$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: YM9ZBIrkXJ1b23gbKXR0bxpdNZdl51MhXnYl6pNsvrQ= Subject key identifier: 94:75:C5:EA:BD:65:FC:0C:C1:02:A5:52:E0:3F:CD:27:0E:00:73:E2 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 090A Signing time: Tue 12 May 2026 20:22:53 +0000 Manifest this update: Tue 12 May 2026 20:22:52 +0000 Manifest next update: Tue 19 May 2026 20:22:52 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: PDxmtD3Ju+zzcyleiuSVMU3O8OZgbvzFMgSSVY+jml4=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: May 12 20:22:52 2026 GMT Not After : May 19 20:22:52 2026 GMT Subject: CN=6a038c1c-1b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:1b:37:b2:69:68:e1:70:d3:67:2e:c8:c2: bb:48:c7:8f:6c:d5:73:bf:8f:bf:20:ad:15:c1:60: ae:d2:18:db:46:b0:a6:1f:11:e9:af:a9:69:ba:f5: 4b:78:4e:8f:1e:c8:94:71:a1:90:a7:bb:18:57:bc: 9b:4f:ed:9b:4a:88:5d:95:66:2c:3e:9b:ab:4e:6b: 76:59:75:e9:f0:fd:64:15:ed:77:4b:e4:ac:b3:ee: e4:60:8c:5c:c1:ed:f2:d7:6b:7e:db:86:95:b7:99: d8:6c:82:38:c8:da:21:74:f0:0b:01:2d:ad:29:cf: f1:1d:4e:10:34:57:b7:7d:73:f2:61:9b:d4:14:4d: 22:bc:1a:f8:b3:f0:71:34:87:47:9a:b3:f5:25:ed: e3:c7:45:83:42:df:7f:83:24:cb:a4:a1:b3:49:a8: 2c:a1:b3:e6:1c:25:4b:b2:ec:90:f3:bf:da:2b:88: 91:0e:ac:04:35:0c:a6:bb:c1:4c:93:fe:35:8c:ae: bc:9b:ad:74:ac:55:23:e9:fa:77:21:19:31:86:c3: 6c:45:d1:dc:2a:82:0f:69:5d:37:f5:aa:3d:1a:06: be:46:df:19:98:81:18:63:be:8c:07:70:2d:2d:a6: 0c:2f:51:07:96:7d:04:95:3f:96:25:67:ba:a2:57: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:C5:EA:BD:65:FC:0C:C1:02:A5:52:E0:3F:CD:27:0E:00:73:E2 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7e:29:a7:0a:fb:e8:53:be:45:4d:88:9d:d0:bd:5b:90:f5: 3b:a8:10:24:38:65:5b:80:26:78:68:56:2f:9f:7e:a4:2a:16: 78:49:58:ea:4b:b7:20:23:7e:a9:cd:f5:39:c6:6f:fb:6b:21: 8b:b1:6b:d0:54:8d:91:bf:56:55:85:af:49:40:76:c0:3c:49: 70:d3:8a:19:aa:b7:6c:2d:ce:7f:6e:c0:c3:2b:e6:1e:98:3b: a1:c2:07:b7:87:db:34:de:ee:c3:e2:03:f3:d4:49:33:7b:ee: 9a:91:b7:3b:d4:76:a3:a6:a3:e9:11:01:64:2e:41:89:7c:d6: fc:34:b9:ea:6f:5e:da:de:ff:a0:ab:86:06:be:8b:31:3f:51: 0a:0f:92:03:f4:4d:79:62:9d:b1:a1:7e:d4:df:b4:5d:b7:d1: 41:33:15:2f:a6:76:be:b1:e8:6d:c4:f1:4b:81:7f:f3:86:c5: ca:3b:33:bd:b9:d7:7c:b4:4f:f2:d1:7d:13:3d:2a:15:e8:e8: e5:58:f9:f1:69:21:4f:c7:5a:bd:e6:59:fc:14:06:a2:6b:32: 23:6a:08:c9:85:aa:56:1d:0f:3f:87:d6:57:37:15:2e:a6:98: 39:64:55:98:a9:c7:c0:c3:aa:56:b3:86:35:ae:c0:df:dd:da: be:ad:80:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjYwNTEyMjAyMjUyWhcNMjYwNTE5MjAyMjUyWjAYMRYwFAYD VQQDEw02YTAzOGMxYy0xYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupobN7JpaOFw02cuyMK7SMePbNVzv4+/IK0VwWCu0hjbRrCmHxHpr6lpuvVL eE6PHsiUcaGQp7sYV7ybT+2bSohdlWYsPpurTmt2WXXp8P1kFe13S+Sss+7kYIxc we3y12t+24aVt5nYbII4yNohdPALAS2tKc/xHU4QNFe3fXPyYZvUFE0ivBr4s/Bx NIdHmrP1Je3jx0WDQt9/gyTLpKGzSagsobPmHCVLsuyQ87/aK4iRDqwENQymu8FM k/41jK68m610rFUj6fp3IRkxhsNsRdHcKoIPaV039ao9Gga+Rt8ZmIEYY76MB3At LaYML1EHln0ElT+WJWe6olcRJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJR1xeq9 ZfwMwQKlUuA/zScOAHPiMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ34ppwr76FO+RU2IndC9W5D1O6gQJDhlW4AmeGhWL59+pCoWeElY6ku3ICN+ qc31OcZv+2shi7Fr0FSNkb9WVYWvSUB2wDxJcNOKGaq3bC3Of27AwyvmHpg7ocIH t4fbNN7uw+ID89RJM3vumpG3O9R2o6aj6REBZC5BiXzW/DS56m9e2t7/oKuGBr6L MT9RCg+SA/RNeWKdsaF+1N+0XbfRQTMVL6Z2vrHobcTxS4F/84bFyjszvbnXfLRP 8tF9Ez0qFejo5Vj58WkhT8daveZZ/BQGomsyI2oIyYWqVh0PP4fWVzcVLqaYOWRV mKnHwMOqVrOGNa7A393avq2Aiw== -----END CERTIFICATE-----Generated at Wed May 13 04:43:56 2026 by rpki-client