$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: Dpk7fiddt0nNfgEeKLP5135x4DhgJzbOf1dnzrR75hY= Subject key identifier: 11:E6:38:44:9A:6E:14:25:08:EA:BE:B1:55:AB:51:A4:5D:50:B6:AD Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0CFC Signing time: Wed 20 May 2026 18:13:38 +0000 Manifest this update: Wed 20 May 2026 18:13:37 +0000 Manifest next update: Wed 27 May 2026 18:13:37 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: mrscp8pe/dtWBfnSEk3yZNJunqsNLK5j1YTvrMUP4vw=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: May 20 18:13:37 2026 GMT Not After : May 27 18:13:37 2026 GMT Subject: CN=6a0df9d2-b475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:8a:00:1a:dd:02:0b:9c:74:6b:43:b9:a7: 07:f8:61:5a:64:7f:82:28:2c:65:bb:ae:e6:43:94: db:88:e1:0d:40:94:8e:ad:78:f3:e8:06:6f:fb:a4: bb:f3:da:76:6a:1e:6e:d3:5a:3a:10:25:61:bf:80: 37:85:8b:a8:16:2a:06:01:64:e0:fa:0f:a5:3b:c7: 99:0e:5b:52:57:23:22:b2:b0:06:37:59:8e:12:02: 43:f6:06:a9:b7:1a:60:fa:cc:9f:4e:79:55:02:c4: 52:aa:2e:01:a9:40:2a:7f:8b:f1:0f:63:6a:75:f5: 67:17:b8:05:d9:ab:72:34:1d:4a:7e:34:48:4c:52: 9d:73:d2:3e:a0:be:36:5e:5d:65:2a:a6:0e:15:90: 92:d4:3e:a2:bf:64:68:c4:c9:a5:3d:3c:e6:04:6e: 83:94:4c:79:ae:e1:3f:ea:b3:d7:78:3a:91:94:25: c3:93:35:6c:c5:21:2c:ca:83:84:98:b0:30:31:94: 2f:8f:2c:eb:9a:c3:40:1c:fe:d8:74:c0:1a:64:e1: 24:1b:9f:4e:fd:21:23:5f:31:56:95:48:88:47:52: 43:63:c1:a8:ff:43:a5:a0:fa:a3:8d:bf:a5:13:4b: 2a:b7:82:ad:2a:10:c1:7c:14:f2:19:ff:80:fa:8c: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:38:44:9A:6E:14:25:08:EA:BE:B1:55:AB:51:A4:5D:50:B6:AD X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:22:5c:e3:33:e1:7d:42:c0:6b:6a:c4:6e:87:2c:50:5a:13: aa:b2:6d:07:d8:90:23:d0:51:22:be:98:0d:26:4b:e4:eb:1b: 8e:ce:7c:b6:cf:d9:0d:0f:df:cc:4d:3e:a2:70:23:bc:3b:58: 7b:e2:8d:01:26:a7:46:dd:e2:73:20:2c:78:b6:84:cf:8d:fd: 98:9b:4a:cf:09:69:02:cb:a4:ca:15:a0:4d:39:a9:bf:d6:31: 8d:e8:e2:cb:79:75:d1:d0:94:37:ac:74:fe:56:17:30:c1:2d: 49:0a:0e:11:3b:85:fd:a1:dc:39:63:df:34:30:72:8c:76:46: ba:23:85:11:56:fe:4b:89:6c:29:ae:6b:55:42:05:4d:20:b7: b1:71:94:43:d0:30:c9:9e:1f:1d:9e:d1:be:5e:df:08:48:38: 42:0c:2d:39:63:15:a2:55:8e:bb:80:bc:53:a2:9d:18:9b:c9: c8:58:4d:7b:c3:6f:75:e6:89:00:82:57:59:7f:8c:29:8c:6e: 51:46:12:f4:8f:cf:c5:38:ed:e0:4c:7e:8d:2f:77:31:a7:0b: 29:a1:42:f5:eb:49:89:f4:ed:52:e0:e8:02:d5:30:f4:e9:57: 28:74:87:0c:d4:ea:96:ed:1d:6f:a4:85:b6:41:9b:33:86:c4: 48:61:e9:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjYwNTIwMTgxMzM3WhcNMjYwNTI3MTgxMzM3WjAYMRYwFAYD VQQDEw02YTBkZjlkMi1iNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7uKABrdAgucdGtDuacH+GFaZH+CKCxlu67mQ5TbiOENQJSOrXjz6AZv+6S7 89p2ah5u01o6ECVhv4A3hYuoFioGAWTg+g+lO8eZDltSVyMisrAGN1mOEgJD9gap txpg+syfTnlVAsRSqi4BqUAqf4vxD2NqdfVnF7gF2atyNB1KfjRITFKdc9I+oL42 Xl1lKqYOFZCS1D6iv2RoxMmlPTzmBG6DlEx5ruE/6rPXeDqRlCXDkzVsxSEsyoOE mLAwMZQvjyzrmsNAHP7YdMAaZOEkG59O/SEjXzFWlUiIR1JDY8Go/0OloPqjjb+l E0sqt4KtKhDBfBTyGf+A+owt4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHmOESa bhQlCOq+sVWrUaRdULatMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbCJc4zPhfULAa2rEbocsUFoTqrJtB9iQI9BRIr6YDSZL5Osbjs58ts/ZDQ/f zE0+onAjvDtYe+KNASanRt3icyAseLaEz439mJtKzwlpAsukyhWgTTmpv9Yxjeji y3l10dCUN6x0/lYXMMEtSQoOETuF/aHcOWPfNDByjHZGuiOFEVb+S4lsKa5rVUIF TSC3sXGUQ9AwyZ4fHZ7Rvl7fCEg4QgwtOWMVolWOu4C8U6KdGJvJyFhNe8NvdeaJ AIJXWX+MKYxuUUYS9I/PxTjt4Ex+jS93MacLKaFC9etJifTtUuDoAtUw9OlXKHSH DNTqlu0db6SFtkGbM4bESGHpvg== -----END CERTIFICATE-----Generated at Thu May 21 10:14:30 2026 by rpki-client