$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: rMY1nq0QBD+Qn2S+rs/PjYUQeu6ikeqwy/5PBYMuhEM= Subject key identifier: EA:39:71:6F:96:E0:05:6B:80:64:E1:51:6C:2A:D6:60:60:44:DE:1A Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 02D1 Signing time: Thu 21 May 2026 01:26:45 +0000 Manifest this update: Thu 21 May 2026 01:26:44 +0000 Manifest next update: Thu 28 May 2026 01:26:44 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: MVBeWBKzVS5tGdCux/1HQgtzL1/BcYwnSmaVBCpNPYI=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: qH4NxxqpOA2c5T+RIxBIM6trIh5aFuyiHzxc/Np3eOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: May 21 01:26:44 2026 GMT Not After : May 28 01:26:44 2026 GMT Subject: CN=6a0e5f54-459c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:e3:28:b8:18:47:47:f7:55:b4:9b:54:d9: 86:79:59:d3:0b:fc:14:cb:b9:76:07:fb:e6:b2:ae: 5b:f5:17:db:46:be:28:e2:51:10:5e:12:cf:bc:1f: fc:86:c9:e9:af:87:09:4d:8b:0b:3c:bf:6d:bf:03: 1a:16:84:35:0d:6b:03:59:d4:36:29:d4:43:f9:a9: db:25:b4:25:18:eb:41:e3:15:cd:e9:3b:6d:a7:d7: 61:33:85:c9:ff:65:c1:55:c3:e7:60:e8:20:0f:27: ee:f0:53:83:ee:51:03:f8:e4:29:5b:b9:b6:d2:1f: fb:df:d8:fa:2f:54:00:0f:df:89:5f:3b:f6:05:c4: fb:d0:9a:85:fe:c8:c9:47:b1:43:e3:5b:6a:13:ec: dc:70:87:91:b5:38:cc:b6:cb:1f:5a:dd:e5:49:33: 01:8e:fb:c1:f6:e0:d0:96:f0:5b:64:a9:20:9d:86: 0e:1a:3d:fa:c4:c4:9f:49:c0:0d:18:90:fb:84:b9: 1c:ef:c8:3b:c7:f2:c6:57:82:38:eb:71:46:c3:20: ee:f8:66:b4:f7:02:6c:e0:ba:0c:f5:a1:bf:4f:9b: 85:8e:90:c9:80:11:af:69:29:2c:cf:da:07:02:2c: 93:5a:d6:f3:7f:26:ff:93:bc:30:19:89:9e:b7:ce: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:71:6F:96:E0:05:6B:80:64:E1:51:6C:2A:D6:60:60:44:DE:1A X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3c:58:09:5b:12:96:c2:56:1a:5c:a8:5a:ab:63:66:bb:51: 53:af:ac:c4:78:9c:aa:19:9d:63:ca:48:67:8f:3f:1d:23:6f: f2:0e:6b:2d:21:5a:1a:a8:8d:95:95:55:84:b3:c8:3b:89:43: bd:bc:73:a5:aa:c4:8f:21:ba:dd:ce:cc:f7:d9:95:a9:29:16: d8:df:4e:a8:f2:73:6c:a7:73:d4:aa:fa:23:19:52:92:71:38: e7:8b:75:35:fe:d9:f4:57:82:8d:ac:85:19:12:1a:6b:a9:b2: f3:b2:db:16:d3:00:b9:ab:75:5f:5a:03:ae:1b:67:b2:a8:fe: 83:da:d7:e5:0b:eb:6d:76:a9:d5:be:7d:f8:7b:aa:a7:d1:b6: 9c:e2:e4:79:5b:04:26:40:06:69:c8:b3:c3:1d:ff:12:31:46: 12:8f:75:3f:9f:ae:81:34:31:64:f6:75:34:e7:31:ae:27:f8: 8d:1c:19:b9:87:f1:0b:7a:cc:f5:ba:02:50:d5:34:49:2f:5a: c2:17:e6:fb:64:93:62:eb:99:36:ba:12:e7:4b:b4:5d:ab:4c: 00:95:9a:08:31:11:74:54:90:9c:0c:e6:ed:a2:36:a4:07:ca: bb:17:a8:4b:e7:6c:5a:06:41:00:9e:86:c2:1d:7c:71:c8:db: 42:43:da:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjYwNTIxMDEyNjQ0WhcNMjYwNTI4MDEyNjQ0WjAYMRYwFAYD VQQDEw02YTBlNWY1NC00NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGDjKLgYR0f3VbSbVNmGeVnTC/wUy7l2B/vmsq5b9RfbRr4o4lEQXhLPvB/8 hsnpr4cJTYsLPL9tvwMaFoQ1DWsDWdQ2KdRD+anbJbQlGOtB4xXN6Tttp9dhM4XJ /2XBVcPnYOggDyfu8FOD7lED+OQpW7m20h/739j6L1QAD9+JXzv2BcT70JqF/sjJ R7FD41tqE+zccIeRtTjMtssfWt3lSTMBjvvB9uDQlvBbZKkgnYYOGj36xMSfScAN GJD7hLkc78g7x/LGV4I463FGwyDu+Ga09wJs4LoM9aG/T5uFjpDJgBGvaSksz9oH AiyTWtbzfyb/k7wwGYmet87lcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOo5cW+W 4AVrgGThUWwq1mBgRN4aMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbDxYCVsSlsJWGlyoWqtjZrtRU6+sxHicqhmdY8pIZ48/HSNv8g5rLSFaGqiN lZVVhLPIO4lDvbxzparEjyG63c7M99mVqSkW2N9OqPJzbKdz1Kr6IxlSknE454t1 Nf7Z9FeCjayFGRIaa6my87LbFtMAuat1X1oDrhtnsqj+g9rX5QvrbXap1b59+Huq p9G2nOLkeVsEJkAGacizwx3/EjFGEo91P5+ugTQxZPZ1NOcxrif4jRwZuYfxC3rM 9boCUNU0SS9awhfm+2STYuuZNroS50u0XatMAJWaCDERdFSQnAzm7aI2pAfKuxeo S+dsWgZBAJ6Gwh18ccjbQkPaPQ== -----END CERTIFICATE-----Generated at Thu May 21 09:37:54 2026 by rpki-client