$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: Kcy4VPWM5C0HPhZlMAM63F+pGrozZjYE1A2OI/nrMtc= Subject key identifier: 0F:D7:5B:05:94:E9:F2:D6:70:CC:2C:E4:E2:D4:73:4E:27:19:B0:E2 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 4A Signing time: Mon 11 May 2026 08:34:09 +0000 Manifest this update: Mon 11 May 2026 08:34:08 +0000 Manifest next update: Mon 18 May 2026 08:34:08 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: Msskvt1+2YKNvhJsufavbr64ouClf+1Y4g7MbqiE+10=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: May 11 08:34:08 2026 GMT Not After : May 18 08:34:08 2026 GMT Subject: CN=6a019480-d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:03:e7:c3:4a:ab:99:f2:3a:d0:ef:b9:83: 47:e7:aa:21:f4:e4:2a:5b:6f:c0:45:fd:4a:ad:df: 29:99:ea:28:06:fc:e6:e3:8a:99:08:c1:53:f4:14: fa:91:e4:ac:c0:de:f3:37:4f:18:10:d2:06:1c:9c: 42:fc:1d:c7:b3:9c:40:57:0a:b1:29:a3:f9:b9:c7: 1a:39:06:5f:2f:30:bf:e2:a0:f4:e1:f9:36:45:30: c3:59:ec:50:be:df:77:78:96:58:bc:a9:c2:bc:19: d6:9d:da:4c:47:1c:1f:45:87:ae:cc:ec:bc:ac:19: 65:24:c4:a1:43:1c:da:f3:e4:ad:99:3d:28:56:0e: 87:b1:5e:0e:97:04:d6:6b:a6:34:63:c8:19:4f:84: 6d:4d:7e:34:f9:b1:f6:1f:b1:8e:ff:aa:68:d6:50: 0a:13:31:92:ab:fa:44:a3:f7:ea:d4:43:9d:65:45: e4:43:6c:79:01:b4:49:72:51:f3:79:5d:5e:79:61: 30:f6:dc:16:b0:c8:81:0f:1f:36:8d:2a:c2:a3:79: ef:af:6d:75:ed:bd:75:b4:9c:c1:16:e1:b2:86:1a: 30:62:0d:a9:fb:a4:50:b9:0b:38:d9:c2:0e:2b:5f: 57:56:55:df:7d:5d:df:8c:d3:cd:7d:65:ac:9f:1a: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:5B:05:94:E9:F2:D6:70:CC:2C:E4:E2:D4:73:4E:27:19:B0:E2 X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b7:0f:8f:01:9f:3c:d0:ad:df:2a:b8:81:38:e1:8c:b7:65: dd:11:35:61:02:7d:64:36:b3:ce:cd:09:84:51:b8:3a:b4:ff: 6e:f6:01:d5:24:bf:fd:97:b4:e6:10:41:c7:2b:41:fe:07:d3: f6:75:c4:c0:dc:4b:be:06:09:76:37:17:f4:5d:10:c8:2c:d8: 8d:c2:a8:1c:80:37:d3:2b:3f:85:e5:ef:62:da:33:fd:01:84: ff:95:ef:07:20:d1:5a:67:0a:5d:c2:4c:c1:af:b7:b6:d6:ec: 58:0f:2a:f8:9a:2d:44:0b:47:6f:60:a5:48:92:cf:1d:b2:91: ff:ea:e3:cc:9f:56:06:e5:3d:23:18:b3:d0:f6:93:04:35:75: ce:cd:be:8e:4c:bf:6f:44:47:39:4e:27:02:af:fc:ce:be:1f: da:90:b6:ba:6f:e6:7f:9c:29:1d:b8:89:e7:2b:0e:60:ac:e8: 34:f9:7e:8c:ae:2f:3e:33:20:3b:56:74:4c:09:a1:d5:02:6b: 5b:d0:96:7b:2d:cd:8b:63:d7:cf:63:80:d8:a7:41:64:29:ab: 90:bd:ae:61:f4:08:86:bf:10:31:34:80:ad:0b:8e:1c:59:27: d5:a8:52:70:07:4b:0d:b7:cd:31:a1:09:4a:47:14:9e:2a:a8: fb:d8:c6:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjA1MTEwODM0MDhaFw0yNjA1MTgwODM0MDhaMBgxFjAUBgNV BAMTDTZhMDE5NDgwLWQ2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5WQPnw0qrmfI60O+5g0fnqiH05Cpbb8BF/Uqt3ymZ6igG/ObjipkIwVP0FPqR 5KzA3vM3TxgQ0gYcnEL8HceznEBXCrEpo/m5xxo5Bl8vML/ioPTh+TZFMMNZ7FC+ 33d4lli8qcK8Gdad2kxHHB9Fh67M7LysGWUkxKFDHNrz5K2ZPShWDoexXg6XBNZr pjRjyBlPhG1NfjT5sfYfsY7/qmjWUAoTMZKr+kSj9+rUQ51lReRDbHkBtElyUfN5 XV55YTD23BawyIEPHzaNKsKjee+vbXXtvXW0nMEW4bKGGjBiDan7pFC5CzjZwg4r X1dWVd99Xd+M0819ZayfGt1ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD9dbBZTp 8tZwzCzk4tRzTicZsOIwHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBstw+PAZ880K3fKriBOOGMt2XdETVhAn1kNrPOzQmEUbg6tP9u9gHVJL/9l7Tm EEHHK0H+B9P2dcTA3Eu+Bgl2Nxf0XRDILNiNwqgcgDfTKz+F5e9i2jP9AYT/le8H INFaZwpdwkzBr7e21uxYDyr4mi1EC0dvYKVIks8dspH/6uPMn1YG5T0jGLPQ9pME NXXOzb6OTL9vREc5TicCr/zOvh/akLa6b+Z/nCkduInnKw5grOg0+X6Mri8+MyA7 VnRMCaHVAmtb0JZ7Lc2LY9fPY4DYp0FkKauQva5h9AiGvxAxNICtC44cWSfVqFJw B0sNt80xoQlKRxSeKqj72Mbq -----END CERTIFICATE-----Generated at Wed May 13 03:29:27 2026 by rpki-client