$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft File: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json) Hash identifier: nZG3MTmzdTRTLVEtBnY1ZXUfWx4sl18f4ltU+jSGT2U= Subject key identifier: 6B:14:93:72:81:1E:FE:C4:B4:19:F5:BF:0C:98:16:E0:3B:D1:9D:0D Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 Certificate issuer: /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft Manifest number: 3C Signing time: Thu 21 May 2026 08:39:29 +0000 Manifest this update: Thu 21 May 2026 08:39:28 +0000 Manifest next update: Thu 28 May 2026 08:39:28 +0000 Files and hashes: 1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: /x2ndjruPY1cxDY7tzVL9MSyQDI8Q6urR9ItQY6i4WM=) 2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29 Validity Not Before: May 21 08:39:28 2026 GMT Not After : May 28 08:39:28 2026 GMT Subject: CN=6a0ec4c0-f8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:52:1f:2a:00:8d:6f:1d:6e:0b:f2:c1:1e: 09:59:86:09:3c:23:85:5b:36:fb:35:b1:3e:f8:64: 58:4d:36:18:4f:da:6a:66:3d:d1:60:be:2b:f5:87: 01:f8:99:b2:31:8a:fa:ad:dc:af:fe:c9:75:b5:07: ac:0f:c8:82:3b:dc:f9:7c:9c:64:49:66:a7:4f:49: b8:ac:ef:a0:9e:8b:17:4f:1e:fe:36:36:49:44:23: 74:38:77:ef:0d:b5:21:bc:a7:cd:e8:72:9c:a0:63: e9:66:ed:a1:ab:c1:cc:17:05:0b:fa:dd:60:00:d8: 4b:ce:a8:1f:2a:d5:a4:26:1b:60:e3:85:01:8c:77: 5c:c1:e8:80:53:64:30:d7:a6:5e:4c:bb:08:73:fd: 76:e1:fe:f8:db:fc:63:0d:b4:58:9b:5a:40:86:b5: 05:f8:5e:cc:eb:6c:42:3f:07:43:94:b2:a9:b8:be: 56:2d:75:2c:65:1a:35:b6:fb:28:e3:9c:c5:0b:a7: f1:ed:83:f5:b3:85:23:03:19:07:7b:57:03:55:b5: 32:85:26:5f:ca:44:59:21:e5:a9:8b:8e:d6:8b:17: 17:12:dd:9d:76:c5:7c:53:84:f0:82:0a:8c:69:b9: 2f:81:2c:93:d0:ca:bc:8f:85:d2:0f:56:b1:ee:24: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:93:72:81:1E:FE:C4:B4:19:F5:BF:0C:98:16:E0:3B:D1:9D:0D X509v3 Authority Key Identifier: keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a1:6b:4f:10:eb:ac:ea:73:c8:8e:a4:fb:72:5d:25:4e:51: 94:20:2b:4e:cf:ef:f5:21:e5:dc:3b:58:a8:cf:b4:07:c5:a7: 96:c9:44:8a:89:7e:cb:4a:9d:c2:3b:c2:63:a2:84:33:b6:a7: 49:42:fb:ab:6d:2c:69:d7:33:ce:b7:27:c9:e7:14:45:07:ac: 53:84:63:a6:7d:e2:04:21:cc:63:74:1b:5a:e3:df:73:e2:8b: 6f:6b:ac:3d:42:43:a3:45:92:5a:32:37:32:e0:53:3d:16:3f: 18:25:90:55:ca:78:76:e4:8b:33:46:c5:69:b6:60:fb:f2:18: 0a:50:be:d1:e8:57:f3:c5:54:42:12:1c:06:1e:1d:0e:d6:e7: ce:c3:7f:af:4d:07:81:25:81:e1:20:c8:8e:0b:a3:e0:f4:30: 9b:11:80:f7:63:5b:8b:99:31:4f:3d:c9:ca:f6:2f:7e:7d:03: 6b:79:d3:22:01:7f:64:ff:74:3a:95:01:77:6e:ed:86:93:9a: 4f:80:c4:fa:86:c1:a9:12:1d:fd:0a:f6:c7:78:72:21:5d:0b: 36:e5:b1:bd:41:3a:0b:9a:b9:ba:61:53:40:6f:3f:1f:58:cd: 7f:23:d4:a0:60:1a:20:12:15:d5:ef:5e:60:c9:94:85:0b:56: bf:7c:25:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG RkQ2REUyOTAeFw0yNjA1MjEwODM5MjhaFw0yNjA1MjgwODM5MjhaMBgxFjAUBgNV BAMTDTZhMGVjNGMwLWY4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChE1IfKgCNbx1uC/LBHglZhgk8I4VbNvs1sT74ZFhNNhhP2mpmPdFgviv1hwH4 mbIxivqt3K/+yXW1B6wPyII73Pl8nGRJZqdPSbis76CeixdPHv42NklEI3Q4d+8N tSG8p83ocpygY+lm7aGrwcwXBQv63WAA2EvOqB8q1aQmG2DjhQGMd1zB6IBTZDDX pl5Muwhz/Xbh/vjb/GMNtFibWkCGtQX4XszrbEI/B0OUsqm4vlYtdSxlGjW2+yjj nMULp/Htg/WzhSMDGQd7VwNVtTKFJl/KRFkh5amLjtaLFxcS3Z12xXxThPCCCoxp uS+BLJPQyryPhdIPVrHuJCDFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaxSTcoEe /sS0GfW/DJgW4DvRnQ0wHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5 akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDoWtPEOus6nPIjqT7cl0lTlGUICtOz+/1IeXcO1ioz7QHxaeWyUSKiX7LSp3C O8JjooQztqdJQvurbSxp1zPOtyfJ5xRFB6xThGOmfeIEIcxjdBta499z4otva6w9 QkOjRZJaMjcy4FM9Fj8YJZBVynh25IszRsVptmD78hgKUL7R6FfzxVRCEhwGHh0O 1ufOw3+vTQeBJYHhIMiOC6Pg9DCbEYD3Y1uLmTFPPcnK9i9+fQNredMiAX9k/3Q6 lQF3bu2Gk5pPgMT6hsGpEh39CvbHeHIhXQs25bG9QToLmrm6YVNAbz8fWM1/I9Sg YBogEhXV715gyZSFC1a/fCVB -----END CERTIFICATE-----Generated at Thu May 21 11:15:58 2026 by rpki-client