$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: 0k15OZB9PyTaKiPUo4vnw0CL9whV+U4Fg6d2wE5jyUE= Subject key identifier: 16:09:91:71:CC:F5:43:47:4F:5E:49:9A:CC:A4:C6:FA:F3:D1:24:97 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D38 Signing time: Tue 12 May 2026 18:08:14 +0000 Manifest this update: Tue 12 May 2026 18:08:13 +0000 Manifest next update: Tue 19 May 2026 18:08:13 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: q6IBhWAh5EDOiR+ec7W3Fd1Lq55pSBuMgnhmoLnakQE=) 2: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) 3: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: May 12 18:08:13 2026 GMT Not After : May 19 18:08:13 2026 GMT Subject: CN=6a036c8e-a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:b3:23:34:0e:0f:c3:92:35:0a:1f:cb:c6: 84:4f:d3:d5:f4:7b:f1:0a:2e:e8:75:5a:70:13:e1: 4f:1c:c4:c8:a3:5a:e9:a8:9e:df:1b:57:0a:eb:ce: 4a:a6:bb:fc:4a:c6:26:5f:d3:43:96:03:56:f6:3e: 83:f7:98:e1:53:32:98:bd:dc:d6:4c:89:48:44:fb: 68:cd:1c:38:3f:ac:69:10:f2:16:f1:fa:7c:1c:74: d4:00:9d:b6:05:9d:f1:bf:67:8b:3e:e3:70:8b:44: 43:0d:b2:13:cc:a7:90:46:fb:b9:40:19:a6:24:ff: 24:a1:51:44:b0:4c:eb:0c:93:95:7b:a5:77:29:df: 1d:f7:ba:d6:9e:4d:75:06:93:21:38:b6:55:ee:fa: db:b3:22:60:b1:3a:6a:13:20:85:7e:ee:f1:2b:ea: 10:0d:f3:fe:f4:d6:a9:5a:6d:ba:ce:97:4e:82:c9: 87:e0:07:55:4d:ef:ea:49:49:69:8f:bd:9d:aa:25: 13:1e:10:69:27:ed:99:73:7b:a5:e9:3e:7d:9e:dd: 43:0c:c7:36:58:4a:ea:d0:c6:97:76:93:64:bf:4a: 26:b5:02:5e:15:4f:85:3b:e3:56:00:5d:c1:18:f4: 8b:8d:3a:2d:5e:1a:1a:27:a1:66:d5:68:cb:a6:ef: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:09:91:71:CC:F5:43:47:4F:5E:49:9A:CC:A4:C6:FA:F3:D1:24:97 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:47:90:db:8a:ea:8e:32:2d:cf:b6:cf:88:57:f4:9c:6b:bc: 7f:5f:8b:d4:2f:d6:f5:e2:04:96:72:f6:93:a0:3a:ae:1a:cb: 1b:87:77:47:3a:74:21:2f:a1:46:bf:43:39:69:11:16:0a:bc: c3:3f:b4:2d:ab:46:77:72:6a:c0:63:28:4f:8d:00:db:c7:d8: 44:d2:a6:b7:66:f0:16:46:e9:91:a1:7f:f7:6f:6c:0d:bf:9f: 43:57:ab:99:98:0e:15:bc:04:e1:9b:85:56:30:57:34:d8:0d: 26:96:b5:0e:3d:64:99:7f:12:22:6f:94:9f:9b:8c:10:a3:e0: 8b:09:37:9b:a0:2b:dd:2a:de:65:46:cc:4b:a5:de:c6:b8:1c: 5e:2b:40:7f:b2:be:45:19:52:bb:03:76:e5:47:a9:d3:5a:c4: fe:ac:49:02:b8:1d:0e:2a:8d:6b:e4:db:db:f4:b3:35:08:98: 32:b7:4d:da:a5:4b:86:f7:26:47:b2:83:59:58:2f:f6:e9:f6: 08:55:38:08:6c:88:b9:a5:86:77:44:81:2e:95:28:23:89:a5: f8:17:4f:90:6b:b6:77:fb:21:fd:2a:ff:93:84:ca:f7:cd:da: 6c:55:f6:63:84:24:dc:40:27:96:79:2e:61:fa:bf:f7:d2:0d: 73:c4:ba:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwNTEyMTgwODEzWhcNMjYwNTE5MTgwODEzWjAYMRYwFAYD VQQDEw02YTAzNmM4ZS1hMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj+mzIzQOD8OSNQofy8aET9PV9HvxCi7odVpwE+FPHMTIo1rpqJ7fG1cK685K prv8SsYmX9NDlgNW9j6D95jhUzKYvdzWTIlIRPtozRw4P6xpEPIW8fp8HHTUAJ22 BZ3xv2eLPuNwi0RDDbITzKeQRvu5QBmmJP8koVFEsEzrDJOVe6V3Kd8d97rWnk11 BpMhOLZV7vrbsyJgsTpqEyCFfu7xK+oQDfP+9NapWm26zpdOgsmH4AdVTe/qSUlp j72dqiUTHhBpJ+2Zc3ul6T59nt1DDMc2WErq0MaXdpNkv0omtQJeFU+FO+NWAF3B GPSLjTotXhoaJ6Fm1WjLpu+qiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYJkXHM 9UNHT15Jmsykxvrz0SSXMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATEeQ24rqjjItz7bPiFf0nGu8f1+L1C/W9eIElnL2k6A6rhrLG4d3Rzp0IS+h Rr9DOWkRFgq8wz+0LatGd3JqwGMoT40A28fYRNKmt2bwFkbpkaF/929sDb+fQ1er mZgOFbwE4ZuFVjBXNNgNJpa1Dj1kmX8SIm+Un5uMEKPgiwk3m6Ar3SreZUbMS6Xe xrgcXitAf7K+RRlSuwN25Uep01rE/qxJArgdDiqNa+Tb2/SzNQiYMrdN2qVLhvcm R7KDWVgv9un2CFU4CGyIuaWGd0SBLpUoI4ml+BdPkGu2d/sh/Sr/k4TK983abFX2 Y4Qk3EAnlnkuYfq/99INc8S6kw== -----END CERTIFICATE-----Generated at Wed May 13 05:01:19 2026 by rpki-client