$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: 21rjzXE0tUx0VTjXikpP8QFHzpYEFjhEN26II6nwgVk= Subject key identifier: 57:04:CE:F9:13:6F:77:08:7A:F5:43:B0:FD:19:E1:0E:6F:47:AA:47 Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 38 Signing time: Wed 13 May 2026 08:43:13 +0000 Manifest this update: Wed 13 May 2026 08:43:13 +0000 Manifest next update: Wed 20 May 2026 08:43:13 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: nji8HwjCQMzPTjR2YYkTnTBkksbLNyEZnv54QcK3MZ8=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: May 13 08:43:13 2026 GMT Not After : May 20 08:43:13 2026 GMT Subject: CN=6a0439a1-3477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:42:3b:59:ee:13:ef:d9:a4:bb:f3:1a:51: 3f:22:44:e6:77:cb:37:11:8f:b7:81:3d:6a:44:16: e6:8e:87:3a:e2:1b:a9:15:9e:32:aa:44:e6:d1:ea: 1a:d7:66:1b:f4:e3:42:cf:73:d4:0c:d0:be:13:7e: 6d:ce:21:42:43:33:6d:5a:3d:65:df:ea:fc:17:5d: a1:12:22:1d:9c:a3:01:f9:87:63:d3:02:eb:05:31: ff:70:c4:10:83:27:62:a8:55:5e:92:f6:b7:c8:d0: 21:f7:d8:a7:da:0a:af:01:b8:f8:da:e7:3c:c4:4f: 1c:5a:ba:6a:3e:b0:96:54:e7:bc:28:fa:90:a8:a9: 76:5d:50:8e:06:42:cd:4d:35:3f:05:d3:e1:96:17: e0:7c:01:8d:fc:72:48:7d:21:14:b7:75:eb:9f:16: cf:19:85:34:96:f7:fb:0c:19:02:b9:7b:ba:cc:12: 39:4a:fc:b2:95:91:24:2a:ee:79:9a:af:05:e7:20: b4:f9:7f:f7:b7:18:d9:05:46:f6:cd:df:e9:da:14: 26:67:af:31:f7:45:fa:6a:3c:67:42:6a:f2:0e:dc: 96:8a:ca:ff:37:5d:8d:82:10:76:57:3f:cb:62:73: d9:50:00:f8:16:ab:6d:c2:cd:3d:ec:32:68:15:fc: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:04:CE:F9:13:6F:77:08:7A:F5:43:B0:FD:19:E1:0E:6F:47:AA:47 X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:dc:99:fc:7f:7f:64:3f:4b:99:cb:22:f6:7b:2f:da:85: 3e:ed:17:56:2a:54:e0:6f:5f:f3:69:23:ba:ab:48:78:c1:38: 92:07:e9:bb:bc:1d:f8:1c:c4:34:0d:b6:ba:13:6f:0c:3b:61: f0:e7:fc:72:32:a7:fe:71:74:14:49:d5:75:7f:fe:0b:ba:0c: c0:62:6f:b3:ef:cc:f9:ba:38:b5:d4:4f:c2:dc:bf:aa:ee:71: 52:7a:31:c0:4a:7e:7d:29:14:b5:91:3c:c0:b2:8d:17:cc:07: 64:f9:9d:d0:5f:e4:51:ed:19:91:6a:9c:b2:2e:d1:54:a8:34: da:86:eb:e1:6e:71:15:77:dc:4e:a1:f9:cd:26:d0:09:dc:f8: 61:3b:e5:17:39:1c:ae:64:f5:a2:39:e3:35:e4:f4:e9:8c:d3: 8a:e8:56:76:d6:ae:3c:b5:e0:fe:6e:b4:09:26:99:e3:1e:ad: 10:be:9c:5f:17:86:ba:01:26:c5:84:74:25:b0:39:6f:b2:2a: 6e:26:2b:ce:f1:8d:06:63:6f:e8:57:a6:b1:c8:00:3d:4d:ac: 28:be:c3:fd:1d:8f:7e:bc:9a:43:37:ae:f9:63:f9:4b:2f:06: 24:cd:e5:c8:8d:c5:92:29:a1:ab:17:0e:cf:c6:95:6f:79:1b: a2:20:d9:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjA1MTMwODQzMTNaFw0yNjA1MjAwODQzMTNaMBgxFjAUBgNV BAMTDTZhMDQzOWExLTM0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1VEI7We4T79mku/MaUT8iROZ3yzcRj7eBPWpEFuaOhzriG6kVnjKqRObR6hrX Zhv040LPc9QM0L4Tfm3OIUJDM21aPWXf6vwXXaESIh2cowH5h2PTAusFMf9wxBCD J2KoVV6S9rfI0CH32KfaCq8BuPja5zzETxxaumo+sJZU57wo+pCoqXZdUI4GQs1N NT8F0+GWF+B8AY38ckh9IRS3deufFs8ZhTSW9/sMGQK5e7rMEjlK/LKVkSQq7nma rwXnILT5f/e3GNkFRvbN3+naFCZnrzH3RfpqPGdCavIO3JaKyv83XY2CEHZXP8ti c9lQAPgWq23CzT3sMmgV/EXVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVwTO+RNv dwh69UOw/RnhDm9HqkcwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeH9yZ/H9/ZD9Lmcsi9nsv2oU+7RdWKlTgb1/zaSO6q0h4wTiSB+m7vB34HMQ0 Dba6E28MO2Hw5/xyMqf+cXQUSdV1f/4LugzAYm+z78z5uji11E/C3L+q7nFSejHA Sn59KRS1kTzAso0XzAdk+Z3QX+RR7RmRapyyLtFUqDTahuvhbnEVd9xOofnNJtAJ 3PhhO+UXORyuZPWiOeM15PTpjNOK6FZ21q48teD+brQJJpnjHq0QvpxfF4a6ASbF hHQlsDlvsipuJivO8Y0GY2/oV6axyAA9TawovsP9HY9+vJpDN675Y/lLLwYkzeXI jcWSKaGrFw7PxpVveRuiINnx -----END CERTIFICATE-----Generated at Wed May 13 11:17:03 2026 by rpki-client