$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: ZNGvtPIH1dG3Z1Z1ouDx2tT4leqSeMxJ5hMiZQWx1us= Subject key identifier: 65:AB:62:12:61:F2:91:62:49:61:BF:AB:A1:D6:AE:B6:75:F5:72:4B Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 06E9 Signing time: Sat 16 May 2026 22:12:27 +0000 Manifest this update: Sat 16 May 2026 22:12:26 +0000 Manifest next update: Sat 23 May 2026 22:12:26 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: L5KN0AI4O3GRcjYisBLUDrsAd8ZDv5tYIRA7jnHcZmY=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: May 16 22:12:26 2026 GMT Not After : May 23 22:12:26 2026 GMT Subject: CN=6a08ebcb-f361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:79:22:e7:1d:47:e5:7f:8c:1e:90:28:5a: a5:f0:ae:94:5c:df:ac:e7:4c:30:8a:d1:dc:5b:c4: 74:47:e5:a0:51:0c:52:8e:62:94:c3:3e:92:ca:20: e2:08:19:85:73:eb:87:2e:73:f2:dd:53:ca:f5:15: d3:72:2c:2b:0f:9a:02:fc:5e:c1:50:f6:37:d9:b1: 43:42:9e:54:5a:5b:3d:47:bf:81:6c:a5:4a:bb:91: 26:ab:c3:96:c8:18:17:24:ad:6b:f2:85:ab:e3:8e: 35:8a:bd:b3:2c:66:ad:df:85:a4:c4:62:90:8c:d7: a7:15:62:c6:56:0a:90:b1:31:71:41:f4:f6:c6:3b: 94:78:bc:3a:a5:bf:25:0a:41:34:16:1f:bc:fb:10: 49:b7:80:6a:03:b7:32:4f:a0:11:41:97:e2:7f:f8: 31:ff:65:63:0f:a6:c4:dc:73:cf:e5:c4:90:7b:c9: 09:6e:44:48:d3:1f:66:58:49:53:c2:b2:bb:38:82: 95:43:8a:6b:28:38:07:15:3e:28:fa:24:dc:67:b9: 51:03:e4:17:10:92:a7:19:9e:fe:62:fc:48:58:87: 74:38:96:1d:16:d4:80:d5:15:e2:e1:35:f2:86:cb: 28:31:49:e2:96:83:30:cc:a1:cc:7a:4e:d9:8d:b0: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:62:12:61:F2:91:62:49:61:BF:AB:A1:D6:AE:B6:75:F5:72:4B X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b0:d3:8d:fb:d2:d7:60:ae:a4:57:b3:4c:4d:e6:3b:df:c6: ab:7d:99:ad:84:bc:40:e5:74:0f:40:56:45:73:5b:9f:ec:ec: 12:ad:df:6c:17:e3:02:6a:b7:b4:ed:2b:fe:09:cd:eb:0d:cd: 9b:b7:88:0c:a2:99:95:59:83:ee:2d:5b:7c:c1:49:3d:45:b2: f1:17:92:80:ec:54:74:4e:74:ef:4c:cf:e1:3c:e0:6a:ea:9b: 3c:69:a5:c1:4a:b0:b6:0a:4e:81:29:0a:a7:00:13:7d:07:26: a1:1c:90:ac:75:68:1c:28:e5:42:a8:43:56:ab:0e:04:4e:8e: ae:47:51:dd:d2:01:e7:b5:24:50:1c:99:82:97:50:3f:d2:60: aa:81:68:be:f3:15:9d:4e:5d:60:84:c0:4c:c4:e0:ff:2d:0c: a6:2e:8c:5d:96:46:07:87:6f:a1:56:bc:9b:df:86:3c:e8:24: bf:69:7e:6d:e9:f9:ad:89:91:7d:cc:01:b3:3e:d2:53:a2:17: bd:57:5a:d6:c7:a8:a1:2d:44:9f:04:e9:0a:7a:44:61:c5:0f: 19:3a:58:1b:49:28:f5:82:b1:51:3a:79:ca:b7:56:cb:ba:46: 65:ba:c1:4e:08:1b:72:86:ca:fb:b5:59:c8:32:87:c7:cc:ad: 77:f5:47:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwNTE2MjIxMjI2WhcNMjYwNTIzMjIxMjI2WjAYMRYwFAYD VQQDEw02YTA4ZWJjYi1mMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp315IucdR+V/jB6QKFql8K6UXN+s50wwitHcW8R0R+WgUQxSjmKUwz6SyiDi CBmFc+uHLnPy3VPK9RXTciwrD5oC/F7BUPY32bFDQp5UWls9R7+BbKVKu5Emq8OW yBgXJK1r8oWr4441ir2zLGat34WkxGKQjNenFWLGVgqQsTFxQfT2xjuUeLw6pb8l CkE0Fh+8+xBJt4BqA7cyT6ARQZfif/gx/2VjD6bE3HPP5cSQe8kJbkRI0x9mWElT wrK7OIKVQ4prKDgHFT4o+iTcZ7lRA+QXEJKnGZ7+YvxIWId0OJYdFtSA1RXi4TXy hssoMUniloMwzKHMek7ZjbA5bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWrYhJh 8pFiSWG/q6HWrrZ19XJLMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb7DTjfvS12CupFezTE3mO9/Gq32ZrYS8QOV0D0BWRXNbn+zsEq3fbBfjAmq3 tO0r/gnN6w3Nm7eIDKKZlVmD7i1bfMFJPUWy8ReSgOxUdE5070zP4TzgauqbPGml wUqwtgpOgSkKpwATfQcmoRyQrHVoHCjlQqhDVqsOBE6OrkdR3dIB57UkUByZgpdQ P9JgqoFovvMVnU5dYITATMTg/y0Mpi6MXZZGB4dvoVa8m9+GPOgkv2l+ben5rYmR fcwBsz7SU6IXvVda1seooS1EnwTpCnpEYcUPGTpYG0ko9YKxUTp5yrdWy7pGZbrB TggbcobK+7VZyDKHx8ytd/VH9A== -----END CERTIFICATE-----Generated at Sun May 17 11:41:03 2026 by rpki-client