$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: CtzZbA8OrD66ssmb80fYDBK0V+lVb4Zb+/C4Lira1Ag= Subject key identifier: EA:4E:26:62:7D:D9:4B:DA:9B:B6:67:F8:8B:A1:F4:7E:BA:7E:B0:B7 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 022D Signing time: Mon 11 May 2026 02:44:47 +0000 Manifest this update: Mon 11 May 2026 02:44:46 +0000 Manifest next update: Mon 18 May 2026 02:44:46 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: 5GftmORnltXGBQGMu8RjLQXMxuD1s1Kptx+hgJ1W1ag=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: May 11 02:44:46 2026 GMT Not After : May 18 02:44:46 2026 GMT Subject: CN=6a01429f-c084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:f3:8f:5f:cb:f6:60:2d:b3:cd:eb:95:c9: c5:1e:40:d1:e4:21:1a:03:df:3d:4c:2b:06:ab:dc: 14:87:c9:7b:30:c8:6b:e3:2e:6d:ea:40:3d:f4:6f: 1e:4c:21:40:28:05:2c:a9:45:31:d0:d8:10:0c:d7: 46:b3:be:ba:39:20:54:f0:5b:c7:4a:e7:06:6a:ca: 08:ea:ed:b7:76:23:0f:5e:8a:05:1b:ec:cd:87:8e: 11:6d:08:41:82:fc:86:1b:5f:7e:dc:64:65:0d:2e: 00:b3:e4:7b:4a:a9:8b:9d:2f:fe:d7:33:e5:80:fd: a1:65:6d:2a:bc:92:11:de:86:8c:55:d2:f1:35:ef: f8:79:29:20:5f:82:8d:96:d1:18:47:50:dc:8d:10: 86:1d:a0:e4:8a:31:76:4c:98:5d:fc:70:88:39:04: 8d:e2:0b:db:48:be:5e:39:6b:72:f0:f4:94:86:6b: fd:42:8c:7d:12:18:39:3e:b1:ee:c7:38:bb:c4:52: 7b:96:c1:df:e8:4b:eb:82:87:4f:d8:6a:8a:45:61: db:f4:83:3c:b8:c2:78:0d:2d:b3:6a:2e:73:cf:e6: 89:b1:f9:a3:e4:03:24:f3:51:e7:64:bf:77:9a:a4: 6d:ba:6c:14:78:3d:f9:26:09:74:6f:a4:1e:bb:c4: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4E:26:62:7D:D9:4B:DA:9B:B6:67:F8:8B:A1:F4:7E:BA:7E:B0:B7 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:2d:28:f0:0d:18:b5:9b:1d:84:10:89:7c:5c:88:05:f0:da: 96:62:b7:8b:5e:36:22:e8:49:45:74:77:01:26:d0:d7:d8:a5: aa:aa:7f:3d:4e:d9:37:44:12:34:ba:0f:f3:39:92:20:ec:19: 0f:08:c4:8f:3f:ce:26:81:02:3f:74:b6:48:dc:bf:a7:b7:d6: 13:48:13:28:70:81:d0:94:11:7c:32:95:19:fc:5c:5e:d7:55: b8:76:bb:a6:44:a8:c5:e9:5d:e5:65:0f:28:f7:4b:cd:d9:7c: 31:54:11:8f:ee:73:4c:d6:80:d2:af:99:6d:82:a8:3b:a3:12: 51:5c:cb:57:51:0c:3d:91:15:cd:79:1e:bb:46:e7:d8:6a:5b: a2:c6:9e:1c:7d:3e:7b:45:ca:09:50:18:e1:a9:45:5a:37:96: c5:cd:d9:9a:3a:d1:8a:32:a5:fd:4e:43:11:08:c9:99:90:0c: 52:ef:38:24:87:69:d5:36:3c:d1:d7:fe:8b:bd:42:8c:30:25: bc:d5:89:f2:ab:48:87:70:c9:f2:6e:5b:b1:e5:0f:b4:74:df: ba:3a:6a:31:84:1e:32:07:3d:b0:a7:80:60:a2:17:9a:5b:92: 59:de:2e:e8:1f:2b:be:54:72:88:d2:b4:eb:fe:3a:dd:fb:e2: f3:e1:79:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNTExMDI0NDQ2WhcNMjYwNTE4MDI0NDQ2WjAYMRYwFAYD VQQDEw02YTAxNDI5Zi1jMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozHzj1/L9mAts83rlcnFHkDR5CEaA989TCsGq9wUh8l7MMhr4y5t6kA99G8e TCFAKAUsqUUx0NgQDNdGs766OSBU8FvHSucGasoI6u23diMPXooFG+zNh44RbQhB gvyGG19+3GRlDS4As+R7SqmLnS/+1zPlgP2hZW0qvJIR3oaMVdLxNe/4eSkgX4KN ltEYR1DcjRCGHaDkijF2TJhd/HCIOQSN4gvbSL5eOWty8PSUhmv9Qox9Ehg5PrHu xzi7xFJ7lsHf6EvrgodP2GqKRWHb9IM8uMJ4DS2zai5zz+aJsfmj5AMk81HnZL93 mqRtumwUeD35Jgl0b6Qeu8Q0PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpOJmJ9 2Uvam7Zn+Iuh9H66frC3MB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxy0o8A0YtZsdhBCJfFyIBfDalmK3i142IuhJRXR3ASbQ19ilqqp/PU7ZN0QS NLoP8zmSIOwZDwjEjz/OJoECP3S2SNy/p7fWE0gTKHCB0JQRfDKVGfxcXtdVuHa7 pkSoxeld5WUPKPdLzdl8MVQRj+5zTNaA0q+ZbYKoO6MSUVzLV1EMPZEVzXkeu0bn 2GpbosaeHH0+e0XKCVAY4alFWjeWxc3ZmjrRijKl/U5DEQjJmZAMUu84JIdp1TY8 0df+i71CjDAlvNWJ8qtIh3DJ8m5bseUPtHTfujpqMYQeMgc9sKeAYKIXmluSWd4u 6B8rvlRyiNK06/463fvi8+F5OQ== -----END CERTIFICATE-----Generated at Wed May 13 05:34:58 2026 by rpki-client