$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: X4V3ZQrN1AsQ6h8KXktUSeG1fOvJM1Eza7aUR3cwlms= Subject key identifier: 10:3F:71:95:03:6A:72:4B:D0:45:18:A0:E7:1A:AD:92:CE:E7:20:11 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 1071 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 105A Signing time: Wed 20 May 2026 17:24:17 +0000 Manifest this update: Wed 20 May 2026 17:24:16 +0000 Manifest next update: Wed 27 May 2026 17:24:16 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: kwlwBIbHrZ26wOOdjWPlnm6lZ2/kjCKX85ckAqC4ylE=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=) 3: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=) 4: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: May 20 17:24:16 2026 GMT Not After : May 27 17:24:16 2026 GMT Subject: CN=6a0dee41-44f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:5a:71:82:59:db:03:0a:52:f8:28:db:3d: e5:9d:61:ca:c7:55:b4:36:e7:64:4c:a0:ae:da:b1: 04:9b:b7:7b:08:c2:7f:9a:1c:4e:0d:8a:02:d2:8c: 6c:91:22:02:ad:2c:16:3b:f5:15:7c:c2:b6:06:ef: 93:86:53:82:b5:c5:1f:7e:bf:96:6e:ba:59:dd:1a: 38:5c:4c:e7:e2:c5:ef:46:70:5e:83:9b:7e:91:a5: 0a:e2:15:93:33:77:0f:87:2d:64:fd:7f:7c:dc:4a: 78:08:e4:b9:d7:5e:c1:f6:9d:bd:60:78:ed:82:31: b1:47:ca:05:62:8e:47:6a:f7:15:4a:db:ee:b8:9a: d2:c9:ad:1f:6c:52:f3:e0:78:91:de:32:77:d5:14: 68:15:67:f2:a7:8f:1e:d4:2c:4c:94:46:bc:e5:a7: a5:73:14:84:7f:4d:35:15:ad:1e:c3:74:44:6c:a1: 58:08:f8:90:95:f8:79:65:81:89:85:20:ee:c3:31: 09:77:2d:40:af:4e:11:86:16:2d:8b:ae:04:8a:f1: 41:a7:d3:5b:2a:7c:4a:04:7f:08:a5:16:1c:93:5c: 93:fd:fa:41:1c:d7:51:79:2a:95:58:18:89:e4:77: d8:4f:09:38:a2:8f:20:7d:6e:92:d9:16:0d:65:fd: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:71:95:03:6A:72:4B:D0:45:18:A0:E7:1A:AD:92:CE:E7:20:11 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:16:32:7b:28:59:9c:57:2c:44:b3:4c:61:48:bf:ee:69: 75:3d:c9:58:ab:6c:e0:81:d6:91:ef:36:1a:4b:c8:1e:30:90: 9e:79:01:5b:3f:39:59:8d:4c:73:df:38:b4:37:bb:53:9c:f0: 87:9d:bd:d5:b8:17:bb:b9:24:b3:53:b3:ea:cb:5f:15:37:5e: e5:97:4d:85:d1:db:1b:27:f2:e4:e5:31:57:58:41:11:69:e2: 37:4c:33:06:f9:e6:f9:35:f3:c5:69:7a:7b:75:c2:c3:17:4e: e4:92:01:e1:35:aa:74:47:b1:bd:11:e4:5b:ff:94:25:bb:20: ee:d5:64:c3:62:e4:1b:29:e0:e5:50:1a:32:07:26:b8:09:54: 65:02:d2:a5:46:e8:da:42:af:d4:a6:3f:1f:a5:cb:f7:8d:61: 32:a7:72:2d:87:7a:97:f7:27:2f:3a:7e:77:f1:d7:68:c5:e4: d9:8b:2e:94:54:9a:83:0a:c0:13:b6:b1:61:48:1d:c5:78:14: a8:5e:38:83:d0:a2:c1:86:46:a4:2e:ce:ab:29:53:80:e6:97: 90:63:73:03:ef:95:2b:ce:d2:73:1b:51:42:5c:33:09:f5:17: e0:5a:71:af:1a:d6:44:8c:b1:a7:81:02:62:5a:49:0a:ba:85: 4c:71:2d:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjYwNTIwMTcyNDE2WhcNMjYwNTI3MTcyNDE2WjAYMRYwFAYD VQQDEw02YTBkZWU0MS00NGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LpacYJZ2wMKUvgo2z3lnWHKx1W0NudkTKCu2rEEm7d7CMJ/mhxODYoC0oxs kSICrSwWO/UVfMK2Bu+ThlOCtcUffr+WbrpZ3Ro4XEzn4sXvRnBeg5t+kaUK4hWT M3cPhy1k/X983Ep4COS5117B9p29YHjtgjGxR8oFYo5HavcVStvuuJrSya0fbFLz 4HiR3jJ31RRoFWfyp48e1CxMlEa85aelcxSEf001Fa0ew3REbKFYCPiQlfh5ZYGJ hSDuwzEJdy1Ar04RhhYti64EivFBp9NbKnxKBH8IpRYck1yT/fpBHNdReSqVWBiJ 5HfYTwk4oo8gfW6S2RYNZf2lGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBA/cZUD anJL0EUYoOcarZLO5yARMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABg4WMnsoWZxXLESzTGFIv+5pdT3JWKts4IHWke82GkvIHjCQnnkBWz85WY1M c984tDe7U5zwh5291bgXu7kks1Oz6stfFTde5ZdNhdHbGyfy5OUxV1hBEWniN0wz Bvnm+TXzxWl6e3XCwxdO5JIB4TWqdEexvRHkW/+UJbsg7tVkw2LkGyng5VAaMgcm uAlUZQLSpUbo2kKv1KY/H6XL941hMqdyLYd6l/cnLzp+d/HXaMXk2YsulFSagwrA E7axYUgdxXgUqF44g9CiwYZGpC7OqylTgOaXkGNzA++VK87ScxtRQlwzCfUX4Fpx rxrWRIyxp4ECYlpJCrqFTHEt8Q== -----END CERTIFICATE-----Generated at Thu May 21 10:20:50 2026 by rpki-client