$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: F8jCqRcr1d7YDluX0YLAGl0/UhdsM5PsWw69aj99NsQ= Subject key identifier: F4:E9:A3:5B:9F:97:1D:68:07:FE:F9:04:BE:DC:35:5D:A1:F7:F2:90 Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 024C Signing time: Wed 13 May 2026 02:25:45 +0000 Manifest this update: Wed 13 May 2026 02:25:45 +0000 Manifest next update: Wed 20 May 2026 02:25:45 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: jzw8Hia6nIK+OAwBLXl/eDkOZeKwQNlaYTU07Y7GpHo=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: May 13 02:25:45 2026 GMT Not After : May 20 02:25:45 2026 GMT Subject: CN=6a03e129-7828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:62:b2:b8:df:56:2d:bf:7c:0d:b3:8c:0f: 6f:ba:18:30:d3:ce:3c:81:c1:f3:63:eb:ee:1d:6b: 67:88:97:b3:67:15:7f:e1:54:a5:17:25:db:3c:f1: b2:00:cc:21:e0:d5:c9:e1:a5:46:aa:5e:c5:79:c9: 93:ee:16:99:59:9e:28:91:4c:f2:7d:d7:a7:c8:b6: c8:a6:d1:3a:cc:3d:61:34:32:b4:7a:ea:a1:88:b5: 47:22:54:ef:ad:e0:f9:1a:86:70:37:a3:fe:1b:f5: 41:89:d2:26:2b:2e:d1:b3:fd:b0:0f:00:f5:9d:c9: 3b:42:5e:b5:12:83:ca:00:7b:91:0b:e9:0f:c2:84: 88:79:f8:a4:0c:94:08:31:a8:c4:68:45:7b:61:e4: 54:69:e4:f0:a9:e8:78:fc:37:56:66:3e:ef:3b:c9: d8:3b:05:7f:28:a2:38:d0:e0:6e:a2:5f:49:a8:a6: 75:4a:6f:d4:0e:72:fe:78:9a:ce:b6:43:fe:de:b5: b1:e8:f6:b5:34:07:6e:3e:e8:0f:90:c6:be:86:ee: 7d:2e:90:b5:a4:bc:fb:7d:a3:88:cd:8d:70:08:3c: 8a:9c:5f:29:35:a0:31:76:1c:c0:88:6d:19:7c:ff: af:48:61:a2:78:ee:33:b1:a4:94:36:ba:14:d1:d2: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:A3:5B:9F:97:1D:68:07:FE:F9:04:BE:DC:35:5D:A1:F7:F2:90 X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:14:32:2c:14:0a:79:32:52:93:6d:40:17:26:e8:89:85: 84:18:84:99:88:a1:fc:4f:53:c2:a6:20:bf:8f:b5:5c:10:6a: f8:a4:fd:76:f4:91:b0:b4:f1:ad:06:3a:36:c4:3a:90:2a:ba: 90:c7:6e:0e:a2:33:06:cd:b7:ef:24:4e:d2:4f:84:2a:a1:35: c1:60:59:3e:34:42:0e:4b:f9:ef:bd:41:c6:58:00:9b:ab:ad: d8:fc:7e:d7:9b:4f:88:d1:8b:ae:03:6c:81:6b:f9:75:9d:39: 75:70:80:ca:83:58:a2:f8:cd:8c:51:17:ee:86:34:29:0f:92: 32:77:40:dd:41:8d:aa:5e:c9:71:6b:f9:b5:a4:02:12:34:7f: 6f:5a:1d:ae:86:4e:94:3b:05:1f:e6:3c:a1:d4:1f:54:4f:c2: 78:20:50:91:82:d5:d3:be:61:b1:a2:7b:18:5e:08:bf:45:93: 75:ef:bf:31:f9:b4:9c:c1:1d:b9:67:e0:84:be:1d:35:6e:7e: 66:5e:34:4e:f8:1c:70:c2:18:78:b7:ee:d2:40:ff:dd:7b:05: df:8e:df:78:c1:b4:59:84:46:d2:90:30:ec:79:28:45:05:5f: d2:d8:bf:bc:5e:46:12:98:3d:a9:80:fa:06:f8:65:5d:62:2a: 6f:af:5f:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjYwNTEzMDIyNTQ1WhcNMjYwNTIwMDIyNTQ1WjAYMRYwFAYD VQQDEw02YTAzZTEyOS03ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApINisrjfVi2/fA2zjA9vuhgw0848gcHzY+vuHWtniJezZxV/4VSlFyXbPPGy AMwh4NXJ4aVGql7FecmT7haZWZ4okUzyfdenyLbIptE6zD1hNDK0euqhiLVHIlTv reD5GoZwN6P+G/VBidImKy7Rs/2wDwD1nck7Ql61EoPKAHuRC+kPwoSIefikDJQI MajEaEV7YeRUaeTwqeh4/DdWZj7vO8nYOwV/KKI40OBuol9JqKZ1Sm/UDnL+eJrO tkP+3rWx6Pa1NAduPugPkMa+hu59LpC1pLz7faOIzY1wCDyKnF8pNaAxdhzAiG0Z fP+vSGGieO4zsaSUNroU0dK3pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTpo1uf lx1oB/75BL7cNV2h9/KQMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMm8UMiwUCnkyUpNtQBcm6ImFhBiEmYih/E9TwqYgv4+1XBBq+KT9dvSRsLTx rQY6NsQ6kCq6kMduDqIzBs237yRO0k+EKqE1wWBZPjRCDkv5771BxlgAm6ut2Px+ 15tPiNGLrgNsgWv5dZ05dXCAyoNYovjNjFEX7oY0KQ+SMndA3UGNql7JcWv5taQC EjR/b1odroZOlDsFH+Y8odQfVE/CeCBQkYLV075hsaJ7GF4Iv0WTde+/Mfm0nMEd uWfghL4dNW5+Zl40TvgccMIYeLfu0kD/3XsF347feMG0WYRG0pAw7HkoRQVf0ti/ vF5GEpg9qYD6BvhlXWIqb69fRg== -----END CERTIFICATE-----Generated at Wed May 13 14:29:12 2026 by rpki-client