$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: BFf8O3h4xgRJJlRLinn6GNJQXr45s3bqgcuSaeV8Jo4= Subject key identifier: D4:17:43:93:68:BC:12:D7:6B:D0:19:CB:75:2D:19:DC:87:9D:31:C2 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 01CB Signing time: Mon 11 May 2026 03:54:24 +0000 Manifest this update: Mon 11 May 2026 03:54:24 +0000 Manifest next update: Mon 18 May 2026 03:54:24 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: 23E+Q+iNS/tYaKkwepA8t8D+pDchjFIFl2QMuqT6phw=) 2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: May 11 03:54:24 2026 GMT Not After : May 18 03:54:24 2026 GMT Subject: CN=6a0152f0-f5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:a1:fb:5e:b5:0c:ee:85:31:63:19:2c:48: 75:16:fb:26:c2:06:4e:03:51:9d:9e:5d:34:28:2b: 92:ff:f8:7a:b6:04:82:0f:00:74:aa:ba:0d:79:21: ee:82:09:fb:a7:7b:57:46:ea:aa:74:96:29:7c:aa: 3a:35:64:9e:89:44:9d:d8:e0:87:bf:68:6d:0d:7f: 34:3b:cb:f0:4f:a5:4a:72:71:94:c8:6d:8f:8d:91: c1:6d:c0:09:79:12:94:c6:57:57:c9:64:92:ed:3b: 68:a1:d6:6f:61:ef:0d:12:21:05:32:3d:82:ab:56: 00:ad:88:42:cf:82:10:14:e1:4a:68:29:98:51:e9: 36:51:c4:eb:13:97:38:72:8e:34:2c:e7:33:67:55: 02:02:38:22:b1:ce:7c:f4:0f:4d:d2:a5:15:6a:04: 7c:f6:b8:4e:f8:5e:ca:ef:53:fd:ba:59:82:35:4e: 51:c1:a0:2a:a2:6d:5e:8e:87:21:2a:1c:60:0b:7f: 40:67:c2:3b:9b:ba:cf:60:b3:91:59:7d:3e:6c:8f: bc:54:f5:5c:6e:3b:60:b5:ba:8e:67:59:3f:f0:37: cd:b8:05:47:0d:99:08:6e:2f:4e:31:02:29:4c:a7: e7:8b:8f:73:db:14:bd:0c:ff:2b:7f:39:0c:b5:33: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:17:43:93:68:BC:12:D7:6B:D0:19:CB:75:2D:19:DC:87:9D:31:C2 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:8f:8a:cb:ac:9b:32:2f:4b:30:5f:c0:18:ed:b4:ba:7e: 5e:3c:26:5a:93:ae:62:56:7f:c9:d0:be:e3:22:65:f5:f3:b5: 2b:28:37:8e:ff:6b:f1:83:ce:ff:c8:79:33:6c:df:5d:82:d9: 53:5d:e2:ef:3e:3f:7b:b4:00:88:6b:5a:82:d4:6a:f9:54:bb: c3:1c:9d:1c:d5:c8:e5:dc:fc:5a:c2:3c:4f:fc:ea:9c:fc:03: c6:47:03:2f:a5:85:a2:c2:43:63:6c:04:67:ce:fb:2f:9b:13: c4:bd:e6:42:08:a5:1a:e4:32:96:0f:1e:12:88:c9:3b:1b:d2: b7:ce:96:90:3b:db:3b:14:b7:b2:f4:ab:c9:04:65:5a:7c:a5: 7c:7b:c8:ca:93:3a:86:66:bc:ef:8d:bf:43:ad:4e:f9:13:76: 30:1f:06:1c:0a:0b:56:e6:0f:55:80:1e:20:ea:fe:89:de:05: 1e:da:f7:45:0d:a1:5a:d9:b4:75:8e:4c:eb:09:7b:cf:66:45: cc:c4:86:f0:58:7f:d1:95:33:be:62:66:95:61:7d:86:b8:81: a9:eb:11:af:da:86:a1:ce:2b:da:29:cc:e7:54:73:31:0e:85: 4c:84:3c:0b:83:09:58:f3:ba:96:24:21:f7:a0:34:39:f4:01: 34:27:bd:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjYwNTExMDM1NDI0WhcNMjYwNTE4MDM1NDI0WjAYMRYwFAYD VQQDEw02YTAxNTJmMC1mNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpSh+161DO6FMWMZLEh1FvsmwgZOA1Gdnl00KCuS//h6tgSCDwB0qroNeSHu ggn7p3tXRuqqdJYpfKo6NWSeiUSd2OCHv2htDX80O8vwT6VKcnGUyG2PjZHBbcAJ eRKUxldXyWSS7TtoodZvYe8NEiEFMj2Cq1YArYhCz4IQFOFKaCmYUek2UcTrE5c4 co40LOczZ1UCAjgisc589A9N0qUVagR89rhO+F7K71P9ulmCNU5RwaAqom1ejoch KhxgC39AZ8I7m7rPYLORWX0+bI+8VPVcbjtgtbqOZ1k/8DfNuAVHDZkIbi9OMQIp TKfni49z2xS9DP8rfzkMtTNU5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQXQ5No vBLXa9AZy3UtGdyHnTHCMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQhSPisusmzIvSzBfwBjttLp+XjwmWpOuYlZ/ydC+4yJl9fO1Kyg3jv9r8YPO /8h5M2zfXYLZU13i7z4/e7QAiGtagtRq+VS7wxydHNXI5dz8WsI8T/zqnPwDxkcD L6WFosJDY2wEZ877L5sTxL3mQgilGuQylg8eEojJOxvSt86WkDvbOxS3svSryQRl WnylfHvIypM6hma8742/Q61O+RN2MB8GHAoLVuYPVYAeIOr+id4FHtr3RQ2hWtm0 dY5M6wl7z2ZFzMSG8Fh/0ZUzvmJmlWF9hriBqesRr9qGoc4r2inM51RzMQ6FTIQ8 C4MJWPO6liQh96A0OfQBNCe9yA== -----END CERTIFICATE-----Generated at Wed May 13 05:31:09 2026 by rpki-client