$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: GF5zaQMJ0iTq2IB/9Jl3nAxbYLIqgCP7mXEayRBa0nM= Subject key identifier: 16:61:0B:65:63:A9:ED:4F:E0:9B:F6:C0:CD:78:53:0B:87:22:CB:BB Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1BA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B70 Signing time: Wed 20 May 2026 16:16:19 +0000 Manifest this update: Wed 20 May 2026 16:16:18 +0000 Manifest next update: Wed 27 May 2026 16:16:18 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: e/M2crsoBi7j1ShXq1d6KTnVhkdYKAXnXVfPDCa5wuY=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PINyvml/lmMP9n4bWW3ReQfqdMUKwVbzw95W7AWHcZQ=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7081 (0x1ba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: May 20 16:16:18 2026 GMT Not After : May 27 16:16:18 2026 GMT Subject: CN=6a0dde53-7349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:0e:84:db:db:fe:0f:3b:82:84:89:25:70: 97:58:46:fe:46:d7:95:23:be:07:ab:dd:a5:d2:6c: 02:1a:40:61:be:23:bf:9a:ba:5c:e4:b2:ec:84:d5: e0:ff:a7:4b:ef:2f:7e:08:23:23:6e:d0:84:ae:c5: 47:21:60:21:d7:e1:b5:b8:d6:b3:fd:ed:dd:45:05: 90:cd:0b:7d:43:2f:8c:55:58:83:64:81:77:31:ea: e1:52:8a:b4:35:9a:73:bf:0a:4a:bb:42:88:97:44: 84:23:51:00:fa:c3:73:c9:19:b9:f2:ee:15:37:61: b7:5b:7d:66:29:2f:e3:73:e2:29:90:a5:c4:25:b3: db:be:c0:c5:32:52:62:30:42:e5:df:6e:a1:6e:92: a3:e3:cc:7a:3e:b2:19:6e:13:2f:eb:a0:a9:06:5f: bf:bd:80:94:88:4b:51:d4:01:b6:da:63:6a:6a:64: 26:d7:3a:fa:2e:a9:49:9e:61:36:5a:ca:8a:10:5c: 95:0d:fe:b4:88:62:de:85:98:d9:14:fa:6e:26:05: 7c:20:65:aa:0e:86:88:94:57:44:08:be:91:b3:ad: 45:a8:50:7e:73:8f:04:f4:e5:31:c6:5b:fb:bf:85: 75:2d:02:a7:13:f8:ff:b3:d9:57:2e:8a:83:a3:3c: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:0B:65:63:A9:ED:4F:E0:9B:F6:C0:CD:78:53:0B:87:22:CB:BB X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:64:e2:c8:13:ea:01:d8:52:9e:a5:d6:87:e4:61:7d:ad:64: b4:51:08:7e:44:0d:63:8f:97:03:06:38:81:8a:8b:0e:0d:b3: 80:cc:e9:bf:dd:12:7e:48:03:e9:c7:0c:46:a1:32:63:c6:2b: c9:e3:50:39:9f:dd:01:98:8e:6b:e6:5c:5e:88:16:0f:5f:3e: a2:f0:1e:0f:4d:12:16:77:12:6f:28:b7:04:89:84:63:cd:3e: 88:ed:79:f3:f1:c6:c5:95:3a:4f:51:36:c4:c0:43:a1:48:95: 64:b5:cb:09:34:b5:87:94:5f:1b:55:f9:17:45:88:f9:8e:46: b6:bc:e1:e9:cd:43:b6:39:58:f0:e8:91:42:e4:c7:57:5e:62: 4e:bb:af:18:df:38:41:1f:9a:40:f6:48:ee:77:93:8b:6c:73: 36:6f:63:67:b9:8e:e4:88:c2:a3:90:3a:89:70:78:4d:e8:c0: d4:58:fb:3d:ba:8a:5a:a0:6f:27:ed:84:43:00:d3:82:17:25: 8f:ad:33:99:54:91:dc:52:0a:c6:dd:cd:3d:b5:1d:c8:b3:b0: 18:18:26:ad:a4:60:cf:1d:bb:05:31:81:a6:59:fd:94:11:14: 5e:e4:1a:d6:f9:8a:4b:e7:ea:d2:8d:fd:b4:ba:1e:b9:d5:97: 3f:d3:9f:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjYwNTIwMTYxNjE4WhcNMjYwNTI3MTYxNjE4WjAYMRYwFAYD VQQDEw02YTBkZGU1My03MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjYYOhNvb/g87goSJJXCXWEb+RteVI74Hq92l0mwCGkBhviO/mrpc5LLshNXg /6dL7y9+CCMjbtCErsVHIWAh1+G1uNaz/e3dRQWQzQt9Qy+MVViDZIF3MerhUoq0 NZpzvwpKu0KIl0SEI1EA+sNzyRm58u4VN2G3W31mKS/jc+IpkKXEJbPbvsDFMlJi MELl326hbpKj48x6PrIZbhMv66CpBl+/vYCUiEtR1AG22mNqamQm1zr6LqlJnmE2 WsqKEFyVDf60iGLehZjZFPpuJgV8IGWqDoaIlFdECL6Rs61FqFB+c48E9OUxxlv7 v4V1LQKnE/j/s9lXLoqDozzgqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZhC2Vj qe1P4Jv2wM14UwuHIsu7MB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWTiyBPqAdhSnqXWh+Rhfa1ktFEIfkQNY4+XAwY4gYqLDg2zgMzpv90SfkgD 6ccMRqEyY8YryeNQOZ/dAZiOa+ZcXogWD18+ovAeD00SFncSbyi3BImEY80+iO15 8/HGxZU6T1E2xMBDoUiVZLXLCTS1h5RfG1X5F0WI+Y5Gtrzh6c1DtjlY8OiRQuTH V15iTruvGN84QR+aQPZI7neTi2xzNm9jZ7mO5IjCo5A6iXB4TejA1Fj7PbqKWqBv J+2EQwDTghclj60zmVSR3FIKxt3NPbUdyLOwGBgmraRgzx27BTGBpln9lBEUXuQa 1vmKS+fq0o39tLoeudWXP9OfjA== -----END CERTIFICATE-----Generated at Thu May 21 10:20:50 2026 by rpki-client