$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: WLXNR57he1FPbZlyClhPkR+UaVusqMuHjeCAFUh+m1c= Subject key identifier: D3:C7:0D:11:B8:CC:93:8D:F1:07:01:E0:2E:C6:75:1C:75:E5:54:3B Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 0150 Signing time: Wed 13 May 2026 05:11:50 +0000 Manifest this update: Wed 13 May 2026 05:11:49 +0000 Manifest next update: Wed 20 May 2026 05:11:49 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: 1TZEAujI/mJHH0Meejfl0j/BrqnItQpcpIamP4Dpm6Y=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: rQPLuDedWDyQSG967e0npTQmvnHAr1Plxeiiz+JB7Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: May 13 05:11:49 2026 GMT Not After : May 20 05:11:49 2026 GMT Subject: CN=6a040815-56d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:21:e3:31:54:33:e5:27:25:e1:06:c9:44: 97:ea:58:ae:f8:3b:10:55:4a:32:85:2c:d2:87:65: 79:7e:d7:1c:c3:95:e6:2d:ff:36:eb:38:02:ce:4b: 9e:74:3d:06:e3:fe:76:f9:35:ad:65:94:09:5a:ac: 12:ae:1b:3c:3b:eb:3f:c5:c2:41:aa:c8:d3:c2:b7: c9:a9:8f:41:af:92:9d:1f:9c:cb:12:de:66:6f:b3: 39:d9:3a:22:c1:cf:c1:c4:7b:ca:97:23:2d:dc:26: bf:3c:ac:78:79:50:96:01:37:5d:c7:11:b1:49:a1: d9:73:0d:9e:4e:46:63:69:34:b9:df:89:44:84:32: 7d:fd:74:1e:c8:65:fb:c8:5f:52:01:4f:21:f5:06: 75:5a:c8:ab:1b:4d:99:27:1e:42:ef:2c:88:9b:44: a7:df:b6:2e:32:78:7e:9a:46:4a:33:30:11:39:0f: b1:01:95:c8:85:30:f9:ca:54:37:8f:4e:4c:c3:a0: 9f:13:5c:b4:f9:5c:98:d5:9f:d7:f2:b6:68:ba:2e: b5:e0:15:b5:e4:75:94:b5:03:b6:d8:75:13:5a:0f: 80:6d:e2:b5:e5:eb:ed:71:03:ce:6d:dd:5f:b8:04: 08:db:91:e1:8f:b6:e3:29:36:f4:4e:50:28:de:73: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:0D:11:B8:CC:93:8D:F1:07:01:E0:2E:C6:75:1C:75:E5:54:3B X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:ea:c2:73:64:d1:3a:a6:a6:bd:8c:08:c5:51:0c:9b:ea: 8d:a2:3d:f5:29:2b:60:5b:92:ea:25:ae:1c:94:0b:9c:4e:d0: 04:b1:94:33:35:72:25:fb:9e:2e:bd:11:7e:34:0c:6f:52:a1: b3:54:e6:1c:5c:c1:b3:fd:d8:6a:d7:35:bd:f1:93:9d:9f:86: 17:c3:a0:db:75:85:ba:4d:03:8d:fe:cb:c0:91:61:2c:e7:8f: ce:67:20:a0:42:db:bd:f4:62:e7:3d:bd:62:b9:07:e7:89:ca: 21:98:43:e0:53:9a:0b:a1:26:16:41:f5:51:2d:0b:00:90:3d: 8f:26:71:e4:2d:1a:3e:f1:80:86:b1:9b:40:99:66:b3:e6:4d: 3d:fe:69:36:b4:fb:61:e4:d3:74:42:81:66:c1:4c:45:43:9c: 71:0b:b8:2e:7e:e2:32:d3:39:49:c6:d8:f7:c3:6c:66:57:77: 08:45:df:b1:f0:03:37:1c:6e:9c:92:35:2b:a9:40:e0:95:71: c6:8f:db:d7:8f:23:aa:cc:3e:b8:b9:d6:db:d0:24:2f:b7:97: 41:f7:54:43:40:2f:9e:7a:f1:35:b1:bb:92:89:7a:b4:29:27: 70:8a:12:be:bb:0b:d5:58:1f:8b:34:01:79:d5:3b:dc:70:fd: 5e:86:1a:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjYwNTEzMDUxMTQ5WhcNMjYwNTIwMDUxMTQ5WjAYMRYwFAYD VQQDEw02YTA0MDgxNS01NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJAh4zFUM+UnJeEGyUSX6liu+DsQVUoyhSzSh2V5ftccw5XmLf826zgCzkue dD0G4/52+TWtZZQJWqwSrhs8O+s/xcJBqsjTwrfJqY9Br5KdH5zLEt5mb7M52Toi wc/BxHvKlyMt3Ca/PKx4eVCWATddxxGxSaHZcw2eTkZjaTS534lEhDJ9/XQeyGX7 yF9SAU8h9QZ1WsirG02ZJx5C7yyIm0Sn37YuMnh+mkZKMzAROQ+xAZXIhTD5ylQ3 j05Mw6CfE1y0+VyY1Z/X8rZoui614BW15HWUtQO22HUTWg+AbeK15evtcQPObd1f uAQI25Hhj7bjKTb0TlAo3nMmCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPHDRG4 zJON8QcB4C7GdRx15VQ7MB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnLqwnNk0Tqmpr2MCMVRDJvqjaI99SkrYFuS6iWuHJQLnE7QBLGUMzVyJfue Lr0RfjQMb1Khs1TmHFzBs/3Yatc1vfGTnZ+GF8Og23WFuk0Djf7LwJFhLOePzmcg oELbvfRi5z29YrkH54nKIZhD4FOaC6EmFkH1US0LAJA9jyZx5C0aPvGAhrGbQJlm s+ZNPf5pNrT7YeTTdEKBZsFMRUOccQu4Ln7iMtM5ScbY98NsZld3CEXfsfADNxxu nJI1K6lA4JVxxo/b148jqsw+uLnW29AkL7eXQfdUQ0AvnnrxNbG7kol6tCkncIoS vrsL1VgfizQBedU73HD9XoYaJw== -----END CERTIFICATE-----Generated at Wed May 13 10:53:07 2026 by rpki-client