$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: n41dkp+p08JoKOWOcAvbVmIf8mNSrgZQ1rRMqxxFmjk= Subject key identifier: AA:E0:1A:81:18:6E:C1:F7:DB:71:1B:9D:44:3E:A8:05:CF:72:2A:6D Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 0722 Signing time: Tue 12 May 2026 22:02:17 +0000 Manifest this update: Tue 12 May 2026 22:02:16 +0000 Manifest next update: Tue 19 May 2026 22:02:16 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: CYvKh3LrtjbTcRFBNXQSs4/U4ddCidnLCyDRVyTlOpQ=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: kfNHjmM4llhwfmGMMRHrrJHm+acq8kgyjCe1MOK7NGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: May 12 22:02:16 2026 GMT Not After : May 19 22:02:16 2026 GMT Subject: CN=6a03a368-93f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:35:88:99:49:96:3a:0e:e5:a1:d6:8e:f8: 4b:98:92:c3:00:9e:3e:8f:63:c2:7f:94:84:19:d5: c7:cf:ba:55:ee:2a:70:78:84:2d:a1:bd:26:98:a7: 7d:a7:bd:ad:96:15:9b:8c:ee:4e:28:d1:b1:c2:fe: 04:c6:6d:67:0d:bb:58:f2:e4:67:85:84:51:a3:f0: 2a:d8:a0:b6:c0:84:46:f7:09:df:c8:83:26:c0:f8: c5:27:a7:a1:09:06:fc:4d:c0:de:cb:9e:d4:45:cd: 5c:54:e9:6a:a6:e3:32:69:bd:82:2b:30:34:30:d7: 58:cb:4a:93:37:d4:83:23:fb:e1:c6:42:f8:ed:17: 9b:e5:03:16:1a:5c:84:91:67:46:5e:ee:5c:90:f9: d7:03:c0:a7:04:2d:66:da:6e:4d:1b:92:dc:39:be: cf:01:29:de:5c:c0:9a:54:b8:f3:ff:8e:fd:cc:3b: 0f:bf:70:85:89:5e:47:ba:02:35:fd:b6:95:f6:1f: 7b:6f:3f:c6:10:16:b9:d7:e4:25:16:f6:1d:08:ce: 55:72:e2:c1:a7:05:4a:0d:f8:94:f7:c4:46:61:94: 78:63:74:a7:1c:27:24:3d:1a:4f:5a:96:d5:89:0f: ba:5d:5a:e9:f2:d7:9d:ae:7e:1a:4e:13:ed:9f:91: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:1A:81:18:6E:C1:F7:DB:71:1B:9D:44:3E:A8:05:CF:72:2A:6D X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:72:f0:58:fb:ee:30:06:b5:6a:50:46:41:f7:56:4f:ee:5f: ee:42:14:ff:3d:10:18:83:0d:b5:69:a9:02:99:68:d5:67:84: 4f:c8:80:ac:47:15:1b:f2:46:36:cf:f2:14:1a:c5:a9:c0:b4: 77:0b:ce:a9:2c:7d:14:26:81:cc:72:f1:b3:a2:08:5e:90:3e: 30:f8:3d:3c:43:84:f0:7b:b2:30:ad:d2:2c:7c:80:ff:41:5c: 7d:be:ff:a9:18:11:c1:f9:50:b6:f5:3a:61:a9:4b:85:5e:25: 43:8f:92:7b:a3:3d:d4:00:96:fd:6b:01:33:99:de:e3:64:0c: 52:b9:59:e4:72:db:b9:d7:99:cb:75:6d:4f:90:53:c7:84:90: d9:3b:1d:28:b8:2b:bc:ff:37:33:c5:c8:cf:ec:7a:58:df:6d: 6c:9c:c3:54:8c:bc:c8:41:a7:0a:bc:a5:ea:6a:da:ce:de:b4: 59:e6:84:5c:d0:e0:0a:e1:04:f1:90:ea:3e:fc:91:fa:09:fc: e9:10:9f:0a:af:84:c4:fc:fa:4b:37:c3:b3:84:c9:30:aa:9a: 42:4a:dc:a0:ca:c4:13:60:f5:04:48:59:e0:bb:df:89:6b:00: fb:db:ee:45:e5:85:61:a9:b4:87:23:ae:51:e6:fc:20:ee:57: f3:be:64:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjYwNTEyMjIwMjE2WhcNMjYwNTE5MjIwMjE2WjAYMRYwFAYD VQQDEw02YTAzYTM2OC05M2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31E1iJlJljoO5aHWjvhLmJLDAJ4+j2PCf5SEGdXHz7pV7ipweIQtob0mmKd9 p72tlhWbjO5OKNGxwv4Exm1nDbtY8uRnhYRRo/Aq2KC2wIRG9wnfyIMmwPjFJ6eh CQb8TcDey57URc1cVOlqpuMyab2CKzA0MNdYy0qTN9SDI/vhxkL47Reb5QMWGlyE kWdGXu5ckPnXA8CnBC1m2m5NG5LcOb7PASneXMCaVLjz/479zDsPv3CFiV5HugI1 /baV9h97bz/GEBa51+QlFvYdCM5VcuLBpwVKDfiU98RGYZR4Y3SnHCckPRpPWpbV iQ+6XVrp8tedrn4aThPtn5G+4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrgGoEY bsH323EbnUQ+qAXPciptMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXLwWPvuMAa1alBGQfdWT+5f7kIU/z0QGIMNtWmpAplo1WeET8iArEcVG/JG Ns/yFBrFqcC0dwvOqSx9FCaBzHLxs6IIXpA+MPg9PEOE8HuyMK3SLHyA/0Fcfb7/ qRgRwflQtvU6YalLhV4lQ4+Se6M91ACW/WsBM5ne42QMUrlZ5HLbudeZy3VtT5BT x4SQ2TsdKLgrvP83M8XIz+x6WN9tbJzDVIy8yEGnCryl6mrazt60WeaEXNDgCuEE 8ZDqPvyR+gn86RCfCq+ExPz6SzfDs4TJMKqaQkrcoMrEE2D1BEhZ4LvfiWsA+9vu ReWFYam0hyOuUeb8IO5X875kMA== -----END CERTIFICATE-----Generated at Wed May 13 14:20:52 2026 by rpki-client