$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: ouCLZ2AZfsefnxUhH7MMp4sVmSO8kMvPUip3TsB7EZE= Subject key identifier: 4C:F7:AD:CF:36:81:32:4E:5D:D2:8C:32:3F:8D:B6:74:62:17:8F:B7 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 057C Signing time: Tue 12 May 2026 23:22:34 +0000 Manifest this update: Tue 12 May 2026 23:22:33 +0000 Manifest next update: Tue 19 May 2026 23:22:33 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: K4dJnHw9H8HzKlQPr1KmAOawzfIcisayaJtp2SjcYYE=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: TifDEeF2JOdL8j7fTV6ymoUhmjRmDa6hW57MtSf6qzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: May 12 23:22:33 2026 GMT Not After : May 19 23:22:33 2026 GMT Subject: CN=6a03b639-159b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:8e:e7:28:30:40:73:02:21:28:94:da:ca: 36:cd:39:ab:cd:ec:b9:4a:a8:53:d5:93:50:7e:fd: ad:62:bf:03:66:79:1f:ea:6f:36:de:1b:66:80:fe: 17:f6:b8:88:75:0a:3e:b0:e4:86:ad:6e:ee:24:a4: ec:74:b9:75:11:db:c3:04:7a:04:65:ea:45:4a:94: 71:5d:e9:0e:22:5b:09:34:e7:d7:70:43:fa:ad:e9: 2a:06:b0:74:ff:53:36:44:2d:01:47:ef:4d:1f:6b: c2:8f:cd:05:a6:0e:40:79:5e:cb:c9:fa:8f:20:56: b9:17:8a:64:41:98:6b:37:b0:87:87:30:93:5c:db: b9:44:3d:0c:de:b9:96:ed:47:5b:2b:7f:01:59:71: 76:f6:6f:ed:c6:47:73:94:d8:ad:cc:62:09:a7:2d: ff:1f:12:e6:9b:36:66:73:05:66:98:8b:80:f1:9a: eb:2c:87:e1:2e:15:e3:79:37:ed:31:8d:a2:5a:0b: 80:82:cb:da:a9:17:00:c0:f1:2a:5d:68:c6:58:e3: 44:68:03:59:78:63:59:db:c3:c8:05:99:09:39:34: 30:f0:e8:5d:86:48:15:70:a9:a4:48:2a:d7:3e:62: 50:b3:9b:39:05:7d:11:e7:a5:16:a0:b3:e5:06:eb: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:AD:CF:36:81:32:4E:5D:D2:8C:32:3F:8D:B6:74:62:17:8F:B7 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:db:7d:f4:9b:a4:4a:1b:c9:e9:94:0a:14:8c:e6:48:1f:63: 4d:e3:64:1d:98:11:7a:92:b8:03:6d:5a:7b:9e:b6:9c:1b:e6: 28:ba:2f:55:00:bd:c5:a3:fc:7a:2a:6b:f7:db:3b:b9:03:35: de:84:51:af:71:a1:83:ce:bb:1c:28:bf:b4:5c:84:ef:05:ec: 4a:d0:aa:f2:a6:3c:02:45:d6:51:a6:69:10:2c:e8:d0:b6:43: 6a:9f:00:e3:01:fd:0c:46:54:95:90:53:b1:db:75:2e:15:ff: c3:2a:0e:47:e5:b0:28:e1:13:4b:75:1a:38:9f:b9:2a:79:a4: e9:b7:e0:9c:bd:5c:eb:34:51:e6:b7:bf:ad:fc:d7:38:a5:1d: 69:fd:a4:04:f3:84:42:a4:b5:ca:7d:37:03:36:d3:e8:9b:8d: 51:45:76:4a:30:3f:56:43:db:df:ed:0d:c9:e1:fb:9d:48:ef: e0:e4:29:05:e9:39:7c:e3:da:83:e3:41:bc:25:0a:76:34:91: 99:7b:e8:74:6e:3c:19:58:9c:54:6c:f4:bc:42:35:76:12:14: ff:06:8e:0a:46:a3:c4:4a:cb:f7:e0:8f:64:bd:ac:43:57:1d: af:bc:a4:26:69:4c:4f:f3:5d:de:17:6f:93:fe:40:e7:25:47: 35:f7:dd:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjYwNTEyMjMyMjMzWhcNMjYwNTE5MjMyMjMzWjAYMRYwFAYD VQQDEw02YTAzYjYzOS0xNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMWO5ygwQHMCISiU2so2zTmrzey5SqhT1ZNQfv2tYr8DZnkf6m823htmgP4X 9riIdQo+sOSGrW7uJKTsdLl1EdvDBHoEZepFSpRxXekOIlsJNOfXcEP6rekqBrB0 /1M2RC0BR+9NH2vCj80Fpg5AeV7LyfqPIFa5F4pkQZhrN7CHhzCTXNu5RD0M3rmW 7UdbK38BWXF29m/txkdzlNitzGIJpy3/HxLmmzZmcwVmmIuA8ZrrLIfhLhXjeTft MY2iWguAgsvaqRcAwPEqXWjGWONEaANZeGNZ28PIBZkJOTQw8OhdhkgVcKmkSCrX PmJQs5s5BX0R56UWoLPlButTXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz3rc82 gTJOXdKMMj+NtnRiF4+3MB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIdt99JukShvJ6ZQKFIzmSB9jTeNkHZgRepK4A21ae562nBvmKLovVQC9xaP8 eipr99s7uQM13oRRr3Ghg867HCi/tFyE7wXsStCq8qY8AkXWUaZpECzo0LZDap8A 4wH9DEZUlZBTsdt1LhX/wyoOR+WwKOETS3UaOJ+5Knmk6bfgnL1c6zRR5re/rfzX OKUdaf2kBPOEQqS1yn03AzbT6JuNUUV2SjA/VkPb3+0NyeH7nUjv4OQpBek5fOPa g+NBvCUKdjSRmXvodG48GVicVGz0vEI1dhIU/waOCkajxErL9+CPZL2sQ1cdr7yk JmlMT/Nd3hdvk/5A5yVHNffdyw== -----END CERTIFICATE-----Generated at Wed May 13 03:30:08 2026 by rpki-client