$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: Jtv1I8BroJGszQSijoh4eyivc69jRllMjOA58yhVe3Q= Subject key identifier: CA:61:1E:5B:58:35:67:82:C0:39:CC:8A:C0:70:EC:63:CC:64:2B:1E Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 014D Signing time: Mon 11 May 2026 05:18:46 +0000 Manifest this update: Mon 11 May 2026 05:18:45 +0000 Manifest next update: Mon 18 May 2026 05:18:45 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: rxMCWMUSAgD0b5zKOhkVn8nsUi8CEv9+9mtWjhVBbBs=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: May 11 05:18:45 2026 GMT Not After : May 18 05:18:45 2026 GMT Subject: CN=6a0166b5-3983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:70:34:2f:95:b9:65:4c:e6:6e:fe:47:9f: 2d:a0:94:64:1c:7e:91:07:81:ae:3c:85:07:98:14: 20:12:1f:07:ec:55:66:9b:5c:a0:91:b8:d2:44:9e: e0:10:f4:d5:97:28:d1:56:8a:6b:37:98:65:36:e9: f0:23:65:ef:b3:12:d8:a5:88:36:63:8b:ff:66:08: 7e:99:82:ce:38:56:7c:d7:07:2b:ee:0a:2f:46:24: 1d:4b:66:69:59:2d:60:1f:d8:b1:4e:f8:04:37:f3: ad:e9:ed:1c:26:98:38:82:dd:0e:8e:86:73:86:0f: 32:e4:25:67:fa:e4:7b:c8:59:70:b8:e8:ce:5d:85: d7:75:d9:d0:af:6c:ad:55:99:16:63:94:fd:7d:55: 58:26:29:d2:e0:18:89:f4:07:9d:9a:51:ca:f2:a3: 2b:09:10:ff:99:88:87:cd:59:4d:b6:e0:b4:1c:08: 28:07:35:de:7e:f3:40:f9:67:2d:a7:78:dd:50:7e: c0:6a:47:c4:f0:11:7b:f7:b9:9c:77:e8:7e:5d:cd: 2a:22:b6:8e:63:1e:ff:40:ee:e8:36:2e:07:74:ec: f6:a6:d0:92:de:f7:74:24:5f:d7:9e:e5:cd:ba:0c: aa:89:8e:fb:b1:1a:53:a5:5f:83:d3:85:3f:04:22: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:1E:5B:58:35:67:82:C0:39:CC:8A:C0:70:EC:63:CC:64:2B:1E X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:68:f5:cf:f1:4d:2f:5b:9a:b4:73:61:da:e1:f4:2f:07:42: c5:b0:e8:9b:47:3b:b4:12:f9:5c:d3:4c:81:b8:e0:d8:d1:57: 37:25:7f:fc:6c:44:31:99:08:76:1f:b7:d6:c4:55:c1:dd:db: 3d:bb:98:9a:09:70:c0:24:5f:e3:f1:f8:18:70:2a:06:30:94: 5b:2b:f6:6f:2a:71:80:9a:d4:27:ea:82:58:90:07:46:73:49: e0:a3:d0:83:61:90:86:ed:3d:37:8d:a9:4c:9c:90:3a:a0:7c: 80:9a:88:e0:b3:ad:dc:38:80:c2:16:fc:2d:45:7e:67:8a:3a: 1b:b0:8a:2b:f6:5e:80:83:e9:fb:2e:40:9c:d2:7e:a8:8d:39: 0f:c9:2b:f1:bf:73:07:08:b5:f0:52:5e:79:85:26:0e:3e:a3: 89:cb:1f:d8:ab:0b:25:af:6a:2b:b9:8a:27:d4:3b:d2:1c:dd: 2d:56:e9:38:29:31:78:80:dc:be:9a:c3:df:f3:da:3b:e5:3b: 82:5a:ef:c5:f8:1d:df:64:c9:be:79:dc:2e:ae:ac:87:60:11: 65:4a:72:71:c9:7e:91:45:46:d6:b7:50:47:2b:23:52:fc:32: da:03:d0:76:6c:83:53:3b:86:d3:35:e5:5f:54:4f:09:4f:54: 14:01:ac:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjYwNTExMDUxODQ1WhcNMjYwNTE4MDUxODQ1WjAYMRYwFAYD VQQDEw02YTAxNjZiNS0zOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5xwNC+VuWVM5m7+R58toJRkHH6RB4GuPIUHmBQgEh8H7FVmm1ygkbjSRJ7g EPTVlyjRVoprN5hlNunwI2XvsxLYpYg2Y4v/Zgh+mYLOOFZ81wcr7govRiQdS2Zp WS1gH9ixTvgEN/Ot6e0cJpg4gt0OjoZzhg8y5CVn+uR7yFlwuOjOXYXXddnQr2yt VZkWY5T9fVVYJinS4BiJ9AedmlHK8qMrCRD/mYiHzVlNtuC0HAgoBzXefvNA+Wct p3jdUH7AakfE8BF797mcd+h+Xc0qIraOYx7/QO7oNi4HdOz2ptCS3vd0JF/XnuXN ugyqiY77sRpTpV+D04U/BCJYNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMphHltY NWeCwDnMisBw7GPMZCseMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuGj1z/FNL1uatHNh2uH0LwdCxbDom0c7tBL5XNNMgbjg2NFXNyV//GxEMZkI dh+31sRVwd3bPbuYmglwwCRf4/H4GHAqBjCUWyv2bypxgJrUJ+qCWJAHRnNJ4KPQ g2GQhu09N42pTJyQOqB8gJqI4LOt3DiAwhb8LUV+Z4o6G7CKK/ZegIPp+y5AnNJ+ qI05D8kr8b9zBwi18FJeeYUmDj6jicsf2KsLJa9qK7mKJ9Q70hzdLVbpOCkxeIDc vprD3/PaO+U7glrvxfgd32TJvnncLq6sh2ARZUpyccl+kUVG1rdQRysjUvwy2gPQ dmyDUzuG0zXlX1RPCU9UFAGsRg== -----END CERTIFICATE-----Generated at Wed May 13 01:29:36 2026 by rpki-client