$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: SfI6PC2gUteJ2bCZuGz9Su17hr34mzloElDE+hGuLpc= Subject key identifier: 14:6D:60:08:6E:55:CD:32:17:32:BB:55:8D:09:18:67:62:61:67:A6 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02D6 Signing time: Wed 13 May 2026 01:36:59 +0000 Manifest this update: Wed 13 May 2026 01:36:58 +0000 Manifest next update: Wed 20 May 2026 01:36:58 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: mnfL3IncZN6NieZGOKkNbmJ9l3ItIyCeRIOSde/tlhM=) 2: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) 4: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 6: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) 7: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) 8: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: May 13 01:36:58 2026 GMT Not After : May 20 01:36:58 2026 GMT Subject: CN=6a03d5bb-0eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:7d:c3:fe:f7:39:fa:6e:c9:bd:bd:e1:66: 61:20:47:0d:94:c0:62:6d:34:4b:7b:1a:aa:c0:e5: ed:51:ff:a9:58:2d:7e:04:b3:03:14:82:85:1d:43: d2:f7:df:26:28:3d:18:10:e5:20:df:e5:6b:de:12: 33:20:dd:24:f2:74:2b:51:6d:a1:1d:c9:ef:03:56: 3b:68:49:72:79:8c:1c:79:06:00:d0:bc:d3:d3:78: 17:60:d0:34:e3:6d:68:f8:3d:b3:a9:e5:f8:ee:90: b6:ea:30:e6:ac:56:45:4c:d9:bc:c0:c3:55:2d:ce: 7f:aa:75:9c:6f:f4:63:cd:81:a5:2e:63:86:89:0d: af:84:54:50:18:8c:f7:82:af:6f:97:4e:89:f4:02: e4:3e:30:34:c1:d4:2a:ea:8e:51:24:05:91:cd:e1: bf:7d:89:9c:4c:93:bd:b1:ee:ec:83:93:93:f0:b8: 9b:c9:47:2b:e1:50:ae:80:24:c9:47:ea:5c:e6:31: a1:c5:cc:a2:e1:50:7a:b0:ad:eb:51:50:9d:12:6d: 95:f3:c0:f7:c3:3e:b5:e8:04:78:32:82:34:fa:b6: b3:17:db:40:cc:22:c0:e7:5d:1a:af:66:29:ec:66: 29:0c:0f:a0:e1:70:06:b8:d1:ee:8f:7b:cf:0a:6c: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6D:60:08:6E:55:CD:32:17:32:BB:55:8D:09:18:67:62:61:67:A6 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ef:e6:52:13:b7:c1:4a:fc:0d:98:08:ea:c6:07:7a:9d:96: 0b:70:72:bf:df:59:66:13:7a:4e:59:6b:bc:26:1f:22:87:fe: 2c:de:a1:da:80:0f:c6:57:64:2e:b9:92:d9:27:24:cc:d6:a1: 0e:d0:64:2b:cf:8b:5e:c9:13:4c:45:9a:0f:79:c8:ae:15:dc: 61:65:54:c8:b8:86:41:95:7a:6f:78:db:db:7d:be:8e:ca:a0: d3:2c:c3:b9:39:4c:e6:11:ac:01:90:2e:97:cb:02:9a:c4:ba: 50:b0:8a:26:6a:01:b6:8e:d4:53:6a:74:6c:6c:9e:75:fe:1f: a8:be:58:9e:2b:9d:a4:3c:24:b4:24:b6:a4:6f:15:63:a2:45: 44:51:48:24:42:f3:50:5e:81:1e:29:c7:90:1d:68:70:54:06: 7e:62:a4:20:57:ab:f8:c7:3e:e4:b0:d4:07:49:71:73:26:77: df:24:59:ce:c9:53:f1:30:9b:41:f1:6c:27:3d:55:07:9d:33: 68:bf:dd:5a:13:bc:0c:78:e0:dd:11:29:79:e6:3e:ef:d6:9d: 7a:1f:af:bf:9c:32:b7:01:c4:be:c2:b6:23:1e:3b:f3:64:0a: fd:31:42:09:f4:74:55:53:73:6d:14:6d:64:42:c6:f8:53:41: 1b:05:34:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNTEzMDEzNjU4WhcNMjYwNTIwMDEzNjU4WjAYMRYwFAYD VQQDEw02YTAzZDViYi0wZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjwh9w/73Ofpuyb294WZhIEcNlMBibTRLexqqwOXtUf+pWC1+BLMDFIKFHUPS 998mKD0YEOUg3+Vr3hIzIN0k8nQrUW2hHcnvA1Y7aElyeYwceQYA0LzT03gXYNA0 421o+D2zqeX47pC26jDmrFZFTNm8wMNVLc5/qnWcb/RjzYGlLmOGiQ2vhFRQGIz3 gq9vl06J9ALkPjA0wdQq6o5RJAWRzeG/fYmcTJO9se7sg5OT8LibyUcr4VCugCTJ R+pc5jGhxcyi4VB6sK3rUVCdEm2V88D3wz616AR4MoI0+razF9tAzCLA510ar2Yp 7GYpDA+g4XAGuNHuj3vPCmxGpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRtYAhu Vc0yFzK7VY0JGGdiYWemMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjO/mUhO3wUr8DZgI6sYHep2WC3Byv99ZZhN6TllrvCYfIof+LN6h2oAPxldk LrmS2SckzNahDtBkK8+LXskTTEWaD3nIrhXcYWVUyLiGQZV6b3jb232+jsqg0yzD uTlM5hGsAZAul8sCmsS6ULCKJmoBto7UU2p0bGyedf4fqL5YniudpDwktCS2pG8V Y6JFRFFIJELzUF6BHinHkB1ocFQGfmKkIFer+Mc+5LDUB0lxcyZ33yRZzslT8TCb QfFsJz1VB50zaL/dWhO8DHjg3REpeeY+79adeh+vv5wytwHEvsK2Ix4782QK/TFC CfR0VVNzbRRtZELG+FNBGwU0Yg== -----END CERTIFICATE-----Generated at Wed May 13 04:01:54 2026 by rpki-client