$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: huea0g0pkm1i+wRcC9uRYNazRxRGcsUxFW2gaqnuFYk= Subject key identifier: 43:B6:2E:05:CB:4B:51:11:89:34:1D:DD:21:C2:F9:5D:FC:34:84:7E Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0D2B Signing time: Wed 20 May 2026 18:05:10 +0000 Manifest this update: Wed 20 May 2026 18:05:09 +0000 Manifest next update: Wed 27 May 2026 18:05:09 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: KH7gbeYApYUPuZRVev2aB8MY4CqW2ne+hkaFqoRQ3rI=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: OmDgPiLqgyux0zOKc/tnQAGnWY/1q9h2d6j4Yw1Hv60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: May 20 18:05:09 2026 GMT Not After : May 27 18:05:09 2026 GMT Subject: CN=6a0df7d6-e255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:df:d3:6b:8b:9e:e0:c9:83:27:28:29:72: cf:d4:2c:ce:b3:fc:60:db:48:d9:0c:33:a7:34:a7: ca:db:a2:35:ff:87:55:22:2d:63:80:c5:82:14:84: 3d:51:e8:d9:0f:ec:9d:74:8b:67:57:01:e4:0f:e3: 79:2a:18:bf:82:f8:39:0f:47:9b:80:81:98:d1:ad: 00:58:0c:9f:59:54:e4:c1:1d:32:87:34:48:b5:6d: 6a:b9:9a:b9:4d:cd:fb:e2:30:01:6e:4f:cd:47:09: f8:80:9d:1b:17:16:b2:9e:87:18:dd:2c:91:8d:cc: 06:a8:3f:f0:fa:fb:96:26:67:9e:f8:a4:e7:c2:85: 3e:39:e3:fb:b7:5f:7b:4e:4e:98:0f:80:a1:f2:88: e9:2e:4e:05:93:fb:a0:07:bc:3b:ba:51:e9:ff:02: 90:33:fd:b1:1f:00:d6:5f:60:3e:26:01:b6:f0:e0: 39:79:33:e0:e2:b0:b6:2c:b4:03:73:45:2d:92:46: 7a:5f:43:c3:46:a8:d7:d0:98:de:03:9a:73:b2:21: 14:bc:21:31:af:f1:ea:79:6c:0b:f0:29:05:3b:fe: 64:ff:44:83:03:2e:d8:60:6b:e9:6b:87:aa:88:19: d0:b2:c0:a7:34:76:f9:21:1a:8d:37:f1:fc:e5:b0: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:2E:05:CB:4B:51:11:89:34:1D:DD:21:C2:F9:5D:FC:34:84:7E X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4b:c6:d7:d9:e6:88:86:48:71:ef:e9:9c:d5:1b:f5:36:2b: 3e:6e:6f:4a:ed:22:ed:96:f2:94:8a:2f:57:b8:95:24:05:1a: c6:64:c6:16:54:06:e4:05:52:ff:81:84:45:84:65:8d:d6:41: f8:d6:f9:f4:2a:1a:4f:63:e7:df:da:33:e7:8f:9d:85:28:f5: 46:ce:8c:b9:d1:13:34:4b:6c:8f:76:bb:b9:04:89:f6:a5:29: c4:6a:e7:3a:f8:75:fc:de:fc:b6:1d:31:fc:f0:fc:db:59:d5: e9:cd:89:ab:88:73:11:b0:9c:4e:30:67:16:11:72:58:bf:59: 83:15:5c:5b:cb:13:f8:84:43:f9:0e:71:7e:a0:f9:bd:5d:a8: 45:f9:f1:ff:94:ed:2e:62:7f:25:29:c0:cb:84:09:ef:7b:a4: be:8e:80:75:c8:31:54:09:dd:74:6f:6d:1e:ff:68:ff:c4:b1: 83:9b:24:7a:c0:f6:c1:23:f3:66:2b:15:9a:72:ce:ab:5c:e6: 6b:fa:96:e6:67:8c:05:3a:52:95:71:01:9c:c0:da:a8:f6:60: 25:7f:19:47:53:59:c6:3e:e0:e6:d3:6c:d8:3e:89:0a:21:9b: 8d:31:e2:08:cc:f5:da:f5:81:20:72:8b:30:49:f7:14:05:88: 7b:0f:8d:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjYwNTIwMTgwNTA5WhcNMjYwNTI3MTgwNTA5WjAYMRYwFAYD VQQDEw02YTBkZjdkNi1lMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuTf02uLnuDJgycoKXLP1CzOs/xg20jZDDOnNKfK26I1/4dVIi1jgMWCFIQ9 UejZD+yddItnVwHkD+N5Khi/gvg5D0ebgIGY0a0AWAyfWVTkwR0yhzRItW1quZq5 Tc374jABbk/NRwn4gJ0bFxaynocY3SyRjcwGqD/w+vuWJmee+KTnwoU+OeP7t197 Tk6YD4Ch8ojpLk4Fk/ugB7w7ulHp/wKQM/2xHwDWX2A+JgG28OA5eTPg4rC2LLQD c0UtkkZ6X0PDRqjX0JjeA5pzsiEUvCExr/HqeWwL8CkFO/5k/0SDAy7YYGvpa4eq iBnQssCnNHb5IRqNN/H85bBIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEO2LgXL S1ERiTQd3SHC+V38NIR+MB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkvG19nmiIZIce/pnNUb9TYrPm5vSu0i7ZbylIovV7iVJAUaxmTGFlQG5AVS /4GERYRljdZB+Nb59CoaT2Pn39oz54+dhSj1Rs6MudETNEtsj3a7uQSJ9qUpxGrn Ovh1/N78th0x/PD821nV6c2Jq4hzEbCcTjBnFhFyWL9ZgxVcW8sT+IRD+Q5xfqD5 vV2oRfnx/5TtLmJ/JSnAy4QJ73ukvo6AdcgxVAnddG9tHv9o/8Sxg5skesD2wSPz ZisVmnLOq1zma/qW5meMBTpSlXEBnMDaqPZgJX8ZR1NZxj7g5tNs2D6JCiGbjTHi CMz12vWBIHKLMEn3FAWIew+NVQ== -----END CERTIFICATE-----Generated at Thu May 21 09:31:10 2026 by rpki-client