$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: ji2NF2b4wT8iA/OUm0BrsTiFtR/AOzDPfdu2Wfx45Aw= Subject key identifier: F6:9E:0D:C3:DB:CF:B7:50:F9:C2:64:C8:77:79:6F:18:2E:7F:0D:6C Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0C94 Signing time: Wed 20 May 2026 18:34:41 +0000 Manifest this update: Wed 20 May 2026 18:34:40 +0000 Manifest next update: Wed 27 May 2026 18:34:40 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: vf12v43+yQziWvYObY325OG0aD25RCO5bO+xiynVVnY=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: May 20 18:34:40 2026 GMT Not After : May 27 18:34:40 2026 GMT Subject: CN=6a0dfec1-132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:02:72:d3:7e:9d:5d:f3:2c:a0:d3:5c:82: 2e:15:c4:41:19:5b:03:a8:2f:a7:16:ea:5a:da:ef: 0a:25:7c:ce:34:6a:04:23:bf:05:4c:4a:c0:ef:a8: be:eb:50:f2:62:94:f7:b9:45:82:d5:94:2e:ea:3f: e6:04:5f:91:fc:9f:9a:8c:69:2a:a6:ea:4c:13:0e: 63:bb:e6:91:41:4b:54:e8:c6:d9:95:54:f9:3c:64: ec:16:a5:03:9b:9b:ed:d4:6d:c4:c0:a5:50:a1:c8: ab:26:0c:40:e2:6a:e3:fc:41:f4:57:5b:e9:a0:ec: 97:a7:30:be:a4:2a:06:83:25:5c:eb:0c:94:99:18: b7:9a:02:e0:44:df:db:39:c2:63:c0:c4:30:25:7c: 32:16:79:1a:b0:2c:ac:69:ca:47:57:a1:28:80:fa: df:77:76:cc:be:62:7b:3c:79:24:94:fa:95:30:c6: 54:79:01:82:b9:55:99:80:bd:94:14:91:65:e5:8d: 06:0b:58:c8:cd:64:59:de:70:c0:de:25:b0:88:73: 2d:a0:b9:c9:39:3d:cd:25:6f:e8:5d:85:d2:bc:91: 59:d8:fb:e6:11:5d:f7:63:af:3c:df:24:ac:da:fc: 88:8b:93:b8:0e:8b:89:ed:79:c9:a8:df:8f:40:28: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:0D:C3:DB:CF:B7:50:F9:C2:64:C8:77:79:6F:18:2E:7F:0D:6C X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:96:58:7d:d3:83:6d:9d:16:5c:91:1c:eb:66:d5:47:95:1d: ef:cb:e0:89:06:ae:43:bc:a0:06:84:62:5d:04:28:48:90:bf: 05:9c:91:c9:dc:3d:fc:84:d6:df:bc:19:70:05:aa:56:0a:5c: c4:db:9d:ca:a1:37:a8:eb:9a:fa:b5:76:c7:b1:81:5f:0a:f2: df:ae:be:bc:8f:6a:5e:4a:8a:fe:7c:9a:8d:fd:d5:a5:58:6a: 88:47:65:19:31:6b:f6:00:d7:d9:26:46:12:c6:01:b4:6f:ac: 46:a2:7d:96:9b:7b:31:30:03:8c:65:1e:7c:c8:31:df:0d:5f: 1d:48:04:a8:2e:0a:2c:81:05:9e:36:c8:de:04:74:a8:f3:3a: c0:97:8c:60:6d:53:2f:69:43:25:ae:c6:59:ac:62:1a:02:37: 98:24:4a:36:30:9e:51:a9:36:75:01:8c:db:e6:f1:4b:3c:19: de:6d:f9:fa:17:b5:da:4a:19:76:d4:bf:74:ac:76:58:da:ac: 19:73:6d:7a:df:bb:18:03:2c:c2:d2:2a:37:dc:f5:72:b7:07: 18:d3:89:95:35:8b:6b:0e:ec:ec:dd:3d:0d:46:3a:18:f6:41: 5a:fc:ce:8b:d0:35:bb:69:42:81:38:62:19:28:2d:e6:a9:9a: 36:26:01:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjYwNTIwMTgzNDQwWhcNMjYwNTI3MTgzNDQwWjAYMRYwFAYD VQQDEw02YTBkZmVjMS0xMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxncCctN+nV3zLKDTXIIuFcRBGVsDqC+nFupa2u8KJXzONGoEI78FTErA76i+ 61DyYpT3uUWC1ZQu6j/mBF+R/J+ajGkqpupMEw5ju+aRQUtU6MbZlVT5PGTsFqUD m5vt1G3EwKVQocirJgxA4mrj/EH0V1vpoOyXpzC+pCoGgyVc6wyUmRi3mgLgRN/b OcJjwMQwJXwyFnkasCysacpHV6EogPrfd3bMvmJ7PHkklPqVMMZUeQGCuVWZgL2U FJFl5Y0GC1jIzWRZ3nDA3iWwiHMtoLnJOT3NJW/oXYXSvJFZ2PvmEV33Y6883ySs 2vyIi5O4DouJ7XnJqN+PQCjSSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaeDcPb z7dQ+cJkyHd5bxgufw1sMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5ZYfdODbZ0WXJEc62bVR5Ud78vgiQauQ7ygBoRiXQQoSJC/BZyRydw9/ITW 37wZcAWqVgpcxNudyqE3qOua+rV2x7GBXwry366+vI9qXkqK/nyajf3VpVhqiEdl GTFr9gDX2SZGEsYBtG+sRqJ9lpt7MTADjGUefMgx3w1fHUgEqC4KLIEFnjbI3gR0 qPM6wJeMYG1TL2lDJa7GWaxiGgI3mCRKNjCeUak2dQGM2+bxSzwZ3m35+he12koZ dtS/dKx2WNqsGXNtet+7GAMswtIqN9z1crcHGNOJlTWLaw7s7N09DUY6GPZBWvzO i9A1u2lCgThiGSgt5qmaNiYBOA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:40 2026 by rpki-client