$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: YEC4z+lpNmURux6fqotMC3OwnGo7LtmXpB5fRl6ZE8M= Subject key identifier: EE:40:9E:B4:0E:12:2D:39:B8:FC:FE:B3:A4:CD:1E:3D:B5:C4:6D:AA Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0C7E Signing time: Tue 12 May 2026 18:41:57 +0000 Manifest this update: Tue 12 May 2026 18:41:56 +0000 Manifest next update: Tue 19 May 2026 18:41:56 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: Jp6bgftyFresMOMPDrLX90Xpu0ibYagzvhYA5RzXDg4=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: v3KWCKQioly5U45019IwNwKf+DqRI3FGebku0Ww86z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: May 12 18:41:56 2026 GMT Not After : May 19 18:41:56 2026 GMT Subject: CN=6a037475-7d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:ec:5b:6d:a2:ce:09:44:5c:09:f6:85:cf: 2d:c6:27:a5:6d:65:ab:eb:cb:7c:c3:7d:9d:c7:ed: b4:f8:c3:0d:df:fc:fe:65:84:c8:45:c5:a3:34:b1: 35:2c:d9:c2:83:12:65:7b:f6:54:06:d4:05:7e:09: 68:f0:3a:07:ba:2f:a5:25:00:cc:62:05:dc:45:d0: 7b:a0:78:33:42:75:66:a7:96:08:fb:ec:3d:35:57: 15:6a:54:46:e8:65:24:e1:47:d2:f9:51:4f:e2:9a: 51:9f:8e:76:37:00:49:d4:2d:cd:56:6b:b7:e7:e7: b7:bc:a3:e7:35:d4:e4:c9:a9:aa:ca:d2:5b:0b:08: cc:aa:0b:08:2a:82:56:89:79:9e:7c:bc:27:57:ea: a5:61:55:f7:01:84:df:c8:c2:32:c2:32:68:5a:82: 6e:f3:89:d4:d5:1e:5c:36:54:6b:fb:93:7b:b5:b6: 2d:36:da:a1:7e:84:1e:b0:7c:4f:f1:bb:e0:23:1a: 78:8c:bd:76:cd:94:ed:ca:51:4d:d2:d9:e3:64:12: 22:09:68:1c:a7:33:5a:df:98:0d:3b:c4:b5:dc:e1: ab:ec:0b:7b:e0:34:83:fe:a7:c5:3a:4e:84:c6:08: 49:c9:a5:34:0b:7b:a9:ce:e6:91:ed:3b:f9:9b:1d: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:40:9E:B4:0E:12:2D:39:B8:FC:FE:B3:A4:CD:1E:3D:B5:C4:6D:AA X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:df:fb:95:0c:d6:5b:58:09:b8:c4:60:63:0e:48:af:d7:f2: 5c:56:0d:44:2b:8b:f9:c2:01:f0:ad:2b:30:44:31:da:9c:c7: 7b:6a:e7:bf:94:5d:1f:c6:e0:48:99:d7:c8:34:3b:0c:39:68: 9c:ec:1a:0a:22:06:ff:63:14:56:a2:d4:c3:b6:b1:16:fa:7b: 0d:d6:26:b6:fc:09:d1:1d:b1:b3:75:28:26:30:ff:98:35:fa: 4e:bd:53:fa:cc:8e:0c:f2:60:c1:e0:8a:04:a9:4e:ac:53:c8: 98:f7:5d:e3:bf:79:dc:11:28:ae:2f:be:0e:0f:37:fe:a6:09: 43:5c:2c:0c:92:2a:f9:5c:7f:63:68:86:5d:ba:b2:53:30:66: f5:f9:ea:ac:83:86:0b:97:ca:0b:f0:3a:45:c7:37:59:85:2d: 12:5e:82:7d:3c:35:69:31:e3:27:67:3f:f4:35:d4:76:88:d1: 4f:6f:a4:d4:72:e3:78:0d:21:13:83:b2:21:c9:79:8e:8e:05: 24:86:e4:55:fc:4a:7a:2e:03:2d:ca:c5:ab:b3:eb:28:8f:ef: 0e:4b:61:ab:38:c2:d9:c2:72:57:45:47:ea:3d:1b:e2:55:d7: e2:0c:d5:6c:5d:5c:0a:12:6c:05:11:89:02:c4:c4:41:43:2a: 86:88:22:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjYwNTEyMTg0MTU2WhcNMjYwNTE5MTg0MTU2WjAYMRYwFAYD VQQDEw02YTAzNzQ3NS03ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/vsW22izglEXAn2hc8txielbWWr68t8w32dx+20+MMN3/z+ZYTIRcWjNLE1 LNnCgxJle/ZUBtQFfglo8DoHui+lJQDMYgXcRdB7oHgzQnVmp5YI++w9NVcValRG 6GUk4UfS+VFP4ppRn452NwBJ1C3NVmu35+e3vKPnNdTkyamqytJbCwjMqgsIKoJW iXmefLwnV+qlYVX3AYTfyMIywjJoWoJu84nU1R5cNlRr+5N7tbYtNtqhfoQesHxP 8bvgIxp4jL12zZTtylFN0tnjZBIiCWgcpzNa35gNO8S13OGr7At74DSD/qfFOk6E xghJyaU0C3upzuaR7Tv5mx1WmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5AnrQO Ei05uPz+s6TNHj21xG2qMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9/7lQzWW1gJuMRgYw5Ir9fyXFYNRCuL+cIB8K0rMEQx2pzHe2rnv5RdH8bg SJnXyDQ7DDlonOwaCiIG/2MUVqLUw7axFvp7DdYmtvwJ0R2xs3UoJjD/mDX6Tr1T +syODPJgweCKBKlOrFPImPdd47953BEori++Dg83/qYJQ1wsDJIq+Vx/Y2iGXbqy UzBm9fnqrIOGC5fKC/A6Rcc3WYUtEl6CfTw1aTHjJ2c/9DXUdojRT2+k1HLjeA0h E4OyIcl5jo4FJIbkVfxKei4DLcrFq7PrKI/vDkthqzjC2cJyV0VH6j0b4lXX4gzV bF1cChJsBRGJAsTEQUMqhogiAA== -----END CERTIFICATE-----Generated at Wed May 13 04:05:21 2026 by rpki-client