$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: 3IxwTnaUU9qeBdiwRH+xxGqWJznef2fotic3KL9FPC4= Subject key identifier: A0:92:E4:D9:E5:B3:7D:89:82:81:1B:61:CD:17:11:0C:D8:FD:EA:EE Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0210 Signing time: Thu 21 May 2026 03:00:40 +0000 Manifest this update: Thu 21 May 2026 03:00:40 +0000 Manifest next update: Thu 28 May 2026 03:00:40 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: YHAqP/fBv1QPT+fU+7CYm+5AYbuZ6eG+8tmJDwd5jd4=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: May 21 03:00:40 2026 GMT Not After : May 28 03:00:40 2026 GMT Subject: CN=6a0e7558-8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:8f:33:2a:78:7a:30:8e:25:a1:0c:fc:57: 40:f5:c3:8f:68:52:ff:16:e2:fc:f4:6e:4e:ec:cc: dc:22:36:15:ef:c0:73:6b:a4:bf:27:7a:7f:99:b2: c8:f2:c9:d3:f2:db:82:70:13:12:97:45:92:d7:eb: 4b:89:53:36:88:b6:7f:d7:3b:f3:9e:3d:9b:f3:a2: 29:38:8d:7b:0d:1e:78:46:5a:38:11:c7:40:88:e0: d7:d0:f3:bc:d0:e0:a0:41:32:0d:5d:52:99:b5:13: 8d:5e:fa:08:2f:dc:47:62:eb:da:33:18:e1:66:23: 14:53:dd:48:c3:79:90:c0:6e:5d:e0:9d:7c:92:13: 80:1c:d8:fc:21:0f:9f:c7:a9:05:7b:fe:69:b6:10: 78:0b:2e:f6:66:89:a8:fc:05:df:35:b1:04:9f:f7: de:23:8f:4a:7e:2a:c3:0c:db:38:85:e9:6e:7a:57: 5f:96:59:15:8a:41:f8:a8:9e:0a:bc:6b:e2:c0:c3: 25:6e:97:61:99:ce:4b:3c:fa:59:5f:6a:50:ef:7c: df:78:1d:74:e5:c1:d6:f5:df:b1:3d:43:2b:f3:5b: 43:9c:9b:dd:d6:27:8e:b6:0c:bb:0e:fa:ea:65:22: a4:ee:b6:4e:be:e2:ea:86:90:ca:0d:30:43:a9:1e: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:E4:D9:E5:B3:7D:89:82:81:1B:61:CD:17:11:0C:D8:FD:EA:EE X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4f:55:43:02:74:3f:42:31:bd:2a:f5:cf:58:c7:6d:64:e4: 6b:b3:24:be:6f:07:a3:91:76:11:4d:b1:9a:d8:7e:d2:4a:cc: e8:14:4b:9b:98:de:a9:c9:a2:ff:42:b0:99:d0:aa:f7:a3:40: 35:a3:a1:7b:92:88:3f:5b:36:06:51:c3:f4:28:ee:ca:be:a2: 13:7b:ba:17:bb:a8:9b:35:e3:0d:0b:53:33:30:55:88:49:68: f6:91:87:ae:1e:69:00:ee:5d:f0:1e:3c:c1:d0:1e:5a:91:d6: 61:69:a5:98:2f:c7:04:2d:c7:a9:16:e6:aa:9a:30:b3:53:21: 15:29:23:ae:f2:5c:04:23:99:c2:ca:0c:ab:8a:e6:4c:f2:25: a1:f3:0d:1e:dc:e2:f8:22:9a:11:8b:1b:4f:d5:d5:84:aa:f2: a6:31:40:4e:24:4c:3f:7c:ae:67:b1:97:af:aa:95:33:9a:ed: 88:7f:b3:9f:63:79:40:aa:b8:1a:10:8f:1a:cb:f3:52:67:24: 9f:f5:84:ae:0c:d3:1c:17:6e:56:c2:e5:cd:50:6b:6b:e6:8a: a5:81:2a:d1:bf:e5:fb:96:c9:72:bb:94:9c:fb:8f:0e:bb:db: a0:c9:b9:b6:e0:14:61:f0:01:4c:d2:8b:20:4e:5f:ef:6a:af: 7a:30:2f:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjYwNTIxMDMwMDQwWhcNMjYwNTI4MDMwMDQwWjAYMRYwFAYD VQQDEw02YTBlNzU1OC04ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVqPMyp4ejCOJaEM/FdA9cOPaFL/FuL89G5O7MzcIjYV78Bza6S/J3p/mbLI 8snT8tuCcBMSl0WS1+tLiVM2iLZ/1zvznj2b86IpOI17DR54Rlo4EcdAiODX0PO8 0OCgQTINXVKZtRONXvoIL9xHYuvaMxjhZiMUU91Iw3mQwG5d4J18khOAHNj8IQ+f x6kFe/5pthB4Cy72Zomo/AXfNbEEn/feI49KfirDDNs4helueldfllkVikH4qJ4K vGviwMMlbpdhmc5LPPpZX2pQ73zfeB105cHW9d+xPUMr81tDnJvd1ieOtgy7Dvrq ZSKk7rZOvuLqhpDKDTBDqR6PGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCS5Nnl s32JgoEbYc0XEQzY/eruMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo09VQwJ0P0IxvSr1z1jHbWTka7Mkvm8Ho5F2EU2xmth+0krM6BRLm5jeqcmi /0KwmdCq96NANaOhe5KIP1s2BlHD9Cjuyr6iE3u6F7uomzXjDQtTMzBViElo9pGH rh5pAO5d8B48wdAeWpHWYWmlmC/HBC3HqRbmqpows1MhFSkjrvJcBCOZwsoMq4rm TPIlofMNHtzi+CKaEYsbT9XVhKrypjFATiRMP3yuZ7GXr6qVM5rtiH+zn2N5QKq4 GhCPGsvzUmckn/WErgzTHBduVsLlzVBra+aKpYEq0b/l+5bJcruUnPuPDrvboMm5 tuAUYfABTNKLIE5f72qvejAvIw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:07 2026 by rpki-client