$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: uRQjqz7RhiUG7dwlrtg88EGCfRsYnbG1RS70eHYwnHM= Subject key identifier: 1D:0F:D9:FB:21:C7:71:41:78:5F:48:37:44:02:3A:C3:78:DD:1B:B5 Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 0859 Signing time: Tue 12 May 2026 20:54:21 +0000 Manifest this update: Tue 12 May 2026 20:54:20 +0000 Manifest next update: Tue 19 May 2026 20:54:20 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: 0xzOSOBnfaKtsZPumPESDKi+hftb3XBzzzS3gwczs58=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: UDmShs5ErpF7g+pJqqDV/YHq/rjSCvUODX6lHEx/JXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: May 12 20:54:20 2026 GMT Not After : May 19 20:54:20 2026 GMT Subject: CN=6a03937d-fbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:d6:31:c2:55:0c:1f:4d:8c:8c:eb:ce:33: 07:7a:1f:ac:4b:e7:80:6c:86:d8:38:9c:97:95:c6: d9:4d:29:63:31:79:76:39:0e:96:0e:95:cc:24:68: 0a:e4:04:a8:4f:1a:ca:fd:d0:c6:82:e2:84:a4:2b: 05:45:05:d7:44:c1:ac:4c:e2:cd:0c:10:ee:1e:20: 14:f7:0e:6a:e5:fb:b7:28:b0:c1:fe:d3:41:16:90: c4:37:57:ec:ed:fc:5a:a0:2a:17:48:9e:21:55:49: 67:69:de:8c:76:79:d9:11:2e:ea:74:c7:0f:75:f2: 4d:97:12:e7:97:23:ba:b2:e5:49:43:7f:34:8a:32: 60:60:45:03:c9:3c:a8:7a:c6:09:e2:41:ca:3e:1b: bf:f3:31:5f:9f:ab:65:79:68:51:ae:7b:d7:9a:c0: 90:a8:09:a9:6e:10:c8:a4:e1:10:ef:01:da:c1:1f: 51:11:f9:e4:d6:a9:d9:1e:3a:97:9a:51:be:af:28: 08:1a:65:1f:6f:e4:fd:77:2b:6c:ce:8d:ec:8a:da: c0:69:5d:97:5c:66:9e:32:f1:3e:57:09:55:a2:f5: e3:e4:d4:39:24:0f:2f:c4:b1:0a:e3:e8:07:e5:7e: dc:4e:95:27:12:cb:82:26:80:a8:fa:95:80:d8:06: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:D9:FB:21:C7:71:41:78:5F:48:37:44:02:3A:C3:78:DD:1B:B5 X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:63:b5:fe:7e:c3:4e:25:53:ed:e2:f9:1a:19:11:64:83:13: f8:37:32:f0:85:14:d3:8d:84:60:c0:79:2e:a1:dd:bb:b7:47: a9:ca:b8:85:37:d0:c1:f4:57:0c:a9:c9:dd:1a:4e:55:b3:43: b6:d2:14:9b:e8:10:e5:7d:35:dd:c7:2a:f9:23:a3:2c:ac:b0: 10:26:98:9c:56:41:c0:b0:f4:44:fa:42:f7:fc:a3:01:94:28: e5:72:b1:bd:71:67:fe:53:2f:c3:46:d5:8c:76:f3:90:13:1f: b0:66:26:f1:87:c4:81:cf:ef:bb:4a:8d:62:21:b7:58:14:31: 18:94:18:3d:19:2c:ea:3d:1d:79:71:08:05:2a:25:d1:5c:7f: 01:6e:63:aa:16:27:06:70:a1:25:99:80:d5:d7:13:b2:35:2c: c6:87:86:41:fe:a1:c5:cc:9b:36:c0:54:70:57:84:4f:b5:05: 5a:de:60:08:b9:29:74:a3:19:89:77:03:48:b6:b8:8f:24:9c: 3f:43:5c:22:a9:2d:a0:03:36:ed:cf:11:57:2c:93:a6:64:ac: 23:4f:e1:65:36:15:a6:60:9d:97:b8:08:28:ca:27:b3:e8:bb: 20:bf:69:37:bf:07:40:7d:ae:5f:be:4c:b2:e8:d0:6c:c5:8a: b1:75:c7:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjYwNTEyMjA1NDIwWhcNMjYwNTE5MjA1NDIwWjAYMRYwFAYD VQQDEw02YTAzOTM3ZC1mYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCTWMcJVDB9NjIzrzjMHeh+sS+eAbIbYOJyXlcbZTSljMXl2OQ6WDpXMJGgK 5ASoTxrK/dDGguKEpCsFRQXXRMGsTOLNDBDuHiAU9w5q5fu3KLDB/tNBFpDEN1fs 7fxaoCoXSJ4hVUlnad6MdnnZES7qdMcPdfJNlxLnlyO6suVJQ380ijJgYEUDyTyo esYJ4kHKPhu/8zFfn6tleWhRrnvXmsCQqAmpbhDIpOEQ7wHawR9REfnk1qnZHjqX mlG+rygIGmUfb+T9dytszo3sitrAaV2XXGaeMvE+VwlVovXj5NQ5JA8vxLEK4+gH 5X7cTpUnEsuCJoCo+pWA2AZvSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0P2fsh x3FBeF9IN0QCOsN43Ru1MB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmO1/n7DTiVT7eL5GhkRZIMT+Dcy8IUU042EYMB5LqHdu7dHqcq4hTfQwfRX DKnJ3RpOVbNDttIUm+gQ5X013ccq+SOjLKywECaYnFZBwLD0RPpC9/yjAZQo5XKx vXFn/lMvw0bVjHbzkBMfsGYm8YfEgc/vu0qNYiG3WBQxGJQYPRks6j0deXEIBSol 0Vx/AW5jqhYnBnChJZmA1dcTsjUsxoeGQf6hxcybNsBUcFeET7UFWt5gCLkpdKMZ iXcDSLa4jyScP0NcIqktoAM27c8RVyyTpmSsI0/hZTYVpmCdl7gIKMons+i7IL9p N78HQH2uX75MsujQbMWKsXXHgQ== -----END CERTIFICATE-----Generated at Wed May 13 05:39:15 2026 by rpki-client