$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: oKV8ch8sVJMbGn85TdUZz+PurEk4CxlLB4Lo29vsBu4= Subject key identifier: 01:58:24:0D:0B:A1:E4:29:B0:A4:86:44:0C:9C:CB:BC:99:9F:86:8F Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 0657 Signing time: Wed 20 May 2026 22:42:00 +0000 Manifest this update: Wed 20 May 2026 22:41:59 +0000 Manifest next update: Wed 27 May 2026 22:41:59 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: dv7jLqAPLNYfj9qh7tL12/YqMnXBHif0u0Cjwseptq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: May 20 22:41:59 2026 GMT Not After : May 27 22:41:59 2026 GMT Subject: CN=6a0e38b8-5526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:a5:b1:38:92:f9:7e:23:14:1b:95:bd:c3: 71:b5:fe:d0:79:0d:0d:fe:d4:82:ce:aa:6a:bd:8b: 91:6b:41:4c:b1:1a:95:33:d1:bb:fa:8d:69:38:67: cb:99:c7:d0:e0:15:4f:d9:d7:03:32:36:a8:15:a3: 97:35:f0:b5:e0:53:84:ff:b4:17:8d:f6:3e:ec:75: 0a:cf:93:2f:a3:46:88:b8:58:95:df:a8:d7:52:11: 91:9c:07:2c:fe:b2:fb:ce:a4:1f:c4:83:66:d0:6d: ee:64:a5:af:ee:32:f9:45:60:ba:69:76:60:23:13: dd:63:2d:f6:2e:17:91:5a:38:fc:e7:74:56:4f:3c: 3b:b9:ef:84:79:a8:7b:67:cd:27:7f:26:03:60:97: 04:fe:66:58:38:5c:50:86:9d:4f:89:39:ae:1d:15: 14:ac:f9:5a:a4:11:bd:c4:44:59:cc:bc:d0:c2:c8: bf:c0:d4:5d:ae:5b:3e:86:28:98:f7:07:dc:0c:1d: ff:16:11:21:df:29:d1:d8:0d:a4:f4:08:36:ce:5f: a3:bd:37:83:ce:29:00:48:3d:87:05:7d:c1:e1:ec: df:8d:dd:1b:5c:d4:7d:cb:dc:69:cc:59:61:0a:79: 41:1c:47:71:94:43:8c:46:5a:0b:ab:0f:34:6a:33: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:58:24:0D:0B:A1:E4:29:B0:A4:86:44:0C:9C:CB:BC:99:9F:86:8F X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:39:5b:9e:de:21:0a:3d:6d:35:36:f0:30:b4:f0:5a:c7:bd: d8:38:21:89:06:57:34:ec:c2:4a:fd:03:7e:60:01:f2:ca:32: ff:9f:fe:8a:ab:32:da:93:40:53:3b:f3:34:c2:c9:0a:dc:e1: d3:b1:b2:fb:9e:d4:35:a4:45:cd:ca:08:d3:71:b2:96:0c:b3: 73:1f:88:7f:63:75:9a:48:21:b8:af:db:9e:ff:c5:6e:de:93: 73:51:80:0b:8b:56:90:88:90:3d:9c:98:d0:a9:24:49:0c:3e: 32:90:f3:da:d5:8a:f7:49:16:a4:87:fc:83:38:1c:d8:1d:d3: a9:5b:61:e9:19:8f:1e:a2:a8:be:38:14:60:44:af:06:3b:cb: 67:44:92:4c:1f:f5:3f:b2:fe:2d:38:df:9f:da:eb:d5:e3:9d: f8:d7:21:71:c0:7e:ab:05:25:f7:4e:67:e5:5e:f0:21:f6:d7: eb:ab:04:e7:c9:14:ac:9b:05:55:2e:33:ff:0c:e8:e1:2d:8f: 5a:dc:36:39:2a:8f:d6:a9:85:f8:8a:a6:27:6b:d2:61:b3:ef: 8e:12:92:4b:f3:78:94:57:bf:ba:6f:59:54:97:14:a1:53:1a: 16:ed:32:6b:38:67:d0:64:ac:3b:90:5a:7c:a5:91:ba:47:62: 07:aa:74:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjYwNTIwMjI0MTU5WhcNMjYwNTI3MjI0MTU5WjAYMRYwFAYD VQQDEw02YTBlMzhiOC01NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkYalsTiS+X4jFBuVvcNxtf7QeQ0N/tSCzqpqvYuRa0FMsRqVM9G7+o1pOGfL mcfQ4BVP2dcDMjaoFaOXNfC14FOE/7QXjfY+7HUKz5Mvo0aIuFiV36jXUhGRnAcs /rL7zqQfxINm0G3uZKWv7jL5RWC6aXZgIxPdYy32LheRWjj853RWTzw7ue+Eeah7 Z80nfyYDYJcE/mZYOFxQhp1PiTmuHRUUrPlapBG9xERZzLzQwsi/wNRdrls+hiiY 9wfcDB3/FhEh3ynR2A2k9Ag2zl+jvTeDzikASD2HBX3B4ezfjd0bXNR9y9xpzFlh CnlBHEdxlEOMRloLqw80ajPUcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFYJA0L oeQpsKSGRAycy7yZn4aPMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDlbnt4hCj1tNTbwMLTwWse92DghiQZXNOzCSv0DfmAB8soy/5/+iqsy2pNA UzvzNMLJCtzh07Gy+57UNaRFzcoI03Gylgyzcx+If2N1mkghuK/bnv/Fbt6Tc1GA C4tWkIiQPZyY0KkkSQw+MpDz2tWK90kWpIf8gzgc2B3TqVth6RmPHqKovjgUYESv BjvLZ0SSTB/1P7L+LTjfn9rr1eOd+NchccB+qwUl905n5V7wIfbX66sE58kUrJsF VS4z/wzo4S2PWtw2OSqP1qmF+IqmJ2vSYbPvjhKSS/N4lFe/um9ZVJcUoVMaFu0y azhn0GSsO5BafKWRukdiB6p0Eg== -----END CERTIFICATE-----Generated at Thu May 21 10:15:10 2026 by rpki-client