$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: ZAQOTpZLIqhVNgJQ0KyWgT8nHuZ2vS+PDtQCYUCbK64= Subject key identifier: 45:E2:35:29:D2:B9:08:DF:D2:9A:17:5B:AC:B6:CA:B7:4C:B6:5C:A3 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 012B Signing time: Mon 11 May 2026 05:43:27 +0000 Manifest this update: Mon 11 May 2026 05:43:27 +0000 Manifest next update: Mon 18 May 2026 05:43:27 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: tvvDya9gSvjkP5DlnkoPW3K3Oygbb0H8Sda9Lggs3Do=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: May 11 05:43:27 2026 GMT Not After : May 18 05:43:27 2026 GMT Subject: CN=6a016c7f-8409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:08:d8:30:be:9d:33:cb:b0:2b:f0:8d:3b: cf:64:2b:02:23:c5:71:d0:77:9a:a3:99:c5:2c:71: 07:ba:f0:7d:69:48:69:09:c8:a6:8f:36:07:de:7f: 5a:ff:32:49:8c:e4:65:49:41:45:00:16:4e:37:a5: 2c:8a:57:ca:df:6d:e3:3d:a2:8a:0d:ed:c7:7c:ec: d6:f9:47:03:ff:64:8c:61:15:26:85:ba:fa:be:ae: 02:6e:6c:06:f1:ec:3e:12:7e:ed:cb:ec:b6:4e:86: c0:2c:01:11:f4:01:1b:44:78:c0:8d:8d:cb:8b:5d: a6:39:9d:65:a9:3e:07:d2:8c:9f:06:3b:22:df:d0: f8:b8:4e:d2:ae:ec:af:d1:f4:d2:ab:af:98:83:3c: ef:1f:15:7b:7f:ed:0b:7e:3a:41:c2:6c:3f:6b:cd: 97:cc:cb:a1:e2:48:84:27:7b:cc:c4:d6:32:99:bf: 93:4d:0c:09:a0:84:6e:78:66:fa:b4:e9:25:b2:70: 8b:f4:d8:c2:d0:01:2a:7c:09:54:46:6e:a4:e9:80: 1f:1c:de:18:51:61:1d:76:7c:89:25:2a:a8:c3:7a: 63:06:55:d2:45:29:cf:08:14:e3:e0:b2:50:6a:82: 18:d9:48:82:52:c0:5a:ec:9b:e5:0e:8a:b6:5e:83: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E2:35:29:D2:B9:08:DF:D2:9A:17:5B:AC:B6:CA:B7:4C:B6:5C:A3 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:56:b5:41:01:aa:70:b1:da:8a:cb:f9:c3:8a:95:32:99:30: 40:cb:80:5a:a6:58:dd:6b:9d:90:48:56:34:13:92:ec:32:ae: c6:1a:34:7a:d8:d4:d5:e3:c3:10:33:d1:51:7f:b5:f0:14:e1: c6:80:29:df:88:0f:c0:fb:b2:67:a1:de:41:76:83:da:74:53: 93:1a:c5:a5:74:c6:8a:c9:15:d1:c6:74:e9:f2:6f:f6:1c:08: 76:f4:85:4c:8e:d8:40:67:3c:ee:74:40:5b:77:35:90:cd:c2: f5:dc:27:fc:ac:2c:99:1d:46:c6:e7:3e:8e:7d:24:cf:fd:c1: 53:b8:c2:15:59:30:e4:ac:18:4d:3c:c9:b7:ac:93:21:30:3e: 3c:11:a1:89:f6:51:b7:b8:53:00:e5:fb:39:ce:7c:3e:12:0c: 85:fd:c2:55:70:9e:79:a8:86:bf:d9:58:bb:a5:e4:7c:81:c6: 35:12:75:5d:dc:18:93:ca:c8:14:0d:eb:84:1d:52:8a:6a:da: 01:c5:75:ae:d2:70:f3:82:30:84:a6:b0:67:76:73:21:b5:74: 97:1c:9c:90:13:92:6e:20:bb:4f:1b:14:f7:27:b2:94:c4:e2: 82:d6:04:3e:1d:f8:b2:0c:01:52:21:76:83:9d:be:ee:cd:a6: d3:05:92:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYwNTExMDU0MzI3WhcNMjYwNTE4MDU0MzI3WjAYMRYwFAYD VQQDEw02YTAxNmM3Zi04NDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso4I2DC+nTPLsCvwjTvPZCsCI8Vx0Heao5nFLHEHuvB9aUhpCcimjzYH3n9a /zJJjORlSUFFABZON6UsilfK323jPaKKDe3HfOzW+UcD/2SMYRUmhbr6vq4CbmwG 8ew+En7ty+y2TobALAER9AEbRHjAjY3Li12mOZ1lqT4H0oyfBjsi39D4uE7Sruyv 0fTSq6+YgzzvHxV7f+0LfjpBwmw/a82XzMuh4kiEJ3vMxNYymb+TTQwJoIRueGb6 tOklsnCL9NjC0AEqfAlURm6k6YAfHN4YUWEddnyJJSqow3pjBlXSRSnPCBTj4LJQ aoIY2UiCUsBa7JvlDoq2XoPkMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXiNSnS uQjf0poXW6y2yrdMtlyjMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1a1QQGqcLHaisv5w4qVMpkwQMuAWqZY3WudkEhWNBOS7DKuxho0etjU1ePD EDPRUX+18BThxoAp34gPwPuyZ6HeQXaD2nRTkxrFpXTGiskV0cZ06fJv9hwIdvSF TI7YQGc87nRAW3c1kM3C9dwn/KwsmR1Gxuc+jn0kz/3BU7jCFVkw5KwYTTzJt6yT ITA+PBGhifZRt7hTAOX7Oc58PhIMhf3CVXCeeaiGv9lYu6XkfIHGNRJ1XdwYk8rI FA3rhB1SimraAcV1rtJw84IwhKawZ3ZzIbV0lxyckBOSbiC7TxsU9yeylMTigtYE Ph34sgwBUiF2g52+7s2m0wWSyA== -----END CERTIFICATE-----Generated at Wed May 13 02:56:30 2026 by rpki-client