$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: ogpWKbz1Pkjn96okQQSBaLTmT7kLSqWsyQK0pNvhq20= Subject key identifier: 96:3B:CA:3D:40:25:F8:AD:71:73:49:14:8C:05:0C:CC:E3:CE:EB:E2 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 0137 Signing time: Mon 11 May 2026 05:50:04 +0000 Manifest this update: Mon 11 May 2026 05:50:04 +0000 Manifest next update: Mon 18 May 2026 05:50:04 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 8Uv8YbgSrsJ5uFTMqYemxro6pEkLyH7BwcFgG3HnrXI=) 2: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: cuURsbxNvtOqTd1FnCF2I2C85rcA4nGp1HY8p4P3GjI=) 3: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: May 11 05:50:04 2026 GMT Not After : May 18 05:50:04 2026 GMT Subject: CN=6a016e0c-8923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:2d:73:b9:ae:4c:d3:15:8f:3e:2d:eb:9e: 0b:33:68:fa:85:aa:ce:f9:77:2a:23:a8:ca:6d:ff: 84:51:5f:44:9f:48:7c:26:9b:fd:0e:9f:af:b9:8f: 40:7a:30:51:db:b9:9e:e8:8f:af:5a:49:d5:92:59: 5c:aa:35:e7:ba:da:2a:12:96:60:ea:37:4b:27:f1: 49:9c:4c:49:12:16:c9:40:dc:e7:f0:b6:8c:31:e7: 94:6f:aa:80:ca:ad:17:c6:ea:2d:80:83:65:39:3e: 9f:f6:79:a3:b9:6b:fe:19:2c:10:82:3c:ff:e3:01: 22:8f:df:6e:13:38:9f:64:01:f5:47:1f:c2:65:6f: 35:ee:f0:1c:fd:c4:92:69:40:a0:c6:6d:c6:c3:a0: af:b2:2b:49:b7:1f:c4:9a:ac:d3:26:5c:b4:2f:cf: 01:f9:dc:cb:e4:03:69:ac:f9:94:94:c3:dc:2b:f6: 0c:05:10:fa:e9:94:c8:35:08:b0:a4:ca:2c:a0:6c: 03:aa:a9:b2:f3:e1:8d:27:14:45:d0:a6:ce:a7:58: 97:10:60:ed:e2:c3:bc:92:4a:e6:68:cc:ce:ed:01: 9c:f3:af:b3:32:c2:74:45:ad:d0:7d:1a:c2:1a:ab: 99:ec:f4:5b:4c:c2:03:17:b9:38:fa:60:e1:2f:42: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:CA:3D:40:25:F8:AD:71:73:49:14:8C:05:0C:CC:E3:CE:EB:E2 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:ab:b5:09:62:a0:2c:8f:1f:e4:14:f6:0d:89:0b:fa:44: e0:69:c7:23:7e:4b:49:d9:f4:0a:5c:49:3e:cd:a2:5b:39:bf: 50:ab:36:ed:0a:47:8f:a2:f0:ed:b1:94:35:ee:a0:fb:1c:24: 6f:92:97:c1:4e:db:33:9e:72:86:78:28:2a:da:41:ac:0a:89: 57:98:11:d5:b0:3e:68:a1:9e:99:cf:ce:ef:37:5b:ca:98:36: 8d:3c:bc:4f:ee:27:66:40:26:4d:72:e3:29:cf:51:dd:e1:94: 6b:45:da:75:f5:90:41:93:19:5a:95:a6:0e:33:cf:c5:e4:de: f3:6f:a1:b4:e7:b0:f7:fe:84:e4:69:6b:6e:3a:c9:58:65:e2: 62:a9:14:bd:82:c9:4b:d5:a0:f6:28:2c:0e:af:08:4a:22:20: cd:24:c5:8c:21:57:34:57:1c:0c:5a:36:ca:56:e5:13:03:12: d9:65:fc:e6:15:d2:f9:bc:98:f8:d5:40:4f:71:e6:10:0d:7f: d8:4b:c9:b8:63:0a:8b:0c:27:39:7d:84:72:ff:75:a1:33:66: b1:82:5e:28:81:0b:ef:11:c3:68:13:d8:7f:9d:95:dd:76:ab: 52:b8:f7:a9:c6:0b:6c:dd:43:c2:83:bd:82:fb:27:9f:0e:a4: f3:2c:b2:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYwNTExMDU1MDA0WhcNMjYwNTE4MDU1MDA0WjAYMRYwFAYD VQQDEw02YTAxNmUwYy04OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnegtc7muTNMVjz4t654LM2j6harO+XcqI6jKbf+EUV9En0h8Jpv9Dp+vuY9A ejBR27me6I+vWknVkllcqjXnutoqEpZg6jdLJ/FJnExJEhbJQNzn8LaMMeeUb6qA yq0XxuotgINlOT6f9nmjuWv+GSwQgjz/4wEij99uEzifZAH1Rx/CZW817vAc/cSS aUCgxm3Gw6CvsitJtx/EmqzTJly0L88B+dzL5ANprPmUlMPcK/YMBRD66ZTINQiw pMosoGwDqqmy8+GNJxRF0KbOp1iXEGDt4sO8kkrmaMzO7QGc86+zMsJ0Ra3QfRrC GquZ7PRbTMIDF7k4+mDhL0Jg0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJY7yj1A JfitcXNJFIwFDMzjzuviMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABg6rtQlioCyPH+QU9g2JC/pE4GnHI35LSdn0ClxJPs2iWzm/UKs27QpHj6Lw 7bGUNe6g+xwkb5KXwU7bM55yhngoKtpBrAqJV5gR1bA+aKGemc/O7zdbypg2jTy8 T+4nZkAmTXLjKc9R3eGUa0XadfWQQZMZWpWmDjPPxeTe82+htOew9/6E5GlrbjrJ WGXiYqkUvYLJS9Wg9igsDq8ISiIgzSTFjCFXNFccDFo2ylblEwMS2WX85hXS+byY +NVAT3HmEA1/2EvJuGMKiwwnOX2Ecv91oTNmsYJeKIEL7xHDaBPYf52V3XarUrj3 qcYLbN1DwoO9gvsnnw6k8yyyWg== -----END CERTIFICATE-----Generated at Wed May 13 04:01:17 2026 by rpki-client