$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: 3W6/YD4wKgiB27iTVc8zTJR3sSMuP0bw0r9UKrk2avs= Subject key identifier: A2:5D:AB:E3:08:7A:CD:E8:06:F2:7A:DC:52:C5:AC:1C:DE:53:E5:20 Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 0110 Signing time: Thu 21 May 2026 06:23:05 +0000 Manifest this update: Thu 21 May 2026 06:23:04 +0000 Manifest next update: Thu 28 May 2026 06:23:04 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: dCEc98vn/FdMB1WPsd/amIHm2e2vUshEB7kAd/tMDFw=) 2: 9CFB6E68291011F1A4B1745D97833773.roa (hash: aehHvD9t7DFT4Rjm26XymMF5OBLncC+QzTFVcD0Y9Lc=) 3: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=) 4: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: May 21 06:23:04 2026 GMT Not After : May 28 06:23:04 2026 GMT Subject: CN=6a0ea4c8-b5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:d2:f7:f6:a6:ea:ab:95:e8:88:f7:19:da: be:0b:7d:d4:03:b6:29:1c:c9:a4:6e:d5:02:dd:67: 0b:3f:44:90:34:08:4d:2c:bc:ca:38:c5:34:0e:81: 8f:b4:3a:3a:a9:52:17:73:20:4c:99:91:00:b7:f4: a5:fd:21:42:3f:97:63:9d:a4:34:99:58:2c:44:d5: ee:57:cb:28:03:82:a0:0c:6c:49:1c:09:5b:0e:cd: 60:9d:1c:c6:1d:56:73:68:b3:9d:48:3c:47:f3:bb: c9:95:4f:1a:60:6f:73:88:da:28:4f:48:bf:ae:95: 5e:b2:79:2a:7a:a6:91:4e:ea:b4:a5:a5:f7:d1:12: ef:9d:00:cd:7b:18:d1:3c:9c:26:f3:1e:e2:ea:7c: 0e:d0:c7:13:23:9f:80:d5:4d:1b:5f:9b:88:2f:be: c3:87:1b:09:ef:40:6c:e5:62:88:d5:5b:35:b2:78: d6:69:48:84:29:cc:e6:6d:db:9a:f7:81:f2:03:3b: aa:41:d9:37:ee:08:88:ff:02:a3:dd:df:8b:36:4a: 15:75:20:c5:c6:e1:0a:37:72:92:f7:6e:4f:15:1b: eb:73:48:5c:1c:97:a8:01:20:cb:6c:2e:87:8e:0a: b8:0f:c3:14:32:84:0f:d3:08:f2:3d:33:e4:c0:5b: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:AB:E3:08:7A:CD:E8:06:F2:7A:DC:52:C5:AC:1C:DE:53:E5:20 X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cf:d6:ee:9a:29:2a:b5:2a:df:d8:9e:54:fd:15:bc:13:ab: 49:8d:ed:79:c4:f1:d9:34:c9:2a:f7:7d:8f:11:ab:ec:21:9b: 89:e1:7d:ec:f7:63:c1:5b:e5:cf:a8:2a:2b:37:d7:26:92:c9: 66:93:92:14:74:07:57:fd:9a:0b:17:f9:85:7a:25:c8:0a:92: 68:8e:b8:12:b6:8f:36:87:ad:4b:7a:a1:07:c8:c3:80:34:7b: 19:2e:82:fa:3f:05:f1:fb:29:e8:8c:e3:87:23:ad:da:07:5d: 09:5c:62:51:6c:99:40:9e:c7:a2:d4:5d:1a:36:d5:d6:ce:45: e9:7b:89:fa:e4:ba:19:3e:35:c9:c4:fd:d8:c0:a2:ca:1c:12: 2c:33:87:ee:12:25:44:66:39:02:51:73:95:c1:da:dc:3b:fc: 51:d2:d7:96:f6:07:a6:52:ab:91:f0:58:88:11:35:0b:35:76: 0a:ba:cd:8f:62:a9:76:be:94:d7:72:db:7e:fc:aa:71:f4:a2: 60:93:27:62:4b:4c:64:35:29:7e:f4:30:e6:46:d1:81:79:e1: cf:34:01:0e:dc:7f:88:85:f1:dc:be:24:cf:e9:3c:84:91:ce: 31:40:16:e0:ff:e6:a0:0f:39:12:2e:84:46:4d:d8:86:0a:b5: 35:0d:fc:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwNTIxMDYyMzA0WhcNMjYwNTI4MDYyMzA0WjAYMRYwFAYD VQQDEw02YTBlYTRjOC1iNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYLS9/am6quV6Ij3Gdq+C33UA7YpHMmkbtUC3WcLP0SQNAhNLLzKOMU0DoGP tDo6qVIXcyBMmZEAt/Sl/SFCP5djnaQ0mVgsRNXuV8soA4KgDGxJHAlbDs1gnRzG HVZzaLOdSDxH87vJlU8aYG9ziNooT0i/rpVesnkqeqaRTuq0paX30RLvnQDNexjR PJwm8x7i6nwO0McTI5+A1U0bX5uIL77DhxsJ70Bs5WKI1Vs1snjWaUiEKczmbdua 94HyAzuqQdk37giI/wKj3d+LNkoVdSDFxuEKN3KS925PFRvrc0hcHJeoASDLbC6H jgq4D8MUMoQP0wjyPTPkwFuogQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJdq+MI es3oBvJ63FLFrBzeU+UgMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhc/W7popKrUq39ieVP0VvBOrSY3tecTx2TTJKvd9jxGr7CGbieF97PdjwVvl z6gqKzfXJpLJZpOSFHQHV/2aCxf5hXolyAqSaI64EraPNoetS3qhB8jDgDR7GS6C +j8F8fsp6IzjhyOt2gddCVxiUWyZQJ7HotRdGjbV1s5F6XuJ+uS6GT41ycT92MCi yhwSLDOH7hIlRGY5AlFzlcHa3Dv8UdLXlvYHplKrkfBYiBE1CzV2CrrNj2Kpdr6U 13LbfvyqcfSiYJMnYktMZDUpfvQw5kbRgXnhzzQBDtx/iIXx3L4kz+k8hJHOMUAW 4P/moA85Ei6ERk3Yhgq1NQ38JQ== -----END CERTIFICATE-----Generated at Fri May 22 09:18:15 2026 by rpki-client