$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: F4lYWb41wJZLi44E5tmavwZCrda1ZXQKrojEYnNafeA= Subject key identifier: FB:7C:BE:9A:5F:AF:FF:C8:D5:88:08:95:DD:53:DE:43:B3:AD:89:F6 Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 9E Signing time: Wed 13 May 2026 07:30:23 +0000 Manifest this update: Wed 13 May 2026 07:30:22 +0000 Manifest next update: Wed 20 May 2026 07:30:22 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: NixWiKtUzwBXrdg87+HheawZr2GvFUu+uO6wP03u47I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: May 13 07:30:22 2026 GMT Not After : May 20 07:30:22 2026 GMT Subject: CN=6a04288f-621b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:85:c6:02:66:05:aa:43:ca:6e:c0:d8:f9: 93:f9:4f:73:ab:c6:9c:58:37:24:35:26:7a:09:bf: 53:d3:df:13:91:13:46:74:29:5b:f3:f7:81:bc:0b: 8d:2e:96:c0:39:93:a0:46:2d:cc:69:98:47:fd:3e: 48:79:87:ba:e4:b7:d2:22:b7:85:32:2c:76:f7:26: 64:d4:27:df:4d:5d:df:97:21:45:7f:39:62:10:ea: a9:ba:56:0b:45:f5:f4:bb:0a:58:36:9e:cc:76:36: e8:f9:cc:8d:a7:0e:6c:a9:70:18:57:33:e0:29:57: 25:19:ef:f0:f8:62:9f:4b:80:d0:56:aa:b8:9b:ae: ec:50:38:db:90:cc:93:70:23:8a:03:ef:d3:49:e0: 40:68:ad:77:5e:d4:2b:6f:1e:cc:a8:45:fe:79:21: c6:c5:ae:48:66:86:2d:3b:64:91:e5:72:4a:c7:b1: 8e:ae:6c:22:e8:5e:18:51:2e:68:32:a6:cc:b7:3c: 6e:16:6d:10:1d:5d:54:1b:f4:b7:96:9b:24:8f:9a: d4:74:78:25:28:16:48:52:21:d2:ef:9d:e4:32:fd: f2:16:a4:03:35:13:c4:66:2a:06:d0:31:15:6f:16: f3:d9:fc:63:2f:83:1b:84:ff:21:5d:bb:8a:5c:93: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7C:BE:9A:5F:AF:FF:C8:D5:88:08:95:DD:53:DE:43:B3:AD:89:F6 X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e6:e6:2b:2f:6f:10:0a:89:ac:48:9e:11:6d:57:4e:3a:5f: bf:fb:00:10:a2:14:f7:f2:c0:e6:f0:dc:84:d6:56:4f:3e:11: 17:44:d5:ba:3b:73:e2:7a:be:14:5c:fb:c3:87:8d:56:89:76: dc:f4:a9:33:4b:a0:43:21:22:b6:7a:d3:29:18:69:39:e9:d5: de:91:68:e9:95:e9:56:01:09:5e:be:1d:65:60:77:9e:b8:74: fd:e2:e8:5e:e6:7f:bf:a2:50:75:82:a2:16:cc:b3:4f:31:a2: af:db:fa:a5:da:40:71:4c:72:52:df:2c:94:f8:68:15:37:b3: fc:fb:04:c2:d8:9d:7d:1c:45:3e:53:c2:78:6f:95:f6:bd:2e: 20:83:c6:fd:6f:15:4e:9c:87:64:bb:4d:89:fa:69:fb:0e:de: 5c:94:bf:aa:d7:89:43:96:52:3f:9e:73:31:26:38:82:f5:40: 98:4e:c4:19:f2:06:e7:80:42:84:1b:b6:e6:fc:96:ba:bc:d6: 66:9d:ae:e6:ef:fd:43:94:07:d8:a4:4f:51:21:23:b0:b5:b5: 98:3c:74:e9:6d:51:9a:81:23:9f:49:b2:76:f5:1e:0a:0a:d6: 0a:a0:29:c1:b7:cd:37:93:57:1e:87:ba:85:e4:67:07:58:88: 01:96:2f:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTYxMTAvBgNVBAUTKDY0MjEzNTJBRUQ2NDQxMDA2QkJDRTQ4QTg1MzQ1NUM4 RDI3MjNEQjgwHhcNMjYwNTEzMDczMDIyWhcNMjYwNTIwMDczMDIyWjAYMRYwFAYD VQQDEw02YTA0Mjg4Zi02MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo2FxgJmBapDym7A2PmT+U9zq8acWDckNSZ6Cb9T098TkRNGdClb8/eBvAuN LpbAOZOgRi3MaZhH/T5IeYe65LfSIreFMix29yZk1CffTV3flyFFfzliEOqpulYL RfX0uwpYNp7Mdjbo+cyNpw5sqXAYVzPgKVclGe/w+GKfS4DQVqq4m67sUDjbkMyT cCOKA+/TSeBAaK13XtQrbx7MqEX+eSHGxa5IZoYtO2SR5XJKx7GOrmwi6F4YUS5o MqbMtzxuFm0QHV1UG/S3lpskj5rUdHglKBZIUiHS753kMv3yFqQDNRPEZioG0DEV bxbz2fxjL4MbhP8hXbuKXJMSMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPt8vppf r//I1YgIld1T3kOzrYn2MB8GA1UdIwQYMBaAFGQhNSrtZEEAa7zkioU0VcjScj24 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1Ni83NDQ2NERFNjYy MTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FRQnJ2T1NLaFRSVnlOSnlQ YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc1Ni83NDQ2NERFNjYyMTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FR QnJ2T1NLaFRSVnlOSnlQYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaObmKy9vEAqJrEieEW1XTjpfv/sAEKIU9/LA5vDchNZWTz4RF0TVujtz4nq+ FFz7w4eNVol23PSpM0ugQyEitnrTKRhpOenV3pFo6ZXpVgEJXr4dZWB3nrh0/eLo XuZ/v6JQdYKiFsyzTzGir9v6pdpAcUxyUt8slPhoFTez/PsEwtidfRxFPlPCeG+V 9r0uIIPG/W8VTpyHZLtNifpp+w7eXJS/qteJQ5ZSP55zMSY4gvVAmE7EGfIG54BC hBu25vyWurzWZp2u5u/9Q5QH2KRPUSEjsLW1mDx06W1RmoEjn0mydvUeCgrWCqAp wbfNN5NXHoe6heRnB1iIAZYveQ== -----END CERTIFICATE-----Generated at Wed May 13 10:41:37 2026 by rpki-client