$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: bCAyo2SP2X9jGLGHReaCQWmJITBiwq1OeaqE3y6IzpY= Subject key identifier: 4D:CA:DC:16:82:F8:0C:86:85:6E:BF:CF:A3:AD:EE:87:F2:F4:6B:01 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0AB0 Signing time: Wed 20 May 2026 19:32:46 +0000 Manifest this update: Wed 20 May 2026 19:32:46 +0000 Manifest next update: Wed 27 May 2026 19:32:46 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: gSxrjEfexMr3uVpOBuvBhWNsunZxIJ1B0Uf2DRSUkuE=) 2: 683CD6083EF511F1AB4378F7C3833773.roa (hash: 2AqUjb8b7TWsR15Or5pxjFuJpbFFS7iyKcRc0Dhq0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: May 20 19:32:46 2026 GMT Not After : May 27 19:32:46 2026 GMT Subject: CN=6a0e0c5e-0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:86:b1:61:76:de:81:8a:e0:29:59:8e:0b: aa:43:bc:72:9e:53:7d:41:b5:20:4d:ac:0a:6b:d9: f7:2e:d6:37:34:41:1d:8d:03:62:f7:7c:32:34:0e: 4f:14:2a:8a:79:83:b4:9d:f6:35:b3:03:94:a4:6b: af:13:58:2e:66:7f:f9:46:47:6d:fc:d7:93:5b:8e: 82:63:90:6e:9e:bc:fc:9b:ce:38:80:58:5f:59:84: 76:26:e0:97:a9:93:fb:37:1a:03:93:1c:20:af:70: f7:c9:6c:01:35:32:f9:b0:a4:3f:1e:40:21:c3:d4: f8:9b:fc:87:3f:be:35:42:68:d4:75:ca:61:b3:7c: 71:ed:ca:d9:95:6e:00:4f:81:87:3e:60:5a:66:b3: 83:48:55:8b:d8:a1:fc:42:13:88:8f:7b:50:57:3e: 85:d1:40:1a:4e:55:b7:f2:9e:6c:27:3d:4a:5b:15: 5d:8e:2f:35:a8:31:e5:89:4d:70:20:b1:58:09:f5: d0:51:c6:bf:93:41:a6:6a:68:2b:5a:2c:ac:6f:32: b2:71:2a:4a:ca:27:e7:6b:e7:0b:7f:33:71:f8:9a: d9:40:4f:d5:d6:ef:42:d0:78:da:85:e0:ca:5c:dc: 2e:e0:66:fa:32:5a:9e:10:08:69:03:c4:19:78:ae: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:DC:16:82:F8:0C:86:85:6E:BF:CF:A3:AD:EE:87:F2:F4:6B:01 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e1:86:a7:9e:d0:02:df:a7:9d:eb:ec:93:a4:61:95:a0:24: 62:6b:7b:3d:47:14:5f:f1:a7:b6:65:fc:f1:a6:8d:6c:fc:93: 9d:ec:5d:a0:bd:61:38:90:3e:e5:58:02:7e:0d:6f:8f:81:e1: d7:5d:ee:cb:d3:87:e1:15:ea:ee:4e:7a:e1:f0:13:f4:fa:ba: 31:ed:4b:84:0c:06:da:fd:d8:31:a8:9a:dc:a9:1f:b1:be:9a: cb:4b:17:52:ef:cc:a5:c0:7d:e8:eb:d2:f8:5c:00:27:79:4a: 22:fa:09:79:87:fb:33:bd:69:0c:e4:c5:19:57:1f:0d:6f:f4: ba:18:1a:89:86:ec:8c:9f:f7:39:4b:a3:79:56:5a:f7:87:d5: c2:94:f3:ad:57:91:7f:23:30:4e:0e:2e:b9:32:97:39:c8:38: 89:6c:93:21:2f:0e:bb:b8:ea:c3:4d:e7:30:95:c7:60:e4:52: 7c:4a:2a:e6:e8:3a:35:26:a0:25:73:e6:1e:5f:1d:34:8b:bd: b4:37:56:7b:77:89:93:ac:d5:25:3a:f0:68:b8:c5:ea:50:6d: 4f:46:9d:29:2b:86:5d:85:9c:df:88:58:b5:9d:c6:27:5c:89: ec:18:24:98:1f:19:98:7e:b3:19:26:b4:4f:0c:ac:79:b9:ec: 46:c5:34:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjYwNTIwMTkzMjQ2WhcNMjYwNTI3MTkzMjQ2WjAYMRYwFAYD VQQDEw02YTBlMGM1ZS0wYjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugKGsWF23oGK4ClZjguqQ7xynlN9QbUgTawKa9n3LtY3NEEdjQNi93wyNA5P FCqKeYO0nfY1swOUpGuvE1guZn/5Rkdt/NeTW46CY5Bunrz8m844gFhfWYR2JuCX qZP7NxoDkxwgr3D3yWwBNTL5sKQ/HkAhw9T4m/yHP741QmjUdcphs3xx7crZlW4A T4GHPmBaZrODSFWL2KH8QhOIj3tQVz6F0UAaTlW38p5sJz1KWxVdji81qDHliU1w ILFYCfXQUca/k0GmamgrWiysbzKycSpKyifna+cLfzNx+JrZQE/V1u9C0HjaheDK XNwu4Gb6MlqeEAhpA8QZeK5brwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3K3BaC +AyGhW6/z6Ot7ofy9GsBMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADuGGp57QAt+nnevsk6RhlaAkYmt7PUcUX/GntmX88aaNbPyTnexdoL1hOJA+ 5VgCfg1vj4Hh113uy9OH4RXq7k564fAT9Pq6Me1LhAwG2v3YMaia3Kkfsb6ay0sX Uu/MpcB96OvS+FwAJ3lKIvoJeYf7M71pDOTFGVcfDW/0uhgaiYbsjJ/3OUujeVZa 94fVwpTzrVeRfyMwTg4uuTKXOcg4iWyTIS8Ou7jqw03nMJXHYORSfEoq5ug6NSag JXPmHl8dNIu9tDdWe3eJk6zVJTrwaLjF6lBtT0adKSuGXYWc34hYtZ3GJ1yJ7Bgk mB8ZmH6zGSa0TwysebnsRsU0fw== -----END CERTIFICATE-----Generated at Thu May 21 11:15:39 2026 by rpki-client