$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: G2jkNzv00CguPH7UCa8a7YpHx6rurs5+NABN0Y9HqZ8= Subject key identifier: F0:F1:AE:6D:37:98:3E:3E:CB:A0:B5:48:58:87:71:0B:6E:8F:8B:C8 Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 014F Signing time: Thu 11 Jun 2026 07:28:36 +0000 Manifest this update: Thu 11 Jun 2026 07:28:35 +0000 Manifest next update: Thu 18 Jun 2026 07:28:35 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: N8m+oHkfLSF3KFf3MErRd4LFH85JWXz+EWFXXksgghg=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=) 3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 07:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Jun 11 07:28:35 2026 GMT Not After : Jun 18 07:28:35 2026 GMT Subject: CN=6a2a63a4-cc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:9d:16:08:89:e0:c8:9a:19:e6:d4:49:22: 4f:26:3c:68:d5:24:9a:b5:12:b2:2b:c8:c7:86:7e: 91:a7:8d:80:76:6c:c4:68:2d:67:a8:df:bc:7b:d6: 46:31:d4:2f:66:c9:2a:f9:f6:75:ec:91:a2:a0:bd: 2f:6b:ac:f8:c4:d4:56:12:5b:c4:bc:aa:57:f2:3b: 2b:dc:d1:39:b9:b2:54:82:1b:a4:ac:52:73:55:83: fb:5e:2c:27:72:07:5a:e9:57:6c:2a:a2:c6:55:ab: 25:54:7c:b7:fe:0e:13:a8:4a:d8:18:a6:30:1f:8b: e8:52:04:7b:8e:d7:1a:18:a5:88:61:78:69:06:27: 6f:a9:82:ed:57:3e:74:d6:f7:a8:d2:a9:ee:c0:fd: 4e:1f:18:37:d1:85:7d:e4:2d:c4:4a:42:99:c9:48: 6c:4a:ae:9f:db:8e:79:17:7f:8b:06:72:a9:91:df: b8:92:86:1a:0c:3f:1e:6b:c0:8b:9b:fe:02:9d:9f: ed:55:80:57:c4:09:37:f6:b1:af:09:e9:a8:1e:ca: ae:b7:a5:6b:b4:da:55:bb:18:78:62:48:28:86:84: 67:8f:c7:98:22:c4:97:5f:a0:5b:88:6e:93:f9:29: 9e:9d:fc:44:ca:cc:b1:06:78:7a:42:5a:6d:0d:7c: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:AE:6D:37:98:3E:3E:CB:A0:B5:48:58:87:71:0B:6E:8F:8B:C8 X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2d:3f:13:5e:00:fa:ac:6b:47:84:f7:4a:6a:a3:c7:1b:3c: c1:04:73:ee:ff:f7:6e:93:50:fc:66:85:42:93:b6:ab:ba:f8: a1:1c:5e:1c:f2:18:25:13:13:ce:54:07:90:da:d8:0c:6e:0c: 9d:a1:8f:01:c2:17:2a:13:af:4d:32:f8:65:fa:8b:96:51:e5: cd:a2:51:28:ff:af:31:27:8f:f6:dd:c1:2d:55:0d:3f:6b:3f: c7:11:a1:a9:47:e5:85:d0:87:74:dc:ff:ba:50:ba:60:8c:29: 41:fd:5e:16:66:45:89:69:cb:ac:43:c5:9b:1b:ab:73:72:7c: a0:9e:b7:4a:41:5a:d2:89:46:f9:47:42:90:78:29:7e:f8:3f: a6:96:66:77:cc:d5:0d:61:2e:e4:d0:f7:aa:eb:d3:b9:0a:fa: e4:ef:00:10:95:44:04:d8:fa:2e:f8:96:98:0c:2a:4c:6f:65: a3:2d:0a:43:7d:71:04:a3:5c:e2:31:d4:a0:f0:a3:33:72:6d: 86:b0:23:c7:35:de:33:aa:b0:f8:5f:1c:ff:28:4e:3a:c4:4f: 7c:38:e5:6e:39:ed:39:ad:22:90:a6:67:3e:78:72:b2:be:52: ee:65:ca:ba:48:cd:dc:37:ec:a3:38:7f:e3:9d:02:84:9d:4b: 11:4c:21:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjYwNjExMDcyODM1WhcNMjYwNjE4MDcyODM1WjAYMRYwFAYD VQQDEw02YTJhNjNhNC1jYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj6dFgiJ4MiaGebUSSJPJjxo1SSatRKyK8jHhn6Rp42AdmzEaC1nqN+8e9ZG MdQvZskq+fZ17JGioL0va6z4xNRWElvEvKpX8jsr3NE5ubJUghukrFJzVYP7Xiwn cgda6VdsKqLGVaslVHy3/g4TqErYGKYwH4voUgR7jtcaGKWIYXhpBidvqYLtVz50 1veo0qnuwP1OHxg30YV95C3ESkKZyUhsSq6f2455F3+LBnKpkd+4koYaDD8ea8CL m/4CnZ/tVYBXxAk39rGvCemoHsqut6VrtNpVuxh4YkgohoRnj8eYIsSXX6BbiG6T +SmenfxEysyxBnh6QlptDXyM0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDxrm03 mD4+y6C1SFiHcQtuj4vIMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcS0/E14A+qxrR4T3Smqjxxs8wQRz7v/3bpNQ/GaFQpO2q7r4oRxeHPIYJRMT zlQHkNrYDG4MnaGPAcIXKhOvTTL4ZfqLllHlzaJRKP+vMSeP9t3BLVUNP2s/xxGh qUflhdCHdNz/ulC6YIwpQf1eFmZFiWnLrEPFmxurc3J8oJ63SkFa0olG+UdCkHgp fvg/ppZmd8zVDWEu5ND3quvTuQr65O8AEJVEBNj6LviWmAwqTG9loy0KQ31xBKNc 4jHUoPCjM3JthrAjxzXeM6qw+F8c/yhOOsRPfDjlbjntOa0ikKZnPnhysr5S7mXK ukjN3Dfsozh/450ChJ1LEUwhhA== -----END CERTIFICATE-----Generated at Fri Jun 12 17:41:38 2026 by rpki-client