$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: xyoZlFCwvlVDnctA1mcnLEzV3ZmUSH98QSZTOq7GVBA= Subject key identifier: 99:E4:0A:8A:1C:79:03:8F:EE:BC:36:9B:24:C6:40:36:D2:DC:69:48 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0C99 Signing time: Wed 20 May 2026 18:38:03 +0000 Manifest this update: Wed 20 May 2026 18:38:03 +0000 Manifest next update: Wed 27 May 2026 18:38:03 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: EjRkx3gFTzfZoPVF0PMvBFk02hAMZzcdmdupjvRB4jU=) 2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: J2Vubqi8ic0NqlP+qdXl9htU+adGeTvh1ITR3W4ptX4=) 3: CFF8393A232C11F0B9CB2044C4F9AE02.roa (hash: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 20 18:38:03 2026 GMT Not After : May 27 18:38:03 2026 GMT Subject: CN=6a0dff8b-a30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:5c:f7:fb:8b:ef:ec:2a:66:b5:75:39:2e: ea:07:83:56:56:1f:c4:9b:b8:6c:e6:b4:98:0d:a0: 5e:7c:86:d0:46:95:fa:57:56:f7:cd:16:cd:e8:78: 57:fc:33:78:42:8f:c8:24:8a:54:86:2f:f3:35:0e: 84:06:2f:fa:21:cb:0b:b0:1d:5c:ca:b3:16:4b:e9: 52:dd:9f:c8:e2:32:af:3e:36:24:71:ab:cc:e0:97: e2:ae:e8:e4:8f:9d:79:c4:51:2e:05:7a:4b:e7:38: e6:a1:12:3d:ae:fc:3d:35:c1:91:97:94:bf:3c:c7: 9f:c8:90:e8:5b:ad:14:c7:77:7f:82:1d:a3:5c:e2: b8:b7:e2:f2:a7:5a:2f:24:a6:70:f4:c0:f9:a2:e6: ff:b4:67:6b:80:b4:00:bb:f3:8c:d1:54:ac:3b:72: 32:d3:58:75:e4:c8:e8:e8:da:5d:1e:08:e8:c0:05: 28:e4:9c:c0:44:75:b3:f3:43:ad:c7:bb:25:b3:ae: 27:06:9c:7b:0f:8e:8b:9f:14:72:87:8a:3b:2c:cb: e3:9e:6e:d9:be:a0:55:2f:d8:a8:d6:a7:8a:22:8e: 8f:ec:e3:6c:3f:c4:6b:64:e5:70:16:e8:b6:c2:29: cc:a6:1a:6b:76:4a:49:e9:a0:38:04:7f:2a:08:6a: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E4:0A:8A:1C:79:03:8F:EE:BC:36:9B:24:C6:40:36:D2:DC:69:48 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:49:b0:04:a0:b0:dc:85:c3:b0:49:8b:9f:b9:fe:a8:cd:77: f5:ab:cf:b0:05:d2:6c:7a:66:c0:87:d5:53:95:53:7d:0c:8a: 1b:c9:4c:0c:32:a6:d3:dd:85:65:ea:3b:a4:30:ba:bb:5d:90: 4c:3e:7e:e4:32:be:7c:2d:d7:f8:2d:74:95:36:e7:89:72:d8: 5f:f8:6a:02:75:79:0c:21:0d:51:6c:d2:de:50:f6:c0:af:9f: 3a:71:3b:f1:19:86:ae:5f:15:d4:e5:3b:1c:b0:ce:9b:d2:ba: 6a:72:b2:6e:fb:43:fb:71:98:3b:18:53:ed:cf:8f:43:52:a5: 64:c4:6d:27:67:5b:90:9e:eb:f5:0e:cd:e5:52:45:19:b4:30: 27:25:f4:21:ef:33:52:ec:6a:2a:b5:b5:6c:50:4c:8d:53:46: e8:c4:14:4c:94:1b:d4:c3:d6:6a:b1:41:2c:4b:18:22:27:3d: 32:61:2b:9e:46:d3:96:94:3e:17:9f:1b:16:24:98:3f:3e:82: ed:44:ea:5d:62:f6:77:16:98:37:87:fc:90:64:e2:d8:ad:00: c8:5a:39:2e:51:ec:2d:e6:15:83:14:0b:68:6a:75:49:7b:f2: 3b:f4:bf:5c:3b:63:68:32:9b:63:e2:c2:c4:0f:f6:f9:f5:ff: cc:5d:14:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwNTIwMTgzODAzWhcNMjYwNTI3MTgzODAzWjAYMRYwFAYD VQQDEw02YTBkZmY4Yi1hMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eJc9/uL7+wqZrV1OS7qB4NWVh/Em7hs5rSYDaBefIbQRpX6V1b3zRbN6HhX /DN4Qo/IJIpUhi/zNQ6EBi/6IcsLsB1cyrMWS+lS3Z/I4jKvPjYkcavM4Jfirujk j515xFEuBXpL5zjmoRI9rvw9NcGRl5S/PMefyJDoW60Ux3d/gh2jXOK4t+Lyp1ov JKZw9MD5oub/tGdrgLQAu/OM0VSsO3Iy01h15Mjo6NpdHgjowAUo5JzARHWz80Ot x7sls64nBpx7D46LnxRyh4o7LMvjnm7ZvqBVL9io1qeKIo6P7ONsP8RrZOVwFui2 winMphprdkpJ6aA4BH8qCGp/iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnkCooc eQOP7rw2myTGQDbS3GlIMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakmwBKCw3IXDsEmLn7n+qM139avPsAXSbHpmwIfVU5VTfQyKG8lMDDKm092F Zeo7pDC6u12QTD5+5DK+fC3X+C10lTbniXLYX/hqAnV5DCENUWzS3lD2wK+fOnE7 8RmGrl8V1OU7HLDOm9K6anKybvtD+3GYOxhT7c+PQ1KlZMRtJ2dbkJ7r9Q7N5VJF GbQwJyX0Ie8zUuxqKrW1bFBMjVNG6MQUTJQb1MPWarFBLEsYIic9MmErnkbTlpQ+ F58bFiSYPz6C7UTqXWL2dxaYN4f8kGTi2K0AyFo5LlHsLeYVgxQLaGp1SXvyO/S/ XDtjaDKbY+LCxA/2+fX/zF0UcA== -----END CERTIFICATE-----Generated at Thu May 21 11:05:15 2026 by rpki-client