$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: 1XBkxr9xNluDW5M1Ofg7HX0SscFQF99C8oWSBS9JtrU= Subject key identifier: 1E:74:1D:95:72:ED:BF:1E:FE:14:41:61:0A:2E:B3:D1:DD:32:6F:25 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0541 Signing time: Wed 20 May 2026 23:33:35 +0000 Manifest this update: Wed 20 May 2026 23:33:34 +0000 Manifest next update: Wed 27 May 2026 23:33:34 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: Crq2E9P4yveA8ghHNzND9uwvvydDuQlxt8b9Ls8MP/g=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: May 20 23:33:34 2026 GMT Not After : May 27 23:33:34 2026 GMT Subject: CN=6a0e44cf-c39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:c6:68:d9:44:bf:a3:48:95:51:cf:ae:a2: 86:41:d8:84:24:ae:56:db:23:0f:ea:4e:13:39:ac: d6:75:39:65:71:32:a5:02:fd:4f:d8:c1:c0:e6:f7: 9d:13:26:7e:84:b1:b4:29:21:fb:75:d9:bb:90:13: 0c:1d:c1:7e:69:9d:39:d5:b2:b5:8a:9a:dd:ff:27: 41:af:10:63:e3:6b:fc:19:1d:3e:72:6a:d2:c8:be: 07:8c:cb:64:b8:95:d4:d8:1a:fd:9f:f1:44:e8:90: d5:8c:18:86:ef:59:ff:36:f7:e7:55:d8:40:c3:17: ca:96:d1:0b:23:13:6a:f6:3c:5b:b3:5a:08:77:38: 1d:dd:19:8c:d4:3b:24:4b:98:d4:44:13:c9:49:18: 53:21:99:16:2d:6a:58:60:5a:22:69:6b:47:cf:8d: df:c0:8d:a2:db:58:51:0a:f8:0e:12:61:e4:3e:94: 5d:80:dc:c0:d2:17:ba:aa:da:68:56:bb:c0:b1:8b: d0:2e:cf:85:ca:9c:71:b5:d0:b6:04:1a:cd:f2:c3: 7b:40:81:63:b9:78:48:03:d8:1c:74:32:50:23:15: fb:b9:7e:69:e0:f1:53:70:12:45:1f:c1:71:c0:99: 0d:c2:53:8c:dc:ac:81:9b:b0:19:d4:5f:02:59:5b: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:74:1D:95:72:ED:BF:1E:FE:14:41:61:0A:2E:B3:D1:DD:32:6F:25 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:10:d8:94:f3:3e:6a:24:3d:8b:b4:c5:71:7d:8d:4f:fc:5a: 4e:1c:50:68:d2:15:85:d1:f4:e4:62:5b:f7:1d:46:cb:0e:c1: 48:fe:51:9c:b6:3a:d0:a2:e8:e8:d4:1a:f2:fe:ac:ed:4f:8c: cf:9f:1a:9e:a6:f6:d5:c0:97:9d:d1:bc:6c:65:b1:86:04:15: 2c:fd:e3:65:12:5e:ca:53:5e:86:ba:3c:48:64:5b:17:63:53: 5d:23:8d:cb:03:56:fc:a8:fd:9c:b3:35:53:24:78:91:30:37: 82:02:70:d7:b1:41:19:09:d7:7b:eb:01:24:30:a9:50:1e:09: 24:f1:90:14:22:f8:0f:5b:63:3e:d2:e5:68:24:03:ed:62:ad: 67:2f:94:9c:34:08:c7:f4:32:ca:56:38:3b:22:69:2a:dc:5c: b0:2f:8c:1a:64:22:65:86:6a:bc:d2:70:79:09:7b:1e:db:be: 52:e9:75:f8:36:05:2a:c5:20:ff:4b:79:ac:3e:c4:ff:01:7c: 72:1f:7e:21:22:f8:24:9c:2a:4f:8f:4d:59:e5:6e:6a:e4:df: 63:6f:5c:7d:a3:f4:05:c0:70:60:89:52:c2:91:c2:7a:3a:85: d2:a7:20:4e:ad:67:70:51:b0:7c:6c:8d:29:e9:30:5e:f7:f8: 78:26:b6:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjYwNTIwMjMzMzM0WhcNMjYwNTI3MjMzMzM0WjAYMRYwFAYD VQQDEw02YTBlNDRjZi1jMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uHGaNlEv6NIlVHPrqKGQdiEJK5W2yMP6k4TOazWdTllcTKlAv1P2MHA5ved EyZ+hLG0KSH7ddm7kBMMHcF+aZ051bK1iprd/ydBrxBj42v8GR0+cmrSyL4HjMtk uJXU2Br9n/FE6JDVjBiG71n/NvfnVdhAwxfKltELIxNq9jxbs1oIdzgd3RmM1Dsk S5jURBPJSRhTIZkWLWpYYFoiaWtHz43fwI2i21hRCvgOEmHkPpRdgNzA0he6qtpo VrvAsYvQLs+FypxxtdC2BBrN8sN7QIFjuXhIA9gcdDJQIxX7uX5p4PFTcBJFH8Fx wJkNwlOM3KyBm7AZ1F8CWVu0/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB50HZVy 7b8e/hRBYQous9HdMm8lMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBDYlPM+aiQ9i7TFcX2NT/xaThxQaNIVhdH05GJb9x1Gyw7BSP5RnLY60KLo 6NQa8v6s7U+Mz58anqb21cCXndG8bGWxhgQVLP3jZRJeylNehro8SGRbF2NTXSON ywNW/Kj9nLM1UyR4kTA3ggJw17FBGQnXe+sBJDCpUB4JJPGQFCL4D1tjPtLlaCQD 7WKtZy+UnDQIx/QyylY4OyJpKtxcsC+MGmQiZYZqvNJweQl7Htu+Uul1+DYFKsUg /0t5rD7E/wF8ch9+ISL4JJwqT49NWeVuauTfY29cfaP0BcBwYIlSwpHCejqF0qcg Tq1ncFGwfGyNKekwXvf4eCa2mA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:03 2026 by rpki-client