$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: NZTidliZ4T1fkcG0yscb/yMjfzzYRGbpy1CH7DRPc+A= Subject key identifier: 22:AB:DF:AB:42:5B:7E:D0:92:21:25:7A:AA:1F:3B:12:69:0E:51:48 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17C9 Signing time: Tue 12 May 2026 16:34:18 +0000 Manifest this update: Tue 12 May 2026 16:34:17 +0000 Manifest next update: Tue 19 May 2026 16:34:17 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: QSREnOP7GqcI5c1ISQAqtyGOCFLT4VdfiASSkAzBfEU=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6102 (0x17d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: May 12 16:34:17 2026 GMT Not After : May 19 16:34:17 2026 GMT Subject: CN=6a03568a-fe18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:98:db:c3:f7:53:6b:92:79:74:17:59:59: 67:1f:46:f8:ac:77:13:0d:9f:4e:6b:85:de:d7:3d: 98:6d:f2:4a:bb:db:e2:67:fb:50:2a:60:df:40:70: f1:7b:d5:a5:50:38:51:eb:22:54:57:f4:0b:24:36: e8:ff:50:21:6d:1d:f7:22:fd:c1:fa:fe:22:92:39: fc:0c:a9:ac:a1:eb:3f:53:e8:5b:7b:a0:31:fc:77: 70:c9:d5:31:52:85:a5:db:21:29:b5:4f:bd:3f:7c: 66:d6:6e:26:7e:64:1c:71:7b:9c:7d:6f:2b:31:b6: 26:10:7c:9b:10:39:77:be:12:1a:65:81:a6:86:b8: 86:eb:17:2a:fe:62:67:0d:4d:26:d3:2a:0e:e0:99: ae:a3:a0:85:df:c3:fc:51:c6:b9:5e:02:5d:69:e2: d8:a7:06:d5:b1:ab:8b:15:83:a4:68:06:6a:6c:52: 66:6e:85:1b:3a:c4:03:9f:a6:63:93:2d:13:9e:c3: 45:2b:65:54:ab:da:6e:49:df:8a:f5:eb:91:a3:99: 53:83:f1:46:d5:9b:69:eb:16:71:c6:fd:27:dc:c8: c9:68:e3:9f:97:1a:e6:f0:60:08:b6:6a:a2:cc:9d: fb:ad:e3:70:7e:de:06:e5:1c:13:19:9b:29:27:20: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AB:DF:AB:42:5B:7E:D0:92:21:25:7A:AA:1F:3B:12:69:0E:51:48 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9d:44:a7:a6:ef:cb:ee:49:78:a6:15:5d:c5:fe:86:f8:80: ca:2d:88:58:52:02:b6:43:d2:01:b2:b6:a4:23:fb:61:e5:44: 05:fd:7f:23:02:57:46:2d:b8:18:ad:66:4f:1b:6f:5a:44:f0: e2:98:ce:45:b0:f8:99:f1:29:0a:74:61:09:31:89:8c:4a:fe: 3d:5e:36:16:72:2d:b5:1b:c7:e6:01:89:fb:79:e9:9b:5a:be: 14:3e:ef:1b:93:b6:18:52:47:1e:43:c5:66:23:4a:c1:c0:a6: 8d:41:85:e9:bd:08:b5:b7:af:65:e9:ba:3e:4d:f1:50:16:27: c0:6f:af:58:4b:eb:b8:a0:19:cd:34:b4:ee:38:98:43:65:8e: a1:61:9a:89:3d:1e:4e:50:fc:44:f6:fc:42:39:2e:1d:e7:e1: 75:de:3b:a1:e6:35:ae:16:39:d4:c3:46:5f:a1:af:bd:3b:36: 68:03:21:0e:77:12:07:df:00:17:54:df:40:c1:8f:52:88:e0: 42:8e:7c:0d:b7:46:0e:cd:aa:9d:ed:18:8e:98:54:12:ec:54: 8e:28:1a:5a:d4:04:dd:d9:fc:87:94:a0:90:16:03:e6:78:71: 87:d6:6d:c9:72:6a:25:32:b6:df:80:d9:08:c6:ac:69:08:bd: f0:f1:c1:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwNTEyMTYzNDE3WhcNMjYwNTE5MTYzNDE3WjAYMRYwFAYD VQQDEw02YTAzNTY4YS1mZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09qY28P3U2uSeXQXWVlnH0b4rHcTDZ9Oa4Xe1z2YbfJKu9viZ/tQKmDfQHDx e9WlUDhR6yJUV/QLJDbo/1AhbR33Iv3B+v4ikjn8DKmsoes/U+hbe6Ax/HdwydUx UoWl2yEptU+9P3xm1m4mfmQccXucfW8rMbYmEHybEDl3vhIaZYGmhriG6xcq/mJn DU0m0yoO4Jmuo6CF38P8Uca5XgJdaeLYpwbVsauLFYOkaAZqbFJmboUbOsQDn6Zj ky0TnsNFK2VUq9puSd+K9euRo5lTg/FG1Ztp6xZxxv0n3MjJaOOflxrm8GAItmqi zJ37reNwft4G5RwTGZspJyB5EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKr36tC W37QkiEleqofOxJpDlFIMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJ1Ep6bvy+5JeKYVXcX+hviAyi2IWFICtkPSAbK2pCP7YeVEBf1/IwJXRi24 GK1mTxtvWkTw4pjORbD4mfEpCnRhCTGJjEr+PV42FnIttRvH5gGJ+3npm1q+FD7v G5O2GFJHHkPFZiNKwcCmjUGF6b0ItbevZem6Pk3xUBYnwG+vWEvruKAZzTS07jiY Q2WOoWGaiT0eTlD8RPb8QjkuHefhdd47oeY1rhY51MNGX6GvvTs2aAMhDncSB98A F1TfQMGPUojgQo58DbdGDs2qne0YjphUEuxUjigaWtQE3dn8h5SgkBYD5nhxh9Zt yXJqJTK234DZCMasaQi98PHBBg== -----END CERTIFICATE-----Generated at Wed May 13 07:48:33 2026 by rpki-client