$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: QLElQA7g7CRyyzK+EImUjFnYakfihE01yZ/sE6Iuvo4= Subject key identifier: CC:47:E0:91:CE:29:CE:54:F8:5C:2A:B0:CF:2B:97:45:82:AF:AA:A1 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 86 Signing time: Wed 13 May 2026 07:45:38 +0000 Manifest this update: Wed 13 May 2026 07:45:38 +0000 Manifest next update: Wed 20 May 2026 07:45:38 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: x1WqcRvwtr10VaapGPkWtwJXrHm9k2u1XJZH0gjPn8o=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: 995A12922D7911F185835B6B93833773.roa (hash: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=) 4: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: May 13 07:45:38 2026 GMT Not After : May 20 07:45:38 2026 GMT Subject: CN=6a042c22-554c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:11:6d:ac:f6:45:28:28:e1:4d:aa:5e:58: 6e:0e:61:bc:dc:0d:1f:b8:90:9b:df:a4:14:e8:2b: ce:d7:3b:5e:e9:4c:b9:94:2a:a7:59:b6:33:3f:80: 55:ec:a7:9c:0f:00:2e:25:c4:5f:e2:15:98:17:33: 16:1c:b6:e1:6f:95:9e:ee:f7:4f:cf:d0:9b:61:f6: 7f:f9:05:16:1f:a8:2a:dd:b4:b2:14:73:a1:66:e4: 88:31:f9:4a:42:d2:a5:5f:9f:13:63:35:bb:0b:39: 2d:85:74:1c:f3:a6:92:df:09:54:8d:7b:66:d1:f5: 1e:f6:59:98:14:fe:54:d6:f9:10:92:c8:c7:79:a8: 48:54:17:ed:45:9b:40:da:a8:8e:a9:a4:1f:1e:70: 81:3f:93:4b:18:0d:ad:43:ca:c7:21:04:08:0a:ab: 9c:b6:5a:71:00:ec:e9:99:08:26:3b:01:39:f3:79: 6b:ff:76:c3:67:8e:9c:72:07:6f:c3:aa:49:42:9f: 03:42:6c:a2:db:83:3b:cb:a4:a1:88:3d:32:7a:32: 26:ff:8c:5b:04:1f:fd:87:94:c7:79:fe:6d:16:ed: c1:7f:e0:dd:f3:cc:24:a7:3c:e5:e1:5d:29:54:81: 95:8e:e3:c3:3a:ba:97:b8:68:36:15:51:7d:fe:e4: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:47:E0:91:CE:29:CE:54:F8:5C:2A:B0:CF:2B:97:45:82:AF:AA:A1 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:27:10:23:d2:c1:c0:ad:9a:59:78:30:a8:e6:67:05:53:08: 08:4a:5a:db:19:b9:4c:72:9f:80:99:69:03:1d:71:d4:92:83: 00:a5:b5:87:d3:d9:76:a9:25:5f:cf:9d:5e:77:4a:34:4a:fe: 1c:cb:f8:d8:d3:31:b4:16:f2:2a:60:28:b1:a0:52:c3:00:41: 76:fa:73:26:a3:1d:45:63:5b:46:2b:3b:ec:a7:f5:a2:68:72: 34:f3:d2:9c:91:52:26:12:22:83:3d:b6:e2:a7:cc:69:86:22: 6b:6f:5b:c6:45:29:ed:1f:8b:ed:af:7a:5e:58:7d:13:85:78: 7f:02:cc:ee:10:47:29:19:00:92:81:0a:17:a2:9d:8f:02:0e: a7:64:f6:9d:56:50:31:22:5f:22:e5:f5:f4:a2:23:4b:c0:77: 70:f8:a7:bf:da:4d:33:7c:18:94:b7:42:39:df:27:fa:46:25: dd:a9:38:ac:ae:e2:57:cd:bd:98:0b:6f:e6:4a:ee:57:37:92: 6c:b3:d9:96:97:5b:27:9a:75:44:c5:1c:25:ec:10:c1:d7:02: 7f:8a:cb:7d:08:76:84:12:46:a2:b3:c4:28:20:31:23:65:e2: 11:24:55:d6:ad:e6:0b:c5:c0:c2:d6:2a:b6:45:12:4b:9a:ed: b6:f7:c2:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYwNTEzMDc0NTM4WhcNMjYwNTIwMDc0NTM4WjAYMRYwFAYD VQQDEw02YTA0MmMyMi01NTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6gRbaz2RSgo4U2qXlhuDmG83A0fuJCb36QU6CvO1zte6Uy5lCqnWbYzP4BV 7KecDwAuJcRf4hWYFzMWHLbhb5We7vdPz9CbYfZ/+QUWH6gq3bSyFHOhZuSIMflK QtKlX58TYzW7CzkthXQc86aS3wlUjXtm0fUe9lmYFP5U1vkQksjHeahIVBftRZtA 2qiOqaQfHnCBP5NLGA2tQ8rHIQQICquctlpxAOzpmQgmOwE583lr/3bDZ46ccgdv w6pJQp8DQmyi24M7y6ShiD0yejIm/4xbBB/9h5THef5tFu3Bf+Dd88wkpzzl4V0p VIGVjuPDOrqXuGg2FVF9/uS6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxH4JHO Kc5U+FwqsM8rl0WCr6qhMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASycQI9LBwK2aWXgwqOZnBVMICEpa2xm5THKfgJlpAx1x1JKDAKW1h9PZdqkl X8+dXndKNEr+HMv42NMxtBbyKmAosaBSwwBBdvpzJqMdRWNbRis77Kf1omhyNPPS nJFSJhIigz224qfMaYYia29bxkUp7R+L7a96Xlh9E4V4fwLM7hBHKRkAkoEKF6Kd jwIOp2T2nVZQMSJfIuX19KIjS8B3cPinv9pNM3wYlLdCOd8n+kYl3ak4rK7iV829 mAtv5kruVzeSbLPZlpdbJ5p1RMUcJewQwdcCf4rLfQh2hBJGorPEKCAxI2XiESRV 1q3mC8XAwtYqtkUSS5rttvfC/g== -----END CERTIFICATE-----Generated at Wed May 13 15:47:14 2026 by rpki-client