$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: F3YRkKdrAwyUGwD6khPfITjqJX4gnlm5IzCPMx8cDzk= Subject key identifier: 61:43:44:E8:4D:73:05:B3:8D:35:78:03:0E:77:D2:6C:4D:8F:6E:61 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: 013A Signing time: Thu 21 May 2026 05:29:57 +0000 Manifest this update: Thu 21 May 2026 05:29:57 +0000 Manifest next update: Thu 28 May 2026 05:29:57 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: zEorzaJs4lqMAp8a27vzgr46rTTjBlhonZ2tR3My8k4=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: ACwMHQJQ4E23jnEheit3IBhH0p1Mz9Y2fP++jvIfqGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: May 21 05:29:57 2026 GMT Not After : May 28 05:29:57 2026 GMT Subject: CN=6a0e9855-6e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:a6:6b:ea:a4:16:88:ef:d5:aa:e2:93:22: c3:70:ff:c0:b0:f4:ad:8e:3f:83:fa:85:e7:a3:0b: b4:4c:f2:aa:ae:80:b5:d8:c2:5c:06:03:09:ae:0c: 9d:dd:51:d6:c1:b1:6f:50:8b:4c:06:6a:fc:0a:2c: da:91:b2:0e:75:1e:9d:23:48:99:19:22:68:d0:71: 86:f6:9a:46:d2:e9:ad:00:35:c6:6d:4e:5c:79:2f: 78:0e:52:4a:92:b5:ae:b6:a7:e0:6a:d3:31:bd:eb: 81:3e:c5:37:6f:a7:56:b0:cf:22:27:ce:a3:06:05: 67:fb:94:95:66:76:3d:97:52:df:16:7b:92:cf:8e: 58:bc:1a:9b:79:7c:f9:29:7c:68:47:05:44:7c:6f: 38:a9:c3:eb:f0:b5:20:c9:4e:ea:07:f8:3d:da:48: e0:84:99:f8:1d:cb:7c:b3:bc:38:15:ab:02:1c:2e: 5d:88:da:6d:92:16:59:bf:6f:e6:3f:2f:b3:76:94: 14:06:c1:8e:6e:ac:09:99:15:e0:6b:21:bb:e5:aa: b9:11:2a:1a:92:57:40:f7:8e:3d:7a:a7:cd:94:ff: 78:55:e3:b9:c0:f9:e9:01:66:3a:04:ce:b2:73:88: 4c:16:22:83:44:c8:87:5e:46:63:f9:56:32:2f:00: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:43:44:E8:4D:73:05:B3:8D:35:78:03:0E:77:D2:6C:4D:8F:6E:61 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6b:97:6f:4d:c4:db:24:89:60:38:c1:26:fe:b7:55:40:f6: 36:b6:b1:25:f3:64:18:8f:c9:82:52:16:49:ec:1e:53:93:d3: 4e:51:e3:25:8e:5c:cc:06:67:8a:49:a4:19:15:b1:02:9f:b6: 93:4c:70:e8:57:ba:95:64:54:dc:12:df:00:8a:e6:7c:4e:4e: 22:11:1e:d0:9e:2b:c1:25:7a:f4:14:0f:25:fe:1b:c6:ad:c3: 89:a7:e1:73:59:8e:29:72:4d:91:17:85:24:e3:63:76:08:9f: 3b:85:16:64:a6:4e:f1:f0:9b:15:b4:19:ac:fc:14:75:d4:e1: 73:fc:ba:a7:d7:a1:db:0b:82:f4:11:03:00:cf:62:c7:cd:1f: 12:5d:5d:1a:f0:46:85:bd:93:93:f3:28:7d:99:c7:7e:3d:f8: fb:01:b5:38:d3:45:21:cc:7a:2b:80:05:b8:63:ac:a1:b7:bc: 9b:3d:6b:f0:b1:45:7b:f7:00:fd:cc:ee:bd:8b:90:54:61:d4: b2:81:d3:8b:0b:34:aa:2f:87:6d:65:2b:87:d0:a8:fe:fc:48: 0e:66:9e:ad:b2:b0:7c:e8:5b:9c:1f:fb:56:75:f5:7b:a3:c9: 82:b1:41:40:cf:6c:25:b3:e4:b0:32:30:a2:2f:3e:a8:8e:28: e9:ad:ed:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjYwNTIxMDUyOTU3WhcNMjYwNTI4MDUyOTU3WjAYMRYwFAYD VQQDEw02YTBlOTg1NS02ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8ema+qkFojv1arikyLDcP/AsPStjj+D+oXnowu0TPKqroC12MJcBgMJrgyd 3VHWwbFvUItMBmr8CizakbIOdR6dI0iZGSJo0HGG9ppG0umtADXGbU5ceS94DlJK krWutqfgatMxveuBPsU3b6dWsM8iJ86jBgVn+5SVZnY9l1LfFnuSz45YvBqbeXz5 KXxoRwVEfG84qcPr8LUgyU7qB/g92kjghJn4Hct8s7w4FasCHC5diNptkhZZv2/m Py+zdpQUBsGObqwJmRXgayG75aq5ESoakldA9449eqfNlP94VeO5wPnpAWY6BM6y c4hMFiKDRMiHXkZj+VYyLwDPwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFDROhN cwWzjTV4Aw530mxNj25hMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmmuXb03E2ySJYDjBJv63VUD2NraxJfNkGI/JglIWSeweU5PTTlHjJY5czAZn ikmkGRWxAp+2k0xw6Fe6lWRU3BLfAIrmfE5OIhEe0J4rwSV69BQPJf4bxq3Diafh c1mOKXJNkReFJONjdgifO4UWZKZO8fCbFbQZrPwUddThc/y6p9eh2wuC9BEDAM9i x80fEl1dGvBGhb2Tk/MofZnHfj34+wG1ONNFIcx6K4AFuGOsobe8mz1r8LFFe/cA /czuvYuQVGHUsoHTiws0qi+HbWUrh9Co/vxIDmaerbKwfOhbnB/7VnX1e6PJgrFB QM9sJbPksDIwoi8+qI4o6a3tSw== -----END CERTIFICATE-----Generated at Thu May 21 10:54:33 2026 by rpki-client