$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft File: PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json) Hash identifier: Vp3FofGfV3AfLF94aLrUP8VScJbdCsnd/KsQEwA+jes= Subject key identifier: B9:D6:F9:BA:16:F9:21:62:8E:1C:DF:1C:BC:70:36:B8:3C:64:DC:81 Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A Certificate issuer: /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft Manifest number: 0F Signing time: Mon 01 Jun 2026 09:55:23 +0000 Manifest this update: Mon 01 Jun 2026 09:55:22 +0000 Manifest next update: Mon 08 Jun 2026 09:55:22 +0000 Files and hashes: 1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: ff2T0VjGd86EyyU72C2iJizdw6ha1A3/Q/9qi/XsT/8=) 2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Validity Not Before: Jun 1 09:55:22 2026 GMT Not After : Jun 8 09:55:22 2026 GMT Subject: CN=6a1d570b-c48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:6f:be:27:58:43:07:d8:b4:e6:7a:a2:05: 6c:00:99:52:36:01:57:51:26:64:7b:df:b4:6d:92: 38:3a:3e:71:c1:50:0e:f0:42:2a:01:1c:3f:30:0c: 02:9a:5a:12:5d:06:76:0f:2a:41:75:84:f4:ef:69: 35:a3:af:54:e5:c9:6b:f9:fb:07:79:b5:ae:0a:be: e6:5e:2b:b5:e5:72:0a:1f:af:2e:f5:b3:15:04:3f: 96:41:c8:b6:51:ef:ca:86:31:75:74:1f:3d:f3:bd: 90:b1:33:e1:01:60:14:79:c3:6d:7e:4b:3b:5b:9b: ec:9d:c2:24:59:0e:27:6c:34:2a:43:70:00:b2:02: 08:2e:a9:3e:9d:d0:b3:58:fc:aa:0b:db:67:1e:66: 37:2f:14:c6:80:bf:b5:c2:1d:44:84:19:e9:1a:04: dd:84:f5:60:ae:72:d0:81:20:ed:c3:bc:d5:ce:93: 28:7f:72:a5:0f:07:96:c2:ba:89:af:0a:37:bb:42: 47:dc:ec:d3:0d:fa:ba:76:a7:22:e1:a6:07:44:f5: cd:7c:b4:7a:9e:ea:28:7a:8b:dc:a0:2b:26:ea:6e: 7f:fd:de:50:e7:01:50:57:2f:ea:a5:b2:72:02:35: fe:ec:07:f2:22:2f:cd:f6:5b:fa:f1:19:60:67:fd: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:F9:BA:16:F9:21:62:8E:1C:DF:1C:BC:70:36:B8:3C:64:DC:81 X509v3 Authority Key Identifier: keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:69:82:14:62:2e:75:b2:de:4e:fa:d9:24:89:ce:50:b2: 55:7f:65:f8:1a:04:27:53:f6:0a:ce:a1:27:a2:08:93:10:11: a6:19:97:c9:d3:e2:e1:4d:f3:ce:3d:9c:72:35:3c:84:40:e6: 3e:3e:e8:19:da:90:c0:45:1c:fe:40:49:58:89:6a:a7:16:17: bc:1c:81:95:6b:4e:2b:4e:df:d9:6b:dd:9d:1a:4d:7e:0f:77: a4:3e:68:54:a4:da:82:94:77:99:5b:b3:ff:e2:96:e3:1a:d3: d6:6d:a6:49:2c:a0:2a:17:dc:1a:38:6c:97:db:3b:47:c9:ea: d6:28:1f:a3:00:e9:76:33:a8:75:17:db:2c:17:b6:d3:0d:51: 99:5a:95:79:54:af:f9:52:46:5c:99:0c:75:ee:50:6a:5f:d5: 71:4e:47:d9:40:8d:d6:f7:23:8f:04:ab:36:3b:cd:e1:05:c1: 51:08:4d:1c:41:90:d4:83:68:0f:d7:3e:1d:3f:44:d8:5f:aa: e3:c7:f2:84:15:6d:89:4b:c4:3e:1c:1a:c9:30:27:18:24:fc: 53:f4:b7:be:71:43:7c:fa:41:42:62:ad:d2:bd:1f:8b:fa:da: e9:5b:ec:7f:02:3c:29:9f:0a:d7:b7:90:a4:6e:27:2f:68:bd: cb:fc:a1:3e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlGMjExMC8GA1UEBRMoM0YzMEZGMUJCQjI2RjEwMkVEOEE0NzVBNEJGQkM5NDJB MURGMzI4QTAeFw0yNjA2MDEwOTU1MjJaFw0yNjA2MDgwOTU1MjJaMBgxFjAUBgNV BAMTDTZhMWQ1NzBiLWM0OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy2W++J1hDB9i05nqiBWwAmVI2AVdRJmR737Rtkjg6PnHBUA7wQioBHD8wDAKa WhJdBnYPKkF1hPTvaTWjr1TlyWv5+wd5ta4KvuZeK7Xlcgofry71sxUEP5ZByLZR 78qGMXV0Hz3zvZCxM+EBYBR5w21+Sztbm+ydwiRZDidsNCpDcACyAgguqT6d0LNY /KoL22ceZjcvFMaAv7XCHUSEGekaBN2E9WCuctCBIO3DvNXOkyh/cqUPB5bCuomv Cje7Qkfc7NMN+rp2pyLhpgdE9c18tHqe6ih6i9ygKybqbn/93lDnAVBXL+qlsnIC Nf7sB/IiL832W/rxGWBn/VK7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUudb5uhb5 IWKOHN8cvHA2uDxk3IEwHwYDVR0jBBgwFoAUPzD/G7sm8QLtikdaS/vJQqHfMoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0UxODNDRUM0NEMw NDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFMdGlrZGFTX3ZKUXFIZk1v by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUHpEX0c3c204UUx0aWtkYVNfdkpRcUhmTW9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUYyL0UxODNDRUM0NEMwNDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFM dGlrZGFTX3ZKUXFIZk1vby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+pGmCFGIudbLeTvrZJInOULJVf2X4GgQnU/YKzqEnogiTEBGmGZfJ0+LhTfPO PZxyNTyEQOY+PugZ2pDARRz+QElYiWqnFhe8HIGVa04rTt/Za92dGk1+D3ekPmhU pNqClHeZW7P/4pbjGtPWbaZJLKAqF9waOGyX2ztHyerWKB+jAOl2M6h1F9ssF7bT DVGZWpV5VK/5UkZcmQx17lBqX9VxTkfZQI3W9yOPBKs2O83hBcFRCE0cQZDUg2gP 1z4dP0TYX6rjx/KEFW2JS8Q+HBrJMCcYJPxT9Le+cUN8+kFCYq3SvR+L+trpW+x/ AjwpnwrXt5CkbicvaL3L/KE+ -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:47 2026 by rpki-client