$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: +NksrSKceTOWlI1cG1lIosT071D6wsJLdTHCQ7j+Pig= Subject key identifier: 6B:97:7D:B6:64:C3:C5:7B:E2:CF:EB:CF:4D:5C:2B:FE:E9:BB:64:1F Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 09B9 Signing time: Wed 20 May 2026 19:56:10 +0000 Manifest this update: Wed 20 May 2026 19:56:10 +0000 Manifest next update: Wed 27 May 2026 19:56:10 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: z8NrOzlU9ei70p/FgA14at8YfgVDfrezgpXWmUzL0Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: May 20 19:56:10 2026 GMT Not After : May 27 19:56:10 2026 GMT Subject: CN=6a0e11da-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:dc:e8:bd:24:8d:25:38:84:fa:55:83:50: 8d:4b:49:cf:7b:3c:16:f7:62:72:e3:da:74:32:11: d9:6d:8a:87:f3:fc:98:9e:34:6d:fe:c5:80:91:ab: 5e:d3:29:37:61:d0:7b:45:75:ad:7b:5e:a2:59:1d: e7:61:08:06:a0:e3:9d:3d:f4:63:7c:4e:21:ab:e6: e1:27:46:6e:d0:0c:55:48:94:66:85:5f:44:5d:15: 7f:71:59:9b:7c:2e:98:6c:64:90:da:a3:92:f2:9d: 8a:5b:9b:63:d6:d2:11:ae:d1:4a:d6:68:33:fa:af: 68:24:74:78:47:c7:6f:c4:42:a2:5f:3f:25:87:cf: 47:3e:74:17:0e:5b:d8:09:a9:88:a6:28:96:c9:7c: 63:b7:29:6b:3e:a0:ac:72:fb:4c:b2:40:a9:17:da: 11:c9:f2:1d:b6:0c:8c:c6:d2:43:52:bd:4e:64:b2: ac:3b:6c:7d:8f:d5:c5:5f:a6:4a:43:5e:9f:10:52: 70:bb:a2:a5:1c:27:23:01:b5:c9:06:5d:37:0d:04: 2c:89:b8:f6:5c:b0:8d:73:b0:fd:41:c0:03:8d:02: 49:31:4f:b2:8a:6c:ce:d0:a3:f9:9c:d9:fc:a1:0a: ca:9e:10:6d:2f:e2:cd:69:bc:3e:19:d7:80:51:56: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:97:7D:B6:64:C3:C5:7B:E2:CF:EB:CF:4D:5C:2B:FE:E9:BB:64:1F X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:53:99:c2:7a:0f:74:ef:a5:8f:c6:08:3d:5d:0b:74:0c:3c: f6:ed:91:09:91:5b:77:7a:89:4b:55:94:d5:9e:88:7d:b2:b8: c2:ac:ae:0a:00:64:5b:3f:d5:6e:78:53:59:76:6f:0f:7d:47: e5:74:ca:75:74:45:04:4e:16:ab:b9:df:b6:bd:59:c4:e8:03: 5d:82:60:9c:94:5c:ae:79:53:2e:84:bf:ed:1b:a7:ff:36:a4: 5a:f3:82:dd:07:0b:fb:a4:93:22:0d:f7:81:95:7d:32:af:ab: 26:c0:75:e6:ba:b4:0e:ac:f3:8e:5b:13:de:51:75:9e:f4:68: d8:ce:d5:1b:89:9d:fe:e1:ff:5e:08:94:a6:07:88:8d:46:79: 28:5a:15:16:ab:be:97:56:d1:fb:b8:a6:47:6c:bc:6b:76:35: 8a:66:6f:af:de:56:37:25:03:b2:4c:1d:9f:29:fc:da:bf:74: cb:64:49:65:aa:d0:84:55:9a:4c:51:74:d9:3a:40:b6:c8:9a: 54:cc:32:a0:d9:1e:06:99:16:05:ae:22:35:ad:82:a5:f1:18: 8f:1f:2f:e1:34:e2:2c:db:fc:ec:fe:01:dc:d7:20:7b:df:5c: e0:a0:6d:11:e7:dc:c7:09:e1:fe:92:8d:a0:a9:5a:38:6a:e1: 83:a3:d4:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjYwNTIwMTk1NjEwWhcNMjYwNTI3MTk1NjEwWjAYMRYwFAYD VQQDEw02YTBlMTFkYS0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQLc6L0kjSU4hPpVg1CNS0nPezwW92Jy49p0MhHZbYqH8/yYnjRt/sWAkate 0yk3YdB7RXWte16iWR3nYQgGoOOdPfRjfE4hq+bhJ0Zu0AxVSJRmhV9EXRV/cVmb fC6YbGSQ2qOS8p2KW5tj1tIRrtFK1mgz+q9oJHR4R8dvxEKiXz8lh89HPnQXDlvY CamIpiiWyXxjtylrPqCscvtMskCpF9oRyfIdtgyMxtJDUr1OZLKsO2x9j9XFX6ZK Q16fEFJwu6KlHCcjAbXJBl03DQQsibj2XLCNc7D9QcADjQJJMU+yimzO0KP5nNn8 oQrKnhBtL+LNabw+GdeAUVYzawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuXfbZk w8V74s/rz01cK/7pu2QfMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVOZwnoPdO+lj8YIPV0LdAw89u2RCZFbd3qJS1WU1Z6IfbK4wqyuCgBkWz/V bnhTWXZvD31H5XTKdXRFBE4Wq7nftr1ZxOgDXYJgnJRcrnlTLoS/7Run/zakWvOC 3QcL+6STIg33gZV9Mq+rJsB15rq0DqzzjlsT3lF1nvRo2M7VG4md/uH/XgiUpgeI jUZ5KFoVFqu+l1bR+7imR2y8a3Y1imZvr95WNyUDskwdnyn82r90y2RJZarQhFWa TFF02TpAtsiaVMwyoNkeBpkWBa4iNa2CpfEYjx8v4TTiLNv87P4B3Ncge99c4KBt Eefcxwnh/pKNoKlaOGrhg6PU/Q== -----END CERTIFICATE-----Generated at Thu May 21 10:54:06 2026 by rpki-client