$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: Fu31t9qyla+j7xAPjEWSOOqZmdurbeg4bUn3NqTc5hc= Subject key identifier: 0F:89:3E:C6:1B:71:AB:C2:CF:16:6C:B6:A2:F8:10:67:76:57:5B:E6 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01F9 Signing time: Wed 13 May 2026 03:19:08 +0000 Manifest this update: Wed 13 May 2026 03:19:08 +0000 Manifest next update: Wed 20 May 2026 03:19:08 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: mfIwqxlW7IzaVSHHKxSYA+udZ+ZCx2fhPb8/4/2CktM=) 2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=) 3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: May 13 03:19:08 2026 GMT Not After : May 20 03:19:08 2026 GMT Subject: CN=6a03edac-248b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:d3:ad:db:2a:93:e8:1e:15:72:8e:49:61: 55:b7:c5:dd:0e:eb:40:71:a3:44:78:36:5a:c2:6f: 3c:64:a7:b5:f8:7f:be:67:18:ab:97:fe:c0:74:18: 18:68:19:8f:d3:6d:e9:e7:a8:bc:cb:14:76:fe:96: f6:3b:68:02:05:5c:18:16:f0:76:5e:d1:a3:8b:53: 1f:98:d7:9c:45:63:f2:83:2b:3d:7e:cf:96:69:73: f2:96:06:97:f5:d2:a0:e2:c8:50:b2:23:ab:60:75: 8e:d6:28:ff:bc:31:2d:1d:bf:d8:11:70:d4:17:ef: cb:be:50:0b:74:53:7a:fe:48:3c:1a:77:59:0b:a0: af:2d:d7:1b:2f:18:74:84:cc:90:0f:2b:cb:81:bf: d5:5e:cf:95:23:cc:af:22:b7:87:64:d1:b6:c1:1c: 7c:cc:da:38:54:7c:bc:82:d6:16:d6:fe:cf:57:a7: aa:31:69:49:a4:ed:83:d3:d8:dc:82:c5:d3:33:d6: a6:b9:40:1a:46:5e:23:c4:50:3e:39:a7:c1:c0:bf: e8:bc:1c:70:9a:67:f1:a6:2e:cb:43:06:5e:7b:00: 08:70:a9:ad:66:79:e9:04:c0:e1:8a:62:fb:59:76: 3c:d0:b6:e0:c9:b8:5a:28:84:8c:0a:c0:ef:0d:9e: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:89:3E:C6:1B:71:AB:C2:CF:16:6C:B6:A2:F8:10:67:76:57:5B:E6 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6f:b8:4c:5d:07:a2:a9:cc:0e:35:72:68:9d:01:ff:db:fa: ef:95:79:aa:a5:ae:a4:58:03:5c:07:d8:27:10:58:37:d1:2c: 5d:3f:58:ea:b9:bd:dd:c9:71:ee:e4:2d:06:a9:9b:23:86:1d: 70:cf:fb:a6:bf:29:00:2e:0e:b9:df:28:3d:d0:f6:21:12:e2: 44:de:83:87:10:d2:64:7f:7c:46:23:55:8b:7f:99:7d:7a:d7: ef:c5:29:f3:62:e5:1d:a9:50:89:50:17:8a:54:45:2f:30:99: e8:55:57:4d:8a:34:1b:60:a8:69:d6:15:e7:29:d0:b0:79:87: 67:ee:b0:32:4f:71:dd:d5:bd:b0:9d:1a:d7:ff:98:93:a0:14: 16:47:cd:c4:30:93:f3:c7:84:ec:cc:17:83:8f:8a:bb:dc:98: f9:cd:d0:29:c6:68:76:95:e8:94:13:3e:b1:17:12:ca:e9:03: fa:a6:71:a2:1f:4f:38:59:24:f0:ba:17:3c:89:27:01:8f:58: 12:a9:bf:aa:74:6c:e5:72:67:76:ac:8d:4a:27:ac:c1:37:c7: f0:c0:0b:b0:ed:26:6e:c7:78:ef:63:c3:77:95:e9:b2:e2:02: 47:37:ec:b2:20:6a:64:ab:f0:19:85:46:20:82:36:36:68:ac: e3:3c:4a:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwNTEzMDMxOTA4WhcNMjYwNTIwMDMxOTA4WjAYMRYwFAYD VQQDEw02YTAzZWRhYy0yNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0nTrdsqk+geFXKOSWFVt8XdDutAcaNEeDZawm88ZKe1+H++Zxirl/7AdBgY aBmP023p56i8yxR2/pb2O2gCBVwYFvB2XtGji1MfmNecRWPygys9fs+WaXPylgaX 9dKg4shQsiOrYHWO1ij/vDEtHb/YEXDUF+/LvlALdFN6/kg8GndZC6CvLdcbLxh0 hMyQDyvLgb/VXs+VI8yvIreHZNG2wRx8zNo4VHy8gtYW1v7PV6eqMWlJpO2D09jc gsXTM9amuUAaRl4jxFA+OafBwL/ovBxwmmfxpi7LQwZeewAIcKmtZnnpBMDhimL7 WXY80LbgybhaKISMCsDvDZ6IswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+JPsYb cavCzxZstqL4EGd2V1vmMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAW+4TF0HoqnMDjVyaJ0B/9v675V5qqWupFgDXAfYJxBYN9EsXT9Y6rm93clx 7uQtBqmbI4YdcM/7pr8pAC4Oud8oPdD2IRLiRN6DhxDSZH98RiNVi3+ZfXrX78Up 82LlHalQiVAXilRFLzCZ6FVXTYo0G2CoadYV5ynQsHmHZ+6wMk9x3dW9sJ0a1/+Y k6AUFkfNxDCT88eE7MwXg4+Ku9yY+c3QKcZodpXolBM+sRcSyukD+qZxoh9POFkk 8LoXPIknAY9YEqm/qnRs5XJndqyNSieswTfH8MALsO0mbsd472PDd5XpsuICRzfs siBqZKvwGYVGIII2Nmis4zxKFA== -----END CERTIFICATE-----Generated at Wed May 13 12:11:30 2026 by rpki-client