$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: vWMeQmxbXCPVgLv7RGngXfeZOE9X1SsFYKTQDc0y+go= Subject key identifier: 7D:D4:CF:24:BB:2B:52:11:5D:69:B4:6E:FA:B3:8A:FA:86:9C:6C:5E Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 010B Signing time: Mon 11 May 2026 06:27:10 +0000 Manifest this update: Mon 11 May 2026 06:27:09 +0000 Manifest next update: Mon 18 May 2026 06:27:09 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: vjnxVqFNLdy99ekSlH4n1/RQ/Ys1w4RY8EJ7ObUPxeo=) 2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) 3: 9CFB6E68291011F1A4B1745D97833773.roa (hash: aehHvD9t7DFT4Rjm26XymMF5OBLncC+QzTFVcD0Y9Lc=) 4: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: May 11 06:27:09 2026 GMT Not After : May 18 06:27:09 2026 GMT Subject: CN=6a0176bd-ddd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:80:89:62:75:73:ed:2b:c8:fc:e8:eb:5c: 9f:41:1d:5c:c0:cb:19:89:71:34:86:b4:58:42:c9: 5f:88:4d:d7:08:67:e9:c2:62:51:26:c4:cd:9c:c3: 24:1e:61:29:9b:a7:81:88:9b:1e:86:01:68:68:27: 0d:45:76:62:31:94:50:d1:eb:ac:6d:0e:ab:83:4f: 42:89:b0:7c:19:5e:31:60:5e:b0:f5:68:93:c6:a9: 9a:ed:85:8b:f4:51:62:3e:2a:a9:04:c2:ad:a8:9f: 4b:c5:48:c7:36:a5:2c:a1:e8:83:90:d1:bb:fa:2d: 8b:1f:04:2b:b0:f5:af:28:3d:30:5f:8a:8b:01:01: 35:95:a6:46:1d:1b:af:a2:8c:59:88:96:40:00:4e: 8b:cc:a8:a6:cc:39:be:be:83:8b:97:03:09:ae:90: 41:c5:a8:0d:e0:12:e7:cd:38:1f:71:59:db:e3:58: d2:2c:61:72:1f:0f:13:2a:4a:7b:7c:29:a2:d1:ff: 90:d6:21:cc:27:ca:a8:b5:a1:14:26:1a:7f:8b:4e: 85:61:aa:c5:18:25:57:f5:08:fc:1b:87:b8:b5:43: d7:92:4a:2b:db:60:a7:07:6e:25:32:16:f1:9e:4d: 0b:66:a3:2a:8b:c9:01:3c:99:05:58:5a:9e:f2:47: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:CF:24:BB:2B:52:11:5D:69:B4:6E:FA:B3:8A:FA:86:9C:6C:5E X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6d:83:47:a8:31:d6:b8:24:d3:8d:32:52:a7:27:f3:02:40: 02:ba:50:58:1e:1b:a9:02:ce:96:cc:59:ac:5b:b6:f7:de:64: a4:7b:7c:ab:a6:93:98:e5:4a:38:1f:b0:b6:fd:f4:94:ae:16: cd:b1:6a:37:a1:24:09:29:a9:df:a8:62:b4:de:2d:aa:69:18: 7e:b4:6f:94:0a:9c:e4:f1:81:67:9c:46:90:e1:df:9c:74:b9: ec:16:cc:66:94:fd:2f:6c:36:e4:a7:3d:78:a6:59:2a:48:cd: af:f7:49:d7:a9:7b:91:be:82:fc:61:b1:60:bb:c8:58:6e:62: ee:8a:3c:1a:fe:a5:50:e3:4d:8c:9a:2d:03:98:d4:3c:c1:ae: 2e:98:e6:7e:d6:0d:37:07:12:00:ed:e8:70:ad:10:af:9f:b8: eb:ac:dd:a0:c1:53:37:a4:b6:1c:e4:39:f2:81:15:1d:b1:eb: 01:e1:a5:11:ae:8a:d6:63:e9:8c:b0:2d:f4:4d:93:9f:7a:4e: 71:38:7d:05:3a:ec:e4:cf:e3:10:3b:f8:a0:0b:9a:78:4b:c7: d9:a6:da:e6:4c:a3:0f:87:48:d6:1b:d4:26:1b:af:9a:02:51: 1e:a2:f1:18:6a:8e:85:3b:4d:2f:73:dd:08:6d:80:75:72:17: 1e:42:42:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwNTExMDYyNzA5WhcNMjYwNTE4MDYyNzA5WjAYMRYwFAYD VQQDEw02YTAxNzZiZC1kZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhWAiWJ1c+0ryPzo61yfQR1cwMsZiXE0hrRYQslfiE3XCGfpwmJRJsTNnMMk HmEpm6eBiJsehgFoaCcNRXZiMZRQ0eusbQ6rg09CibB8GV4xYF6w9WiTxqma7YWL 9FFiPiqpBMKtqJ9LxUjHNqUsoeiDkNG7+i2LHwQrsPWvKD0wX4qLAQE1laZGHRuv ooxZiJZAAE6LzKimzDm+voOLlwMJrpBBxagN4BLnzTgfcVnb41jSLGFyHw8TKkp7 fCmi0f+Q1iHMJ8qotaEUJhp/i06FYarFGCVX9Qj8G4e4tUPXkkor22CnB24lMhbx nk0LZqMqi8kBPJkFWFqe8keqdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3UzyS7 K1IRXWm0bvqzivqGnGxeMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEG2DR6gx1rgk040yUqcn8wJAArpQWB4bqQLOlsxZrFu2995kpHt8q6aTmOVK OB+wtv30lK4WzbFqN6EkCSmp36hitN4tqmkYfrRvlAqc5PGBZ5xGkOHfnHS57BbM ZpT9L2w25Kc9eKZZKkjNr/dJ16l7kb6C/GGxYLvIWG5i7oo8Gv6lUONNjJotA5jU PMGuLpjmftYNNwcSAO3ocK0Qr5+466zdoMFTN6S2HOQ58oEVHbHrAeGlEa6K1mPp jLAt9E2Tn3pOcTh9BTrs5M/jEDv4oAuaeEvH2aba5kyjD4dI1hvUJhuvmgJRHqLx GGqOhTtNL3PdCG2AdXIXHkJCeg== -----END CERTIFICATE-----Generated at Wed May 13 07:54:44 2026 by rpki-client