$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: suD/LgLv2LkgXqxPKkwxbbMoyG+UIhQi9bzjJDbuymg= Subject key identifier: 3C:97:50:30:D6:6A:CA:6F:C0:FD:F5:53:6B:0C:75:96:55:6E:6C:AB Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0202 Signing time: Thu 21 May 2026 03:15:29 +0000 Manifest this update: Thu 21 May 2026 03:15:29 +0000 Manifest next update: Thu 28 May 2026 03:15:29 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: /YjsfrJp9/Est5ABMRi5soA8pCuh9ImiTtWHojfnwRo=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: May 21 03:15:29 2026 GMT Not After : May 28 03:15:29 2026 GMT Subject: CN=6a0e78d1-3429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:ff:52:20:3b:bd:ac:29:cc:66:de:82:30: 32:96:07:75:ae:e8:a8:c2:24:d1:29:eb:ac:d6:06: cc:c8:3a:65:a1:93:7b:58:4f:b6:69:80:e1:c8:1a: 09:1f:3f:46:24:28:55:1e:4f:3f:a9:22:e8:e0:09: 98:1a:a1:e3:74:c1:78:8d:ca:af:26:8e:99:1d:8c: 91:4a:5d:c7:b3:a7:c4:61:26:b0:10:16:a3:d7:dc: 0b:3d:6c:76:d4:f0:3c:da:5e:fb:12:1f:59:a6:48: ca:7a:e6:25:4a:a7:13:f4:ce:ea:56:be:d1:79:68: 23:b1:00:49:2c:00:27:39:f3:e1:9f:7f:35:0d:d2: 06:c6:63:b7:db:b3:6c:7c:25:c4:c1:c9:60:b9:72: 1e:da:65:7d:18:b8:8b:47:a3:ca:0c:1a:2b:d8:09: 88:1f:75:8f:fd:2b:91:c0:9e:49:ce:37:8f:8c:4c: 52:4a:a0:e5:e2:4c:f2:26:7e:f0:00:5b:7c:3b:ae: b1:80:a2:03:73:92:ad:4c:c6:f8:0a:f5:9c:00:14: 59:8e:06:08:31:a8:a0:ba:92:4c:cb:55:e2:84:f1: 4d:a5:c3:97:3a:6c:ce:8f:3a:f4:1f:ec:6c:0c:0c: 5c:53:29:5d:44:7b:b1:cb:5b:04:33:39:16:d1:c5: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:50:30:D6:6A:CA:6F:C0:FD:F5:53:6B:0C:75:96:55:6E:6C:AB X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:ba:7f:28:3e:b0:8b:5d:27:77:2a:86:5c:8a:bd:39:bf: 91:9b:b1:44:66:42:c1:e0:77:13:b2:7e:c5:36:e0:b7:ea:75: 4e:35:c9:5d:c0:88:ad:33:a7:8f:39:9a:c4:37:11:5c:00:a4: 5c:32:a6:fa:e2:e9:6b:ff:12:62:81:82:d4:3b:b1:86:d9:6e: 29:75:aa:93:92:97:ec:73:42:c5:b0:ec:db:f3:a1:7f:ec:f6: b2:47:d0:5d:e3:27:e7:db:91:24:45:fb:0f:bf:fc:21:ab:cd: 9e:4a:84:33:f1:7e:32:ec:b5:34:0c:a5:d0:91:ff:75:54:d4: de:d1:9a:0b:3a:3f:1d:2f:b2:db:1f:b8:ce:c8:c0:77:41:a0: c4:89:e5:18:04:c3:a7:e7:7e:a2:9d:9d:0e:f4:bb:69:b6:c5: c8:f9:47:b1:43:56:e0:2b:b4:93:ad:a5:b1:43:06:26:66:11: 0f:fe:e3:68:90:5f:6b:e6:3a:20:00:46:f3:48:5c:4c:11:51: 0e:63:1b:62:34:1a:be:1d:28:eb:ce:72:52:3c:c0:02:5c:40: fb:b8:d8:58:dd:32:ea:24:db:16:c2:49:8d:40:61:04:92:99: 69:e3:c7:03:ae:ab:ca:b1:dc:9b:57:03:0b:88:bc:29:9d:31: 2b:c7:99:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwNTIxMDMxNTI5WhcNMjYwNTI4MDMxNTI5WjAYMRYwFAYD VQQDEw02YTBlNzhkMS0zNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhD/UiA7vawpzGbegjAylgd1ruiowiTRKeus1gbMyDploZN7WE+2aYDhyBoJ Hz9GJChVHk8/qSLo4AmYGqHjdMF4jcqvJo6ZHYyRSl3Hs6fEYSawEBaj19wLPWx2 1PA82l77Eh9ZpkjKeuYlSqcT9M7qVr7ReWgjsQBJLAAnOfPhn381DdIGxmO327Ns fCXEwclguXIe2mV9GLiLR6PKDBor2AmIH3WP/SuRwJ5JzjePjExSSqDl4kzyJn7w AFt8O66xgKIDc5KtTMb4CvWcABRZjgYIMaigupJMy1XihPFNpcOXOmzOjzr0H+xs DAxcUyldRHuxy1sEMzkW0cUO9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyXUDDW aspvwP31U2sMdZZVbmyrMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlb+6fyg+sItdJ3cqhlyKvTm/kZuxRGZCweB3E7J+xTbgt+p1TjXJXcCIrTOn jzmaxDcRXACkXDKm+uLpa/8SYoGC1DuxhtluKXWqk5KX7HNCxbDs2/Ohf+z2skfQ XeMn59uRJEX7D7/8IavNnkqEM/F+Muy1NAyl0JH/dVTU3tGaCzo/HS+y2x+4zsjA d0GgxInlGATDp+d+op2dDvS7abbFyPlHsUNW4Cu0k62lsUMGJmYRD/7jaJBfa+Y6 IABG80hcTBFRDmMbYjQavh0o685yUjzAAlxA+7jYWN0y6iTbFsJJjUBhBJKZaePH A66ryrHcm1cDC4i8KZ0xK8eZAg== -----END CERTIFICATE-----Generated at Thu May 21 10:24:53 2026 by rpki-client