$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: GIdlJolTL0LwVbkt3l2T+RNNm2/EhnfBANNVx0a8Nxs= Subject key identifier: CC:BD:91:5F:A7:1D:8F:1D:66:5D:B8:46:8A:E6:37:5C:3E:D2:9D:F3 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 80 Signing time: Mon 01 Jun 2026 08:25:27 +0000 Manifest this update: Mon 01 Jun 2026 08:25:26 +0000 Manifest next update: Mon 08 Jun 2026 08:25:26 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: BO0sgtmpaYJdA1sbmlGqOZ3oC4j7DNtBA1Bb3pEWhJI=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Jun 1 08:25:26 2026 GMT Not After : Jun 8 08:25:26 2026 GMT Subject: CN=6a1d41f6-d191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:62:19:26:30:e8:0e:6a:f5:69:ec:eb:04: e8:49:5a:84:ea:76:f5:9d:ea:13:eb:33:82:ff:70: f1:28:60:22:57:e4:50:0d:ec:d2:a6:e3:e3:dc:8e: 6d:37:de:3f:1a:b6:88:eb:e3:d6:19:29:17:0e:0c: b7:e2:97:52:20:a7:69:85:a1:ed:73:fb:32:ef:9d: 28:eb:a3:53:1f:c4:97:b2:f9:b1:d7:88:a8:ba:23: 9f:36:9d:13:75:24:1a:26:7e:54:a1:47:74:19:64: db:64:06:c5:bc:2d:90:ce:f4:2e:57:5a:bf:ea:f1: f9:e0:69:e7:3c:3c:71:8a:71:b9:9e:b0:68:66:0d: 6f:f2:59:51:c8:9b:55:b6:2e:eb:f9:72:df:49:99: 98:02:81:59:9a:e0:d7:0a:55:43:10:6f:74:1d:9d: 1b:32:0e:e6:3e:e9:f7:14:35:a3:88:19:9b:03:a5: 5b:42:00:e4:13:bb:90:31:07:5f:5a:51:f0:e3:0e: fc:ca:e7:6e:03:29:7e:b0:2a:30:15:3b:a1:3e:30: a8:8f:3b:92:43:ce:6e:ab:05:be:76:76:38:05:7e: f5:39:bc:e7:4c:63:c8:b1:ef:4f:80:74:1f:f1:1f: 4a:18:ee:60:af:64:99:57:03:1f:83:a8:e1:3e:59: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:91:5F:A7:1D:8F:1D:66:5D:B8:46:8A:E6:37:5C:3E:D2:9D:F3 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:21:2f:33:b9:c1:97:f5:a7:a0:98:8b:8e:15:11:3a:45:ee: 83:72:3a:fd:d8:48:cf:2e:72:66:a4:b2:c5:33:be:e0:11:2e: 3f:89:44:f2:b9:80:f0:ce:3e:82:ba:b9:34:f8:b9:73:9b:14: a1:79:92:b6:86:63:48:6b:60:cf:0a:8a:a6:cb:71:eb:49:80: f7:7c:f7:e3:23:48:ea:28:e7:87:a8:27:3f:23:49:a2:1f:f7: d0:2c:ef:86:fd:28:c8:9a:89:33:1d:6c:37:11:ee:2b:b7:8f: 57:6d:b5:7c:e9:49:13:5a:70:08:a6:4a:12:e0:97:9c:5e:bc: 6d:94:40:78:16:b4:d6:bf:d9:e6:1c:ec:f5:ac:b3:32:f8:78: 58:6e:8c:44:49:99:20:92:db:a9:e1:0f:af:27:0c:46:2c:3a: 0d:b4:f5:c0:00:af:c7:2b:b9:1f:41:04:02:38:a7:c2:3f:55: 3f:1e:d8:7d:45:76:89:24:e0:e9:87:b2:91:5e:ed:02:9c:a3: db:6b:1b:50:d5:ed:4a:d7:bd:34:62:63:0f:2b:25:3c:91:2d: 7d:f2:8e:c4:23:98:6b:9a:12:07:97:77:4a:ac:43:34:24:32: 71:67:ef:60:6c:95:b9:a3:7e:f7:c3:57:64:18:8e:83:7c:0d: f8:d5:e4:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwMDAxMTAvBgNVBAUTKDY1QUFCRUYxN0NDQzA4MEM5QTM2MkEwODIxNTMwNEIx MUJENTA3RkUwHhcNMjYwNjAxMDgyNTI2WhcNMjYwNjA4MDgyNTI2WjAYMRYwFAYD VQQDEw02YTFkNDFmNi1kMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35ViGSYw6A5q9Wns6wToSVqE6nb1neoT6zOC/3DxKGAiV+RQDezSpuPj3I5t N94/GraI6+PWGSkXDgy34pdSIKdphaHtc/sy750o66NTH8SXsvmx14iouiOfNp0T dSQaJn5UoUd0GWTbZAbFvC2QzvQuV1q/6vH54GnnPDxxinG5nrBoZg1v8llRyJtV ti7r+XLfSZmYAoFZmuDXClVDEG90HZ0bMg7mPun3FDWjiBmbA6VbQgDkE7uQMQdf WlHw4w78yuduAyl+sCowFTuhPjCojzuSQ85uqwW+dnY4BX71ObznTGPIse9PgHQf 8R9KGO5gr2SZVwMfg6jhPlkzHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMy9kV+n HY8dZl24RormN1w+0p3zMB8GA1UdIwQYMBaAFGWqvvF8zAgMmjYqCCFTBLEb1Qf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FNUExMzhEMDlE MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNBeWFOaW9JSVZNRXNSdlZC XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjAwMC9FNUExMzhEMDlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNB eWFOaW9JSVZNRXNSdlZCXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtSEvM7nBl/WnoJiLjhUROkXug3I6/dhIzy5yZqSyxTO+4BEuP4lE8rmA8M4+ grq5NPi5c5sUoXmStoZjSGtgzwqKpstx60mA93z34yNI6ijnh6gnPyNJoh/30Czv hv0oyJqJMx1sNxHuK7ePV221fOlJE1pwCKZKEuCXnF68bZRAeBa01r/Z5hzs9ayz Mvh4WG6MREmZIJLbqeEPrycMRiw6DbT1wACvxyu5H0EEAjinwj9VPx7YfUV2iSTg 6YeykV7tApyj22sbUNXtSte9NGJjDyslPJEtffKOxCOYa5oSB5d3SqxDNCQycWfv YGyVuaN+98NXZBiOg3wN+NXktQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:56 2026 by rpki-client