$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: of1k1TSZHP+OoxNHqDBL1nL4MdGCgQMxis+PMPt7cgo= Subject key identifier: 90:45:AF:41:3B:29:20:7F:EF:A5:22:C3:FF:07:78:2C:95:CF:11:01 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02D2 Signing time: Tue 05 May 2026 01:33:55 +0000 Manifest this update: Tue 05 May 2026 01:33:55 +0000 Manifest next update: Tue 12 May 2026 01:33:55 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: e3JnRWTXUUkiRm7hpSIhX5W1kULyoul4tgqGPcVEL+Y=) 2: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) 3: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 4: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) 5: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) 6: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 8: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: May 5 01:33:55 2026 GMT Not After : May 12 01:33:55 2026 GMT Subject: CN=69f94903-4b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:df:31:0f:47:54:e8:ae:a6:c8:b8:28:59: f5:b9:51:fb:c7:23:f8:8c:33:f6:ce:4c:a0:f2:1f: ae:b6:fc:4c:8e:49:6c:bc:b8:37:de:4f:37:6c:7f: 59:56:48:d6:9d:29:3f:2d:8d:a4:00:a6:64:f7:51: 06:0f:66:f4:fb:68:08:c5:96:e7:2b:0c:2b:07:5a: 6b:61:fd:b7:45:20:35:14:8e:ed:71:77:16:b4:8b: e8:1c:0d:b5:70:8e:59:ed:84:6a:21:70:53:46:8c: 5e:8d:dd:5b:f3:05:07:b8:0b:15:96:88:59:ab:de: 9e:c1:87:e1:10:76:d0:86:a3:09:06:55:b9:7a:d7: 54:ec:db:40:93:e0:8c:21:13:af:fe:e0:1a:33:2d: d1:12:17:e4:5d:d4:c7:dc:cc:58:52:06:41:72:73: 3b:c5:07:b3:53:cd:d4:fe:09:ae:f2:ff:d0:2e:cb: 97:09:c4:08:2c:e9:5e:1f:84:17:94:b8:ca:39:42: 54:ab:11:6c:7b:aa:a6:ac:21:db:49:b7:c6:f4:c6: e7:17:9d:bd:db:be:cb:89:7a:56:bc:00:c8:c6:39: 70:12:aa:f3:17:13:bb:d7:26:4f:57:19:73:65:85: 90:2e:2e:55:fa:38:38:cb:e4:0e:47:0f:f9:db:13: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:AF:41:3B:29:20:7F:EF:A5:22:C3:FF:07:78:2C:95:CF:11:01 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e6:27:f3:da:50:1c:5a:69:de:a3:d3:ea:f3:5a:be:54:af: ee:13:ad:51:79:43:69:57:10:f5:65:3c:05:82:6f:47:3f:cf: 94:c5:24:ed:d1:c8:77:bd:69:b4:4e:1b:9a:87:28:93:b6:ae: d8:53:78:0f:b1:05:d1:bc:fa:c0:0f:42:c5:aa:95:04:84:e9: 1a:d7:ae:19:c3:74:a9:96:dd:43:d9:c9:23:7f:cd:60:91:56: 05:fd:c5:46:1b:82:16:93:82:3e:8d:86:12:99:e3:43:f2:26: c1:f6:e0:84:c1:85:f9:6e:51:0f:92:ae:71:06:34:e1:31:a6: 7b:12:2a:dc:e4:94:fe:f1:c0:19:d6:3e:e8:db:22:a7:da:8a: 9b:f9:35:ee:59:ce:c3:5f:ed:a5:53:82:c1:ec:7b:6a:0c:e5: cd:1a:ae:d0:9a:39:c1:b2:2a:13:70:a2:fe:c7:53:67:3f:d9: 7f:5a:57:56:2d:dd:d6:06:ae:5d:77:e8:84:82:ac:bf:75:e3: eb:bd:86:74:96:fa:86:97:32:6d:f0:f0:ff:f4:e6:94:13:aa: 6e:90:a8:ad:a4:95:98:f9:7c:12:48:8d:37:a9:49:cb:a4:f5: 21:ab:8e:55:67:b9:e3:93:93:4c:0d:74:db:c7:b4:08:38:7d: d9:bd:e3:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNTA1MDEzMzU1WhcNMjYwNTEyMDEzMzU1WjAYMRYwFAYD VQQDEw02OWY5NDkwMy00YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAzfMQ9HVOiupsi4KFn1uVH7xyP4jDP2zkyg8h+utvxMjklsvLg33k83bH9Z VkjWnSk/LY2kAKZk91EGD2b0+2gIxZbnKwwrB1prYf23RSA1FI7tcXcWtIvoHA21 cI5Z7YRqIXBTRoxejd1b8wUHuAsVlohZq96ewYfhEHbQhqMJBlW5etdU7NtAk+CM IROv/uAaMy3REhfkXdTH3MxYUgZBcnM7xQezU83U/gmu8v/QLsuXCcQILOleH4QX lLjKOUJUqxFse6qmrCHbSbfG9MbnF529277LiXpWvADIxjlwEqrzFxO71yZPVxlz ZYWQLi5V+jg4y+QORw/52xMZ6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBFr0E7 KSB/76Uiw/8HeCyVzxEBMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAuYn89pQHFpp3qPT6vNavlSv7hOtUXlDaVcQ9WU8BYJvRz/PlMUk7dHId71p tE4bmocok7au2FN4D7EF0bz6wA9CxaqVBITpGteuGcN0qZbdQ9nJI3/NYJFWBf3F RhuCFpOCPo2GEpnjQ/ImwfbghMGF+W5RD5KucQY04TGmexIq3OSU/vHAGdY+6Nsi p9qKm/k17lnOw1/tpVOCwex7agzlzRqu0Jo5wbIqE3Ci/sdTZz/Zf1pXVi3d1gau XXfohIKsv3Xj672GdJb6hpcybfDw//TmlBOqbpCoraSVmPl8EkiNN6lJy6T1IauO VWe545OTTA1028e0CDh92b3jAw== -----END CERTIFICATE-----Generated at Tue May 5 08:59:02 2026 by rpki-client