$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: 8Si1vhrSfpVOo0pH+o/uYLV+/jar/yyE+Iuq42rmECc= Subject key identifier: 12:27:2D:2D:AA:0D:B0:6E:3B:42:5A:B9:93:CF:C7:47:FA:98:4B:0D Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1EBF Signing time: Thu 14 May 2026 16:02:22 +0000 Manifest this update: Thu 14 May 2026 16:02:21 +0000 Manifest next update: Thu 21 May 2026 16:02:21 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: HvLPlDbKIng0e8DhKOVLN8aOkqVDSUOpyLNvkoq/j60=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 16:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7923 (0x1ef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: May 14 16:02:21 2026 GMT Not After : May 21 16:02:21 2026 GMT Subject: CN=6a05f20d-d261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:a4:70:93:c4:80:06:aa:9e:52:74:6b:f1: 9f:d0:5f:70:45:30:1c:cb:1a:d9:7f:19:69:48:c4: 12:4f:ba:ad:bc:26:a4:68:43:d6:c0:f8:d7:6a:96: 14:55:a7:4b:5c:af:c0:1d:dc:34:e9:70:e0:df:b7: c6:5e:57:41:3d:fe:f2:ef:6d:32:b6:c9:9f:8e:44: ba:4c:43:1d:f0:33:ce:57:f4:db:81:dd:f5:04:c8: 44:09:30:50:9b:1b:e1:ad:35:8c:f3:5a:b0:f3:02: 76:23:33:b6:0b:90:73:e8:9f:77:50:4e:fe:09:5a: d7:e9:cb:e6:f6:85:3c:7e:21:a0:3e:aa:0f:27:51: fd:0f:ea:7f:19:bc:ac:89:ea:46:aa:97:a1:fe:02: 27:04:04:c8:6d:7f:35:d6:f7:f0:ee:27:67:07:66: c0:a0:e3:70:73:92:c6:91:fd:b3:88:b3:11:fa:1e: 15:6e:8d:1f:3b:f5:95:97:7e:8c:59:fa:0b:7e:20: 19:c3:c9:d9:ff:7f:c8:e6:0b:14:2e:57:31:84:a9: 2e:cd:ba:c1:0b:b8:7e:f5:44:77:27:3d:ae:87:be: 3f:0a:48:d1:ab:de:ea:8e:14:39:21:95:c2:e5:d0: 25:ff:7a:b5:97:28:98:05:8b:5f:38:dc:ed:c6:5d: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:2D:2D:AA:0D:B0:6E:3B:42:5A:B9:93:CF:C7:47:FA:98:4B:0D X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:54:7f:8e:a0:19:3f:75:b4:0e:a9:63:d0:6f:2a:bd:42:40: 2d:91:6f:6e:3f:3c:ef:d4:8f:46:d0:5a:e9:0b:72:04:23:46: d4:16:40:5a:cf:c8:f9:7d:91:26:d0:dc:75:9d:bf:60:57:0c: 30:4e:ab:2e:ba:e6:b5:f5:d8:4d:3b:e7:ad:f4:6b:3c:67:fe: 04:8e:d7:53:0f:35:45:13:45:57:9e:a6:28:9f:4a:49:f5:fe: ec:17:df:f6:a4:24:5a:3e:3b:eb:57:84:c7:7c:0d:32:c6:dc: e4:43:1b:af:aa:50:38:f1:6b:7e:48:2b:d1:37:ad:81:67:db: 59:16:88:81:11:f6:b4:a8:32:dc:5e:7f:58:63:4c:3f:ec:0f: 13:c3:61:f9:39:02:11:5a:87:65:bc:03:49:95:3b:3e:bc:64: ec:1c:77:a8:25:bf:2d:1c:9e:ea:f1:99:a3:3b:17:1e:98:c5: f4:b2:37:36:a3:1d:28:4e:e6:ec:62:db:d4:c6:49:a4:f2:a7: 1d:82:d3:0e:01:ce:40:56:4e:66:1b:97:2c:8a:7a:54:61:e1: 3c:4f:10:9f:cd:c3:ae:2a:bc:a4:1b:30:a1:4a:14:8a:d2:02: 81:37:a7:fe:10:07:43:1a:b6:c4:05:15:9b:eb:c5:31:10:8c: b2:f7:99:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjYwNTE0MTYwMjIxWhcNMjYwNTIxMTYwMjIxWjAYMRYwFAYD VQQDEw02YTA1ZjIwZC1kMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdmkcJPEgAaqnlJ0a/Gf0F9wRTAcyxrZfxlpSMQST7qtvCakaEPWwPjXapYU VadLXK/AHdw06XDg37fGXldBPf7y720ytsmfjkS6TEMd8DPOV/Tbgd31BMhECTBQ mxvhrTWM81qw8wJ2IzO2C5Bz6J93UE7+CVrX6cvm9oU8fiGgPqoPJ1H9D+p/Gbys iepGqpeh/gInBATIbX811vfw7idnB2bAoONwc5LGkf2ziLMR+h4Vbo0fO/WVl36M WfoLfiAZw8nZ/3/I5gsULlcxhKkuzbrBC7h+9UR3Jz2uh74/CkjRq97qjhQ5IZXC 5dAl/3q1lyiYBYtfONztxl1SkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBInLS2q DbBuO0JauZPPx0f6mEsNMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFR/jqAZP3W0Dqlj0G8qvUJALZFvbj8879SPRtBa6QtyBCNG1BZAWs/I+X2R JtDcdZ2/YFcMME6rLrrmtfXYTTvnrfRrPGf+BI7XUw81RRNFV56mKJ9KSfX+7Bff 9qQkWj4761eEx3wNMsbc5EMbr6pQOPFrfkgr0TetgWfbWRaIgRH2tKgy3F5/WGNM P+wPE8Nh+TkCEVqHZbwDSZU7Prxk7Bx3qCW/LRye6vGZozsXHpjF9LI3NqMdKE7m 7GLb1MZJpPKnHYLTDgHOQFZOZhuXLIp6VGHhPE8Qn83Driq8pBswoUoUitICgTen /hAHQxq2xAUVm+vFMRCMsveZMw== -----END CERTIFICATE-----Generated at Fri May 15 20:46:37 2026 by rpki-client