$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: o9GP85VR/h3DEoCAsgsggXStPz/TJx9YX1KCtbWP3P8= Subject key identifier: 83:6C:51:24:01:C2:50:D3:E4:21:4A:39:70:F2:7C:5B:48:7B:23:FD Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E8A Signing time: Wed 20 May 2026 17:45:06 +0000 Manifest this update: Wed 20 May 2026 17:45:05 +0000 Manifest next update: Wed 27 May 2026 17:45:05 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: fHGzjhRoAx5TvS+h9EGcSKbGo3O9Xq6r7Dm/3f4B4gg=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: NpwlTwI8Xm9ihx5f2AI8RzaFuXlf3KaqQ3R0nM1i1CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3731 (0xe93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: May 20 17:45:05 2026 GMT Not After : May 27 17:45:05 2026 GMT Subject: CN=6a0df321-c5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:99:3f:1d:71:e1:b0:26:53:cb:2a:3a:bb: 86:39:d5:9d:a0:68:44:c3:59:91:f8:c5:d6:a3:1c: 49:a8:28:db:f9:d8:86:b1:53:8a:b9:e8:b7:3f:0a: b6:94:e6:bf:78:2a:fe:d1:58:f5:8e:f7:ba:9b:4e: 04:a7:81:01:bd:66:c4:18:d0:fe:6a:70:93:14:99: 14:8f:18:ff:94:09:dd:ac:b4:08:34:80:ee:f0:a1: 57:ec:0e:d3:b9:43:8d:c1:5b:27:18:dd:ee:24:a7: 40:0f:e2:d2:a6:8c:bf:fd:c8:5b:e1:55:cd:a1:30: 1e:ef:68:da:4c:eb:e7:a9:c0:51:15:0e:67:48:06: 4d:1c:a5:0e:d0:8b:a0:90:29:19:4f:6b:92:18:32: 2b:cb:46:20:eb:7f:41:2e:1b:32:7a:11:24:f2:de: c5:a2:95:8e:cd:f8:86:c3:fd:e0:4c:ab:fe:5e:41: d2:a3:7f:72:d8:62:12:7c:78:2c:1f:46:4a:13:c4: 6f:40:5f:86:8f:86:af:71:26:f2:22:6c:84:19:0e: a7:24:3b:d2:d1:fb:29:61:d5:1e:c6:2e:34:1b:09: 7b:44:6b:f9:cf:e7:f7:ec:4f:ea:d3:b8:a7:c1:ab: c9:a4:f2:42:e2:8f:37:da:12:b0:bf:38:25:6a:fd: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:51:24:01:C2:50:D3:E4:21:4A:39:70:F2:7C:5B:48:7B:23:FD X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a5:c8:f9:71:24:41:4f:b9:89:2c:66:10:06:20:2b:6b:27: a8:1f:fd:d7:b7:cc:a1:92:2f:9f:f6:1a:3e:89:62:9a:80:3d: 9c:f0:2a:28:fa:49:2d:0b:70:d7:bf:2c:e8:6a:52:24:a5:c9: 63:68:01:c4:ed:1e:1f:c3:4f:33:fe:8e:2d:da:32:d4:9b:61: fa:1d:13:3f:cb:83:6c:88:12:e1:40:97:c4:68:03:d0:56:77: b0:cb:d9:a7:17:98:c8:c5:d2:44:59:73:7d:ff:72:0d:d9:2b: ed:b1:7d:4d:67:e8:f5:64:8d:dd:c9:0d:9e:9d:93:83:90:9a: 43:33:1b:0e:5f:5e:85:a7:81:89:bf:cc:45:b4:50:79:20:c0: 60:7d:93:bd:c1:39:c7:76:fb:af:8c:ec:b7:64:d3:bd:84:cb: 8e:1e:7e:67:5d:d5:e2:12:03:9f:43:c2:9e:ae:c5:4a:b1:69: 43:69:45:65:1b:96:9d:7d:7a:73:ab:25:06:c4:05:a0:15:a9: 66:23:72:77:ef:0e:8e:7c:97:26:86:de:48:92:f5:15:1e:b6: 18:5a:4b:2a:e4:c7:02:eb:fe:ed:85:e9:be:1e:f3:3a:f1:b7: 65:3e:cb:6f:b5:20:8e:ef:60:2a:60:93:5c:d6:68:d8:3e:03: 7e:9e:e1:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjYwNTIwMTc0NTA1WhcNMjYwNTI3MTc0NTA1WjAYMRYwFAYD VQQDEw02YTBkZjMyMS1jNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSCZPx1x4bAmU8sqOruGOdWdoGhEw1mR+MXWoxxJqCjb+diGsVOKuei3Pwq2 lOa/eCr+0Vj1jve6m04Ep4EBvWbEGND+anCTFJkUjxj/lAndrLQINIDu8KFX7A7T uUONwVsnGN3uJKdAD+LSpoy//chb4VXNoTAe72jaTOvnqcBRFQ5nSAZNHKUO0Iug kCkZT2uSGDIry0Yg639BLhsyehEk8t7FopWOzfiGw/3gTKv+XkHSo39y2GISfHgs H0ZKE8RvQF+Gj4avcSbyImyEGQ6nJDvS0fspYdUexi40Gwl7RGv5z+f37E/q07in wavJpPJC4o832hKwvzglav2/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINsUSQB wlDT5CFKOXDyfFtIeyP9MB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqXI+XEkQU+5iSxmEAYgK2snqB/917fMoZIvn/YaPolimoA9nPAqKPpJLQtw 178s6GpSJKXJY2gBxO0eH8NPM/6OLdoy1Jth+h0TP8uDbIgS4UCXxGgD0FZ3sMvZ pxeYyMXSRFlzff9yDdkr7bF9TWfo9WSN3ckNnp2Tg5CaQzMbDl9ehaeBib/MRbRQ eSDAYH2TvcE5x3b7r4zst2TTvYTLjh5+Z13V4hIDn0PCnq7FSrFpQ2lFZRuWnX16 c6slBsQFoBWpZiNyd+8OjnyXJobeSJL1FR62GFpLKuTHAuv+7YXpvh7zOvG3ZT7L b7Ugju9gKmCTXNZo2D4Dfp7hNg== -----END CERTIFICATE-----Generated at Thu May 21 09:30:47 2026 by rpki-client