77:04:23:63: bf:fe:ac:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwNTEyMjIxNjE3WhcNMjYwNTE5MjIxNjE3WjAYMRYwFAYD VQQDEw02YTAzYTZiMS1mNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAry3mAvEL6lqRU5krDexhgJwmubufDeXptsRApC5z3NAeeb1WEq8F33/Ziq7k LRwD7ezzOvzHHSDbDkKpiUEmicQ9WgKv+1rxR+0fSY2Qb2gsHZqB8x3df6UDYpsq iqJts0VlJm+TPmwGUOEeYY9PqCsRSYDka9I36DEyZMLnWM2e1tTiU7IlGW/fsNlM z+AmIBIrSyzbKwm9rh5tt1Udl7Gz0ESGFSvGL4zaWAdZ5C19oOFbCswK3R58H9P4 AFe+AUuc7lWPsJ77FyYwo0pUCyAwjdnYmdrsD5CrF2s5ELGZdIprty7UBtYdYXMd J0wF/O3vaRANd8iljLI89AU1QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJczA1dy 7J15QBGNnPcFB9IS8xtMMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnlWsPqDyqpRUxj+8I3dUF/4REfjavQsr+0RID6erAePInOyMSzD+mWw4ANu/ jb8COlKqjHKpkrEzWiR47s8bv9mJDoKDBycJW6B3UfavRTrAxbmnzNzjklZMarY5 KVdNAEN+lXr6geHLb5Udz3KTxlM/FjpDS4/pCfp0NuusowOMJVwXjqIsaf8oWElf 6pwSw8wmWPNImk7h1viojwGmhKYJ61VtLvbusvPFL7enQOuSHPi1fPZo9FHLeMTr U5FoC1T2XY6crOqbKNkI214YUxAkYZogrbXzyBmb2U1LrwjaiVaDLyxIyoFudbAr H+MbgWh9MvjM+fF3BCNjv/6sNw== -----END CERTIFICATE-----Generated at Wed May 13 06:41:43 2026 by rpki-client