$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: mIVgrp0+GknxL8JAQPsxQyy7+B5Xj/FbER9EUxmdCPU= Subject key identifier: 57:3F:5F:22:84:69:40:45:A4:41:B1:68:95:D2:97:91:2E:94:AC:1B Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: 0150 Signing time: Thu 21 May 2026 05:12:04 +0000 Manifest this update: Thu 21 May 2026 05:12:04 +0000 Manifest next update: Thu 28 May 2026 05:12:04 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: DcM+KVVOs4gi+OfAM5vE4QW3VK7LA5lRfXmEvRzi+wU=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: KClykHKChBZ5Bx9B5+rZuGfT1EY+y0O+dL2jNFzbRSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: May 21 05:12:04 2026 GMT Not After : May 28 05:12:04 2026 GMT Subject: CN=6a0e9424-c505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:0e:f6:8e:20:16:ac:0f:8b:b6:68:e7:a9: 64:c6:bc:91:f5:d0:68:b7:9f:8f:1f:25:82:54:2f: 0e:a0:72:8a:64:de:2e:62:f1:a2:91:98:a2:5a:a2: 2c:ae:7b:04:fd:3e:83:7a:31:27:9f:41:df:e6:68: 62:1c:4a:71:0b:48:10:a8:8b:a3:82:30:09:a6:19: c4:7f:30:a3:ec:b6:46:f9:b4:7f:15:e6:d5:37:4e: d1:06:35:e0:de:24:80:d3:85:9f:ed:45:ca:74:7a: 5f:34:f0:f5:7f:8a:cb:69:89:bb:91:78:0a:98:f0: 57:cb:bd:d5:37:de:2d:02:96:04:db:70:1d:8e:f9: 6d:7e:df:ed:2a:8a:2a:7d:86:d8:0b:6c:9d:03:5a: 68:c4:f7:c9:c2:f9:5f:6a:f6:d7:e5:a4:19:3d:7c: 4b:8c:26:2e:f3:5b:f3:a4:0a:06:28:43:95:ae:e4: 83:7e:38:ce:23:6c:95:9d:d1:5d:25:19:7e:f1:83: 26:7e:59:30:2f:84:b5:b8:ea:52:6c:67:39:a8:3a: ce:2e:53:7d:0d:db:89:20:4f:73:1c:7b:56:03:c4: 1a:cb:d1:e9:2f:87:c8:6a:36:4f:7d:94:70:5b:74: 78:37:10:27:a8:b9:96:fa:97:d5:1f:f1:f6:cf:06: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3F:5F:22:84:69:40:45:A4:41:B1:68:95:D2:97:91:2E:94:AC:1B X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:58:66:60:c9:48:01:0f:55:3d:de:b3:f7:6e:8f:b8:cb:64: 6a:da:72:f1:ef:bb:cd:9d:28:08:ca:27:ed:d7:f0:30:ed:9a: 38:c1:e3:f4:e3:d3:b8:e9:6c:fa:46:c7:de:f4:db:47:6d:98: 15:24:a7:56:f9:66:7c:07:a5:ba:45:83:18:a7:ac:9c:e5:95: 97:93:34:bf:be:bb:37:3b:fd:33:85:18:f6:d1:f2:76:1e:a1: 72:2b:c4:d2:25:09:94:52:b0:5d:56:04:63:42:88:8a:40:a5: 04:03:f5:59:8b:45:e3:e4:19:25:ae:8f:ee:94:fc:c5:da:c3: b7:fc:6a:e9:2d:e1:e3:3e:eb:33:39:60:b1:0f:fd:24:41:a2: 81:f4:a1:30:e6:0a:a0:8c:b1:99:e9:e1:69:8c:7b:3e:be:8d: ad:dc:1c:16:69:45:6d:2b:01:9e:7d:54:62:83:17:b6:5d:08: 65:26:5c:98:8f:59:89:64:61:0b:d6:56:a5:27:bd:da:26:f7: ee:ad:14:8e:32:ed:de:b7:cc:2c:8e:ab:90:6b:26:7c:bc:e7: 1b:6b:d1:5f:be:84:a7:f6:2f:be:93:39:c5:59:38:41:71:a1: 20:d9:7a:ee:1b:de:65:74:9d:67:63:bb:02:df:ee:d6:5e:0c: 64:b8:e9:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjYwNTIxMDUxMjA0WhcNMjYwNTI4MDUxMjA0WjAYMRYwFAYD VQQDEw02YTBlOTQyNC1jNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj0O9o4gFqwPi7Zo56lkxryR9dBot5+PHyWCVC8OoHKKZN4uYvGikZiiWqIs rnsE/T6DejEnn0Hf5mhiHEpxC0gQqIujgjAJphnEfzCj7LZG+bR/FebVN07RBjXg 3iSA04Wf7UXKdHpfNPD1f4rLaYm7kXgKmPBXy73VN94tApYE23Adjvltft/tKooq fYbYC2ydA1poxPfJwvlfavbX5aQZPXxLjCYu81vzpAoGKEOVruSDfjjOI2yVndFd JRl+8YMmflkwL4S1uOpSbGc5qDrOLlN9DduJIE9zHHtWA8Qay9HpL4fIajZPfZRw W3R4NxAnqLmW+pfVH/H2zwbd5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFc/XyKE aUBFpEGxaJXSl5EulKwbMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe1hmYMlIAQ9VPd6z926PuMtkatpy8e+7zZ0oCMon7dfwMO2aOMHj9OPTuOls +kbH3vTbR22YFSSnVvlmfAelukWDGKesnOWVl5M0v767Nzv9M4UY9tHydh6hcivE 0iUJlFKwXVYEY0KIikClBAP1WYtF4+QZJa6P7pT8xdrDt/xq6S3h4z7rMzlgsQ/9 JEGigfShMOYKoIyxmenhaYx7Pr6NrdwcFmlFbSsBnn1UYoMXtl0IZSZcmI9ZiWRh C9ZWpSe92ib37q0UjjLt3rfMLI6rkGsmfLznG2vRX76Ep/YvvpM5xVk4QXGhINl6 7hveZXSdZ2O7At/u1l4MZLjp6Q== -----END CERTIFICATE-----Generated at Thu May 21 11:09:01 2026 by rpki-client