$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: bHD9YudPaRXX8YuFUujvsSmCdFS5ZfgpBnuX4HFixbA= Subject key identifier: 7E:4B:FB:E7:D7:B5:CD:05:21:61:C8:D0:08:22:23:CE:E8:A7:FD:13 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 123E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 1233 Signing time: Tue 12 May 2026 17:09:01 +0000 Manifest this update: Tue 12 May 2026 17:09:01 +0000 Manifest next update: Tue 19 May 2026 17:09:01 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: HBb7V7GpWdmUYuaRJLr40LVELHv2iMgYp/I5DW2O6xI=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: May 12 17:09:01 2026 GMT Not After : May 19 17:09:01 2026 GMT Subject: CN=6a035ead-4fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dd:69:7b:1e:66:ba:42:9b:e5:62:02:53:cc: 2d:92:a5:d1:8f:fd:07:78:66:6b:97:cd:b5:35:d6: bb:32:47:30:5a:b2:30:7f:44:7e:53:9e:47:90:cd: e6:78:9f:55:18:20:57:e6:52:ac:1e:d0:49:de:66: 1a:29:86:c5:cb:68:15:56:d4:b6:fb:5a:13:b3:98: a7:46:6c:57:bb:50:67:27:a3:5d:0d:d6:42:79:95: ee:78:bf:c5:93:5f:fd:e0:d4:9a:90:a7:e2:e3:79: 09:6b:70:df:d1:5a:7c:ef:13:ac:89:8f:ca:cb:40: 98:cb:1e:12:7b:d9:05:09:f7:46:e2:72:b7:60:6c: 8a:c4:8d:96:e5:64:02:43:66:5b:59:21:22:51:30: 2c:ef:09:24:17:d5:0a:48:dd:57:cd:55:87:6f:23: b6:ee:7a:6e:eb:45:4c:32:cf:dc:6b:37:df:3b:8c: d0:48:79:d5:14:0e:c8:f9:76:9a:44:cd:ee:9b:5a: d0:79:1d:34:1c:f3:14:04:6d:bd:4e:5a:f4:b2:c2: 10:46:d5:ef:f6:17:e6:3e:8d:fc:4b:14:3b:22:b2: 59:6c:c0:f8:f8:53:f2:86:da:01:e2:a7:54:f8:e4: aa:96:c0:7f:15:80:02:7d:be:b8:d3:13:1b:e6:d0: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4B:FB:E7:D7:B5:CD:05:21:61:C8:D0:08:22:23:CE:E8:A7:FD:13 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:00:4b:1a:d9:32:eb:eb:66:31:ef:21:c1:60:8c:a7:89:11: a7:8f:ac:15:76:ad:b3:33:15:a4:93:ac:bc:c7:9a:59:4b:55: 4d:88:68:27:a3:a6:a1:4f:0f:ae:06:12:4f:73:9c:e2:c8:2a: 2e:d7:d2:77:52:dd:42:bd:88:01:f3:9b:d6:24:b7:af:65:fc: 26:98:f9:1b:30:07:ad:af:19:59:0a:5f:64:4f:77:f5:d3:2d: 13:90:04:d1:a7:3f:76:79:db:71:0c:b0:99:91:b0:62:89:f1: 33:3a:ac:fe:b6:e5:9b:8d:83:f3:b6:85:8e:8b:86:36:aa:34: 58:4d:e0:ab:30:f2:54:ea:f1:46:60:c6:f1:09:8b:20:23:93: 65:7b:6f:69:89:8a:3a:46:7e:79:c4:50:e7:9e:cc:3f:13:1a: a8:a7:0d:56:7f:0a:cd:4d:de:86:82:5d:34:d6:a5:01:e6:5e: 07:1d:8a:32:88:bb:4c:6c:e2:2c:e6:2d:75:c2:39:12:84:62: 48:65:97:e5:b8:2b:7d:05:83:76:b3:49:2f:67:ad:e7:70:85: 32:72:69:c5:a0:5c:15:c3:ed:fa:02:1a:d7:e9:68:fc:57:e2: 13:83:21:91:28:11:2b:6c:42:b6:78:45:66:00:61:3b:5b:2f: 33:6b:f3:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjYwNTEyMTcwOTAxWhcNMjYwNTE5MTcwOTAxWjAYMRYwFAYD VQQDEw02YTAzNWVhZC00ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkd1pex5mukKb5WICU8wtkqXRj/0HeGZrl821Nda7MkcwWrIwf0R+U55HkM3m eJ9VGCBX5lKsHtBJ3mYaKYbFy2gVVtS2+1oTs5inRmxXu1BnJ6NdDdZCeZXueL/F k1/94NSakKfi43kJa3Df0Vp87xOsiY/Ky0CYyx4Se9kFCfdG4nK3YGyKxI2W5WQC Q2ZbWSEiUTAs7wkkF9UKSN1XzVWHbyO27npu60VMMs/cazffO4zQSHnVFA7I+Xaa RM3um1rQeR00HPMUBG29Tlr0ssIQRtXv9hfmPo38SxQ7IrJZbMD4+FPyhtoB4qdU +OSqlsB/FYACfb640xMb5tBKdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5L++fX tc0FIWHI0AgiI87op/0TMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfwBLGtky6+tmMe8hwWCMp4kRp4+sFXatszMVpJOsvMeaWUtVTYhoJ6OmoU8P rgYST3Oc4sgqLtfSd1LdQr2IAfOb1iS3r2X8Jpj5GzAHra8ZWQpfZE939dMtE5AE 0ac/dnnbcQywmZGwYonxMzqs/rblm42D87aFjouGNqo0WE3gqzDyVOrxRmDG8QmL ICOTZXtvaYmKOkZ+ecRQ557MPxMaqKcNVn8KzU3ehoJdNNalAeZeBx2KMoi7TGzi LOYtdcI5EoRiSGWX5bgrfQWDdrNJL2et53CFMnJpxaBcFcPt+gIa1+lo/FfiE4Mh kSgRK2xCtnhFZgBhO1svM2vzJw== -----END CERTIFICATE-----Generated at Wed May 13 04:49:35 2026 by rpki-client