$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: HPLYngWhkMWnyuis3WlHml5oIf7IEfk2TD6JeRE6WrE= Subject key identifier: 69:AD:8F:7B:B1:7A:E1:35:6B:FD:EE:C0:AB:01:A8:2C:75:9E:CE:FC Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 04FA Signing time: Wed 20 May 2026 23:51:11 +0000 Manifest this update: Wed 20 May 2026 23:51:10 +0000 Manifest next update: Wed 27 May 2026 23:51:10 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: knxHbOOWemdHtHAbTWDln8jsAu+vcJsxpI0I//cx1Ac=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: ynmW2tXKon2Mm9XJxO05TX1KTfoacHd+1EhVNC9kNXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: May 20 23:51:10 2026 GMT Not After : May 27 23:51:10 2026 GMT Subject: CN=6a0e48ef-b1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:a1:86:84:0e:cf:b0:33:cc:16:a5:db:52: fb:91:38:bd:61:ae:73:a5:68:04:12:59:93:1c:80: a2:fb:ae:3d:2c:5d:94:23:d0:14:b2:5c:38:82:a9: c8:6f:7b:35:a1:57:1b:c1:10:29:eb:99:80:f9:e4: 77:da:4a:ec:b2:e4:5a:ed:0b:cb:38:7d:32:40:1d: 52:46:e1:20:50:14:b5:61:aa:15:a8:85:bf:c2:8b: b2:07:0b:2a:6c:c9:de:ff:ec:62:14:d1:25:5d:fe: 47:94:11:89:2b:e1:c9:ce:ef:2d:20:09:c0:ae:87: 30:04:42:21:83:d3:7f:0a:26:25:5f:c2:d1:7f:3d: 7d:4e:db:dc:6c:65:5b:8c:4b:69:ba:50:4b:00:7a: 14:57:e1:79:84:04:6a:ce:9b:9e:a4:f0:df:b0:70: cd:45:28:da:24:45:c5:84:13:61:a0:84:eb:96:d9: 6b:de:84:b7:d2:5c:a8:97:b8:1c:c4:50:11:9e:fb: 7c:6a:d2:6e:89:03:5b:e2:74:11:7f:1d:b7:72:93: cc:29:49:cf:e4:75:d5:26:ac:16:9b:f6:1f:0e:d8: dc:e4:1b:00:01:d1:f5:7d:d5:ef:04:44:9d:5e:c6: c2:2a:c0:45:9f:0d:01:82:ce:75:21:35:e1:78:61: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:8F:7B:B1:7A:E1:35:6B:FD:EE:C0:AB:01:A8:2C:75:9E:CE:FC X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:df:f1:ad:a8:e8:10:62:26:bd:ca:3f:b7:c5:f4:c0:de:31: 61:fb:18:ce:df:18:d0:40:d4:79:cf:7a:5b:27:55:3e:93:e5: d6:a4:3a:a3:48:e7:6c:24:19:c7:12:5f:24:b3:04:e3:54:c3: 6d:c5:3d:d9:70:f0:ec:42:a4:aa:03:7e:47:32:13:e3:17:7b: 28:da:10:7e:aa:4d:6c:02:c1:c0:aa:bf:cf:48:c9:ab:27:32: de:b9:72:85:fb:9c:bc:c3:77:9a:da:22:98:ba:92:77:9c:68: f9:a1:89:b0:37:1f:de:04:b2:c7:a0:52:58:1b:ee:03:8b:3c: ca:0a:4e:97:5e:a3:7d:59:4e:53:51:20:83:2d:c6:ef:b3:00: f8:82:c7:63:a6:d0:53:2a:1e:c3:2d:7c:c0:2e:97:a9:f0:63: 69:62:be:d1:0c:71:88:7b:f5:9d:d6:7f:18:ac:1e:8d:26:34: e5:02:49:0f:1c:9f:c9:cf:68:c4:1d:af:4c:79:f6:54:fd:b1: 67:97:4f:34:38:96:d2:ba:a4:5d:36:cc:a8:32:eb:54:07:2d: e3:ac:60:45:63:04:36:c3:fb:e1:73:ea:fe:62:8c:09:47:ab: a1:88:32:58:4d:1c:ee:c7:a7:09:53:fa:55:c7:06:30:cc:74: 4b:ff:88:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjYwNTIwMjM1MTEwWhcNMjYwNTI3MjM1MTEwWjAYMRYwFAYD VQQDEw02YTBlNDhlZi1iMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmahhoQOz7AzzBal21L7kTi9Ya5zpWgEElmTHICi+649LF2UI9AUslw4gqnI b3s1oVcbwRAp65mA+eR32krssuRa7QvLOH0yQB1SRuEgUBS1YaoVqIW/wouyBwsq bMne/+xiFNElXf5HlBGJK+HJzu8tIAnArocwBEIhg9N/CiYlX8LRfz19TtvcbGVb jEtpulBLAHoUV+F5hARqzpuepPDfsHDNRSjaJEXFhBNhoITrltlr3oS30lyol7gc xFARnvt8atJuiQNb4nQRfx23cpPMKUnP5HXVJqwWm/YfDtjc5BsAAdH1fdXvBESd XsbCKsBFnw0Bgs51ITXheGGaYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmtj3ux euE1a/3uwKsBqCx1ns78MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASd/xrajoEGImvco/t8X0wN4xYfsYzt8Y0EDUec96WydVPpPl1qQ6o0jnbCQZ xxJfJLME41TDbcU92XDw7EKkqgN+RzIT4xd7KNoQfqpNbALBwKq/z0jJqycy3rly hfucvMN3mtoimLqSd5xo+aGJsDcf3gSyx6BSWBvuA4s8ygpOl16jfVlOU1Eggy3G 77MA+ILHY6bQUyoewy18wC6XqfBjaWK+0QxxiHv1ndZ/GKwejSY05QJJDxyfyc9o xB2vTHn2VP2xZ5dPNDiW0rqkXTbMqDLrVAct46xgRWMENsP74XPq/mKMCUeroYgy WE0c7senCVP6VccGMMx0S/+Iig== -----END CERTIFICATE-----Generated at Thu May 21 10:20:21 2026 by rpki-client