$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: t3IG5vHUSWIFoW3loFWpuPmftF+Fdu8/suckCsevoq8= Subject key identifier: FC:EF:3C:B9:6A:F0:55:0C:7A:A3:ED:99:47:FF:32:CD:31:C9:29:3D Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 55 Signing time: Mon 01 Jun 2026 09:04:28 +0000 Manifest this update: Mon 01 Jun 2026 09:04:27 +0000 Manifest next update: Mon 08 Jun 2026 09:04:27 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: 8sQsBgZvS8riU110vPq3K964EysRopYsqWW5gtviy+A=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Jun 1 09:04:27 2026 GMT Not After : Jun 8 09:04:27 2026 GMT Subject: CN=6a1d4b1c-50e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:e0:4d:31:22:4e:7b:0b:52:c9:7f:47:68: 94:0e:a7:91:63:a5:00:a2:9f:18:2d:a5:66:ba:42: 90:41:d9:d9:60:73:0b:26:1e:3d:b4:5d:db:02:ca: c4:d7:50:96:9a:24:f7:94:ab:85:2d:3f:e4:75:e0: 0e:84:12:3d:da:80:84:8c:ef:e3:f4:e7:5e:fd:38: 4f:de:ae:ce:36:12:d6:60:3e:18:82:dd:98:dc:4a: f0:fb:68:91:d4:88:e2:bb:3c:66:d6:f0:f9:81:69: 38:11:bb:f2:c3:a2:e2:36:3b:96:ea:e6:28:7b:8c: 36:4b:31:d8:a3:f8:85:d2:75:31:3a:ac:76:c6:73: 03:a9:cb:c3:02:4b:e2:3f:6c:8f:64:d2:88:db:3a: fe:39:54:95:61:34:ca:5e:8b:9b:96:93:c6:e5:22: 9d:cc:f9:69:73:40:76:79:40:c0:1c:d4:0a:54:30: bb:44:df:80:02:54:9b:ea:85:1a:25:de:3c:89:76: e7:cd:ae:52:dd:ff:98:9c:b5:7b:3b:67:33:38:8b: 03:13:d4:89:a1:2c:a8:13:41:ea:32:50:0e:38:6e: 53:9b:84:32:ad:98:db:85:22:90:ce:13:3e:1f:64: 45:4c:9c:cb:36:47:af:3c:9e:25:39:6f:cf:b7:4e: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:3C:B9:6A:F0:55:0C:7A:A3:ED:99:47:FF:32:CD:31:C9:29:3D X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fb:16:89:86:f4:37:c4:a4:c9:8f:c8:62:d7:94:30:9c:bc: 17:b9:8f:37:17:02:6c:1f:be:12:ba:7b:06:ec:bf:dd:00:84: c6:6b:80:47:0c:57:ff:df:4b:a8:45:d3:40:8b:7a:f7:26:17: 03:c1:30:58:5a:35:b1:9a:3e:fa:fd:30:cc:a1:aa:87:fe:2a: d9:4d:2e:cf:8e:89:9e:63:22:d9:31:ac:97:fd:e8:8a:8c:6a: 8b:f2:a9:ce:59:5f:79:a2:e0:06:1d:f0:d8:98:af:4a:7d:b9: 64:a3:20:e0:f8:08:d1:4e:0c:f1:72:b9:b5:15:58:d0:54:98: 21:eb:34:07:73:fa:2e:ef:89:da:ef:be:1b:9d:00:29:2b:cf: 9e:91:fb:c5:db:7a:1c:d2:c7:fb:4d:bf:92:b5:3a:87:8e:54: 07:b7:8e:75:bf:d1:99:66:2b:b3:e7:7d:4b:bd:b1:89:00:af: be:c4:b1:9a:4a:bd:0f:4e:f4:04:f5:6f:86:8c:84:dc:9d:a8: 9a:ec:fa:e2:9b:57:2e:0c:9b:97:90:b7:41:7a:97:ee:3b:50: 1f:b9:2c:d0:52:7f:dd:46:80:38:a0:f7:08:4f:10:10:45:0b: 09:33:3e:fc:d8:8a:c7:94:94:ba:1c:49:e5:d1:88:45:ea:de: 49:44:df:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjA2MDEwOTA0MjdaFw0yNjA2MDgwOTA0MjdaMBgxFjAUBgNV BAMTDTZhMWQ0YjFjLTUwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5seBNMSJOewtSyX9HaJQOp5FjpQCinxgtpWa6QpBB2dlgcwsmHj20XdsCysTX UJaaJPeUq4UtP+R14A6EEj3agISM7+P05179OE/ers42EtZgPhiC3ZjcSvD7aJHU iOK7PGbW8PmBaTgRu/LDouI2O5bq5ih7jDZLMdij+IXSdTE6rHbGcwOpy8MCS+I/ bI9k0ojbOv45VJVhNMpei5uWk8blIp3M+WlzQHZ5QMAc1ApUMLtE34ACVJvqhRol 3jyJdufNrlLd/5ictXs7ZzM4iwMT1ImhLKgTQeoyUA44blObhDKtmNuFIpDOEz4f ZEVMnMs2R688niU5b8+3Tq+vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/O88uWrw VQx6o+2ZR/8yzTHJKT0wHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCN+xaJhvQ3xKTJj8hi15QwnLwXuY83FwJsH74SunsG7L/dAITGa4BHDFf/30uo RdNAi3r3JhcDwTBYWjWxmj76/TDMoaqH/irZTS7PjomeYyLZMayX/eiKjGqL8qnO WV95ouAGHfDYmK9KfblkoyDg+AjRTgzxcrm1FVjQVJgh6zQHc/ou74na774bnQAp K8+ekfvF23oc0sf7Tb+StTqHjlQHt451v9GZZiuz531LvbGJAK++xLGaSr0PTvQE 9W+GjITcnaia7Prim1cuDJuXkLdBepfuO1AfuSzQUn/dRoA4oPcITxAQRQsJMz78 2IrHlJS6HEnl0YhF6t5JRN+l -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:34 2026 by rpki-client