$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: 1RE1UwIwGJXZ1lZskhhvfAfk7+hyUT1NzNvpLYok1UE= Subject key identifier: 7F:14:03:89:2B:86:28:A7:7C:67:85:78:EB:89:E0:70:DE:E1:80:46 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 121C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 11E1 Signing time: Tue 12 May 2026 17:10:54 +0000 Manifest this update: Tue 12 May 2026 17:10:53 +0000 Manifest next update: Tue 19 May 2026 17:10:53 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: mdmd7fNB5Q4dQmffwXdwPKnnRb6U89dcqREEMQ3w7w8=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) 3: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: 8sR59Lp6fQc79JgAgqC1t1+yUKy4/xiWteMrpfGnLFs=) 4: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=) 5: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: May 12 17:10:53 2026 GMT Not After : May 19 17:10:53 2026 GMT Subject: CN=6a035f1d-8a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:59:3b:72:29:21:af:03:d0:5f:ea:c7:4a: a7:91:24:3b:34:00:6e:47:d8:d1:86:70:3b:b5:7f: f8:1e:27:c0:b3:f3:50:5b:16:32:87:1f:54:00:42: 5c:3c:47:59:f2:e9:02:44:95:c1:1b:c5:97:67:9b: cb:ea:06:d5:04:55:03:7c:74:71:ba:8b:a2:82:ab: bb:c7:b1:3b:a2:99:ff:40:c4:c3:15:2c:e8:c2:ba: 1b:35:7d:e1:f0:a4:e1:74:58:6d:bb:32:ea:41:3b: d7:18:e2:46:bf:2a:05:7b:85:a8:93:b6:13:6a:b7: fc:6d:d7:6a:e6:b1:a3:22:41:bb:10:0a:52:30:bb: 20:67:0a:2b:43:db:89:89:08:19:93:96:c4:b6:9e: ac:c4:82:83:6b:c9:af:11:78:70:92:50:23:f8:55: 75:2c:c4:ad:8f:c9:98:38:94:1d:57:17:b5:a1:f5: 9c:45:89:99:0e:03:07:99:6d:2e:90:71:a0:08:8f: 7c:c3:40:bc:22:e6:d8:58:6b:eb:ec:6b:9d:c3:95: c3:2a:00:e3:e2:d1:4e:da:f3:c9:a8:e7:a9:b4:c2: 21:43:32:9b:41:1c:4f:7b:03:46:7b:f2:ac:0b:32: d0:ad:df:72:0f:0d:a1:03:fa:53:a1:77:ac:2f:4f: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:14:03:89:2B:86:28:A7:7C:67:85:78:EB:89:E0:70:DE:E1:80:46 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:e4:c8:bb:f5:30:f7:1b:ff:2f:9b:e9:d6:2c:6a:d2:a4:8a: 30:5f:5d:7d:33:eb:e1:82:bc:98:b7:ac:a2:04:1c:13:13:1c: 08:da:2b:69:a6:fe:b0:03:03:93:ff:8a:bb:76:ab:91:3e:82: ab:83:77:54:5d:c7:00:03:6b:ff:62:9b:e1:41:73:7a:07:23: d5:79:74:e0:37:f2:dc:9c:7d:b7:6c:5d:f6:5b:8a:f3:43:59: 23:5a:91:5c:3f:e8:9f:c1:0b:7f:ca:be:9e:36:23:b4:99:e4: 74:99:70:c0:e2:71:16:e9:a1:33:1d:d0:14:90:6e:a2:b8:37: ce:9a:bb:bb:0b:d3:f6:6f:1f:bd:f0:0b:0b:f2:d6:49:d0:fd: cc:51:9a:6e:4c:b2:29:c1:5d:64:b2:e4:48:31:56:3e:19:45: 95:3a:c5:25:54:fd:29:eb:29:39:98:d0:ee:1c:15:2e:33:61: 89:7b:03:c8:92:a8:c2:06:76:9d:4d:e5:90:6b:03:4d:e1:2f: 11:1a:f0:3b:13:cc:7c:e1:82:36:8d:5f:15:98:47:eb:8c:6b: d3:3e:a1:1e:20:ac:02:f7:b1:94:43:bd:f6:18:5c:77:9d:95: 14:c1:75:b5:4b:19:06:4d:11:e4:59:ee:ff:07:78:ab:9b:1d: 75:17:5f:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwNTEyMTcxMDUzWhcNMjYwNTE5MTcxMDUzWjAYMRYwFAYD VQQDEw02YTAzNWYxZC04YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHJZO3IpIa8D0F/qx0qnkSQ7NABuR9jRhnA7tX/4HifAs/NQWxYyhx9UAEJc PEdZ8ukCRJXBG8WXZ5vL6gbVBFUDfHRxuouigqu7x7E7opn/QMTDFSzowrobNX3h 8KThdFhtuzLqQTvXGOJGvyoFe4Wok7YTarf8bddq5rGjIkG7EApSMLsgZworQ9uJ iQgZk5bEtp6sxIKDa8mvEXhwklAj+FV1LMStj8mYOJQdVxe1ofWcRYmZDgMHmW0u kHGgCI98w0C8IubYWGvr7Gudw5XDKgDj4tFO2vPJqOeptMIhQzKbQRxPewNGe/Ks CzLQrd9yDw2hA/pToXesL09XOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8UA4kr hiinfGeFeOuJ4HDe4YBGMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyOTIu/Uw9xv/L5vp1ixq0qSKMF9dfTPr4YK8mLesogQcExMcCNoraab+sAMD k/+Ku3arkT6Cq4N3VF3HAANr/2Kb4UFzegcj1Xl04Dfy3Jx9t2xd9luK80NZI1qR XD/on8ELf8q+njYjtJnkdJlwwOJxFumhMx3QFJBuorg3zpq7uwvT9m8fvfALC/LW SdD9zFGabkyyKcFdZLLkSDFWPhlFlTrFJVT9KespOZjQ7hwVLjNhiXsDyJKowgZ2 nU3lkGsDTeEvERrwOxPMfOGCNo1fFZhH64xr0z6hHiCsAvexlEO99hhcd52VFMF1 tUsZBk0R5Fnu/wd4q5sddRdfNA== -----END CERTIFICATE-----Generated at Wed May 13 09:52:37 2026 by rpki-client