$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: 0UZf3DS9E/2fE4YpcFMa/4JgnCzEcUNLhe3FE8r+WSA= Subject key identifier: C7:4A:F2:5A:63:A3:CD:DE:D2:3C:07:A8:9C:05:D0:EE:F0:B1:71:C5 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 11CE Signing time: Wed 20 May 2026 17:10:23 +0000 Manifest this update: Wed 20 May 2026 17:10:22 +0000 Manifest next update: Wed 27 May 2026 17:10:22 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: F8pqyX0YT2m1iBLdFIgFG7s4pa9fxmNdbfSH5XLPoFg=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4569 (0x11d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: May 20 17:10:22 2026 GMT Not After : May 27 17:10:22 2026 GMT Subject: CN=6a0deaff-b8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:24:57:94:5f:8c:b4:15:c4:4e:85:4c:99: 64:a5:a0:dd:ea:4e:0c:eb:46:50:bf:52:c7:73:60: a0:43:c0:98:c2:a7:0a:76:7f:9c:03:06:b1:ad:78: 8d:5f:cf:f5:e8:fd:75:94:63:d3:b9:f2:13:b3:c8: 13:d9:ce:e8:cc:bd:32:58:8e:1b:37:80:61:f4:7b: 88:8e:b6:28:69:26:cf:2e:8c:5b:70:81:c2:f1:de: 8c:ae:59:77:49:ee:3b:49:e4:29:4d:87:2b:41:b2: 4e:3a:10:05:9f:7e:e0:20:08:50:b5:13:e4:bd:c4: fe:38:57:75:ff:f3:b5:85:99:78:5c:69:a7:77:cc: 32:85:fd:44:15:77:cd:9a:e2:09:b4:8a:63:f6:19: 0d:7c:e1:8e:33:96:8c:b2:51:e2:ad:1f:de:0b:01: 18:30:6a:79:85:1a:97:9c:ca:4f:b7:3e:69:37:7e: 1e:60:2d:2d:63:8c:7d:74:94:d1:11:d3:5b:9b:96: d5:52:45:9c:98:be:d0:20:9d:72:2f:19:bb:bd:45: dd:0d:6d:09:2a:f5:1c:c1:28:cf:e2:96:8b:5c:7e: 4e:23:f1:94:64:2f:d1:43:a4:72:76:e7:00:9f:a5: 0d:39:09:81:25:60:93:7e:96:f7:7f:e8:f6:1f:f5: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4A:F2:5A:63:A3:CD:DE:D2:3C:07:A8:9C:05:D0:EE:F0:B1:71:C5 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:07:36:86:d2:d5:bb:9a:14:cb:34:fb:a6:b5:05:66:2e:3f: 65:bb:01:36:13:aa:71:61:12:d0:eb:2a:4c:4a:fb:09:d8:f5: 13:f7:30:f1:8e:3a:4e:da:90:67:ac:a5:9c:71:81:28:95:5d: 54:66:3a:49:c1:1b:1b:f5:d2:67:e6:45:a8:0c:0c:5d:bb:f0: 6c:06:7c:f7:7c:53:52:ee:73:c4:09:93:30:5d:9b:db:2b:5b: de:7f:0f:9d:98:68:23:2c:53:ba:ff:52:29:6d:7b:f1:64:b0: bc:cc:69:13:f1:d2:e2:7e:23:ba:c9:e8:ec:a8:4f:be:6a:88: 5c:ec:de:f2:51:80:7e:b0:d3:5f:12:c4:08:94:8c:ba:9a:0f: 98:ae:86:fc:58:83:43:5f:ef:41:93:13:f2:0e:a3:26:a0:ad: 2b:bc:e0:96:f1:a0:3a:5b:52:5c:b2:a9:b0:17:c4:63:60:d2: cc:ac:90:0e:05:c4:c1:95:d7:82:24:b6:2a:bd:5f:c7:70:55: 9d:04:01:9f:85:97:ac:52:f3:4f:d3:24:2b:89:cc:36:f4:ad: 65:1c:2f:1e:55:9f:88:15:8e:1c:f6:e4:a9:98:b3:91:3b:b0: 68:1b:59:cb:88:e6:64:aa:9b:9a:6c:c4:d6:5f:7b:d4:03:d6: 39:0c:b8:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwNTIwMTcxMDIyWhcNMjYwNTI3MTcxMDIyWjAYMRYwFAYD VQQDEw02YTBkZWFmZi1iOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVAkV5RfjLQVxE6FTJlkpaDd6k4M60ZQv1LHc2CgQ8CYwqcKdn+cAwaxrXiN X8/16P11lGPTufITs8gT2c7ozL0yWI4bN4Bh9HuIjrYoaSbPLoxbcIHC8d6Mrll3 Se47SeQpTYcrQbJOOhAFn37gIAhQtRPkvcT+OFd1//O1hZl4XGmnd8wyhf1EFXfN muIJtIpj9hkNfOGOM5aMslHirR/eCwEYMGp5hRqXnMpPtz5pN34eYC0tY4x9dJTR EdNbm5bVUkWcmL7QIJ1yLxm7vUXdDW0JKvUcwSjP4paLXH5OI/GUZC/RQ6RyducA n6UNOQmBJWCTfpb3f+j2H/U+7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdK8lpj o83e0jwHqJwF0O7wsXHFMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAawc2htLVu5oUyzT7prUFZi4/ZbsBNhOqcWES0OsqTEr7Cdj1E/cw8Y46TtqQ Z6ylnHGBKJVdVGY6ScEbG/XSZ+ZFqAwMXbvwbAZ893xTUu5zxAmTMF2b2ytb3n8P nZhoIyxTuv9SKW178WSwvMxpE/HS4n4jusno7KhPvmqIXOze8lGAfrDTXxLECJSM upoPmK6G/FiDQ1/vQZMT8g6jJqCtK7zglvGgOltSXLKpsBfEY2DSzKyQDgXEwZXX giS2Kr1fx3BVnQQBn4WXrFLzT9MkK4nMNvStZRwvHlWfiBWOHPbkqZizkTuwaBtZ y4jmZKqbmmzE1l971APWOQy4RA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:57 2026 by rpki-client