$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: ILCL9BmlAFSy/2gAXJBxokQ15sxZ1/9ijK6EhGZagGw= Subject key identifier: 16:CB:ED:CB:FD:6C:CA:63:EF:75:C7:7C:41:5A:DF:9F:36:E0:C6:17 Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: EE Signing time: Thu 21 May 2026 06:31:06 +0000 Manifest this update: Thu 21 May 2026 06:31:06 +0000 Manifest next update: Thu 28 May 2026 06:31:06 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: beXp8jrT4tHSGbtAKIiF1kYWivSGIvSV3meqMNgIuGQ=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: C0UeRmdUC5XES5gqgoPUp5FT+eSznO9ZwMgEuNb9JBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: May 21 06:31:06 2026 GMT Not After : May 28 06:31:06 2026 GMT Subject: CN=6a0ea6aa-ce36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:a3:31:f8:ef:8a:da:e4:10:9d:03:2a:1d: 4a:04:68:b2:7f:41:c0:09:25:8e:55:48:6d:48:cd: fe:48:d4:ed:db:1e:36:9c:94:c0:84:2d:55:8b:ca: 49:f5:76:dc:e0:5b:b9:7e:3c:de:ca:d7:4b:21:8c: a9:7e:e8:88:d1:73:ac:3f:18:5f:7f:91:3e:79:97: 19:e3:7d:d5:0d:cb:42:9d:5c:42:76:f4:45:37:8e: 44:fc:cd:96:b2:2b:08:15:78:b8:1f:d8:42:d7:8d: c4:c7:75:4b:d1:fc:38:ed:30:25:e7:fa:94:b1:05: 98:ac:4a:36:37:cc:04:67:da:54:23:04:a5:4e:ba: d6:97:4c:ec:9a:43:d3:8a:bd:79:1f:06:cb:b5:d7: 28:2a:9c:68:af:ad:80:33:ca:5e:fd:91:8d:84:ab: 6f:c4:7c:34:65:c2:86:a7:0f:ae:0f:8e:5a:96:52: 39:e4:d8:60:04:43:a4:da:3d:c1:fd:d7:00:83:f8: ad:34:18:e8:ae:a0:c9:b9:a9:ac:a9:69:5d:96:bc: 74:ea:95:78:43:bb:0a:d9:6d:c2:46:d7:75:37:ab: 7c:40:b0:04:36:37:13:1a:1a:22:1c:6c:3e:28:5c: f3:7d:95:20:7f:aa:c0:a4:d9:4e:1d:eb:7c:f0:f9: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CB:ED:CB:FD:6C:CA:63:EF:75:C7:7C:41:5A:DF:9F:36:E0:C6:17 X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:37:91:db:ed:2f:8f:06:a3:66:94:72:37:62:6e:db:cd:56: 04:de:af:ff:d7:af:05:77:fb:4d:69:8a:72:3b:b8:1f:f8:f7: c3:d8:d9:f0:d4:00:a2:e3:01:76:67:43:16:14:b1:0c:ac:40: ea:24:bd:46:1b:cf:e8:3d:27:3e:04:30:03:d6:5f:9e:da:50: 18:a1:46:fe:62:67:fa:ed:b6:79:ef:b2:1e:f9:2a:ec:4f:ad: f8:c1:29:f4:2d:ed:6f:de:e4:41:5d:b3:03:d2:98:52:35:92: 91:f7:58:b3:0c:86:6b:08:1b:dc:48:45:46:6b:49:64:8f:c8: 2b:80:8f:b9:47:16:a7:3a:dd:36:d5:93:c2:a5:9f:c6:09:0e: 5e:b9:01:7d:98:7d:33:de:48:ff:2e:6a:43:45:41:a2:c4:9a: 84:58:dc:a9:14:35:d7:e4:7e:94:54:1a:48:e9:f1:9c:96:9f: 4f:f3:c5:71:2f:12:6e:4e:b1:b0:bf:4b:2d:ce:5f:54:b3:11: 1b:ea:d6:62:60:32:b0:1a:4e:c1:04:9f:d6:5c:48:86:77:b9: e4:8a:0a:5c:01:db:1f:22:8b:4a:2f:9a:ac:77:1d:c6:e9:06: e3:2c:50:94:36:a1:78:af:ed:80:42:fc:45:69:b6:c1:63:23: 53:da:f6:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4 RkU3MDBCNjMwHhcNMjYwNTIxMDYzMTA2WhcNMjYwNTI4MDYzMTA2WjAYMRYwFAYD VQQDEw02YTBlYTZhYS1jZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yCjMfjvitrkEJ0DKh1KBGiyf0HACSWOVUhtSM3+SNTt2x42nJTAhC1Vi8pJ 9Xbc4Fu5fjzeytdLIYypfuiI0XOsPxhff5E+eZcZ433VDctCnVxCdvRFN45E/M2W sisIFXi4H9hC143Ex3VL0fw47TAl5/qUsQWYrEo2N8wEZ9pUIwSlTrrWl0zsmkPT ir15HwbLtdcoKpxor62AM8pe/ZGNhKtvxHw0ZcKGpw+uD45allI55NhgBEOk2j3B /dcAg/itNBjorqDJuamsqWldlrx06pV4Q7sK2W3CRtd1N6t8QLAENjcTGhoiHGw+ KFzzfZUgf6rApNlOHet88PncBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbL7cv9 bMpj73XHfEFa35824MYXMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w VkdlbEpzT0NYc09QNXdDMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQjeR2+0vjwajZpRyN2Ju281WBN6v/9evBXf7TWmKcju4H/j3w9jZ8NQAouMB dmdDFhSxDKxA6iS9RhvP6D0nPgQwA9ZfntpQGKFG/mJn+u22ee+yHvkq7E+t+MEp 9C3tb97kQV2zA9KYUjWSkfdYswyGawgb3EhFRmtJZI/IK4CPuUcWpzrdNtWTwqWf xgkOXrkBfZh9M95I/y5qQ0VBosSahFjcqRQ11+R+lFQaSOnxnJafT/PFcS8Sbk6x sL9LLc5fVLMRG+rWYmAysBpOwQSf1lxIhne55IoKXAHbHyKLSi+arHcdxukG4yxQ lDaheK/tgEL8RWm2wWMjU9r2xg== -----END CERTIFICATE-----Generated at Thu May 21 09:36:09 2026 by rpki-client