$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: Ug2FHlVCn3icXZkNyQvI+Ind61Qz4tIUCxfcmYNGOuE= Subject key identifier: 7E:3F:BB:1A:32:6E:C0:9A:59:B9:74:77:BC:50:A5:9D:9F:AE:8A:5A Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 70 Signing time: Thu 21 May 2026 07:55:32 +0000 Manifest this update: Thu 21 May 2026 07:55:31 +0000 Manifest next update: Thu 28 May 2026 07:55:31 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: VpTduPMctRl/DlTWolA7tqj4VRoVDvThrr3yxIutuYA=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: cUM/YRlGCUalihANb69w5cZ0Y6p6DB5jdCl/LBiwJeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: May 21 07:55:31 2026 GMT Not After : May 28 07:55:31 2026 GMT Subject: CN=6a0eba74-ed9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:7d:fd:22:a1:2a:bd:a4:58:e0:21:73:84: a8:d7:a9:2e:9f:4c:16:d1:d7:b3:d4:6c:a1:fa:8d: 46:30:8a:3f:a3:64:31:4a:a5:57:e4:28:2f:cd:5e: e3:ed:1e:b2:1d:0d:13:ab:0a:ba:48:4c:f1:ad:d3: e8:5d:16:3a:96:dd:93:03:03:43:3d:ac:b4:0f:37: e7:7c:13:9c:24:82:ef:f4:bf:a0:37:04:df:2f:83: 3e:7d:78:2e:6f:d9:e7:36:20:3d:31:e6:e7:88:3b: d3:a5:e4:7f:36:31:05:cf:ae:5a:8c:1a:58:ad:c7: 76:87:45:b2:a4:88:3c:c2:67:1a:78:a2:b8:e7:94: 72:f0:94:ba:1e:ee:f4:0f:65:d0:18:6a:d0:b0:88: 61:ec:4b:d9:07:f9:9e:4f:a4:ea:f8:59:91:90:d5: 01:ff:70:56:2f:aa:4c:34:2a:1f:df:c2:08:a1:b3: ae:07:59:3c:a9:72:3d:e1:21:68:9e:68:4d:3e:c9: 25:44:2d:be:c3:fd:e5:33:f2:7c:c9:43:f9:33:ef: 9e:70:da:4d:6d:c8:37:b4:39:c2:73:78:b6:9c:69: c6:53:0b:8b:51:ec:b3:58:60:51:22:44:ba:b3:f7: e8:b9:d2:cf:04:d3:95:42:be:39:8c:18:37:77:c1: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3F:BB:1A:32:6E:C0:9A:59:B9:74:77:BC:50:A5:9D:9F:AE:8A:5A X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:04:92:12:70:e4:5c:d4:12:67:68:44:03:cb:6c:08:d7:a4: d5:cf:23:10:50:0d:d9:44:4a:0d:a0:2e:40:d1:dc:18:14:dc: 12:66:b0:c6:f1:44:54:ed:24:51:f8:5d:9d:dd:63:5b:23:fd: 13:16:91:9f:73:d9:e5:9a:81:d8:1b:eb:7e:6a:24:06:40:a5: 00:3c:85:11:0f:1c:f7:49:8b:61:16:b2:25:82:52:64:2c:c6: 16:35:0a:e8:49:0c:61:7c:bd:c1:d2:d6:7c:09:33:ae:d7:a8: 4e:35:a0:f8:c5:8b:40:9b:1f:1a:75:d5:85:d3:70:9f:7d:5c: ff:cd:e3:19:54:a1:62:e5:f9:b1:df:70:90:c8:85:ff:78:30: de:cd:4b:ca:d6:39:80:06:d0:e0:28:e5:e2:e3:c2:4e:76:48: 4f:10:61:a5:20:95:c9:c9:86:38:75:12:12:51:57:3f:88:93: be:90:fa:64:5b:3b:9c:e6:9b:e8:d6:c1:2a:1a:01:16:d5:f5: 7d:66:0b:6e:46:c9:2b:7a:27:19:b4:1d:be:41:ba:75:b7:44: 29:c5:8c:12:38:cf:45:7d:27:c9:dc:ad:ae:83:e4:bc:f5:13: 49:ce:f5:9b:1c:02:10:d7:ae:b5:93:f8:08:6b:6e:95:ed:36: 75:36:a7:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNjA1MjEwNzU1MzFaFw0yNjA1MjgwNzU1MzFaMBgxFjAUBgNV BAMTDTZhMGViYTc0LWVkOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAQn39IqEqvaRY4CFzhKjXqS6fTBbR17PUbKH6jUYwij+jZDFKpVfkKC/NXuPt HrIdDROrCrpITPGt0+hdFjqW3ZMDA0M9rLQPN+d8E5wkgu/0v6A3BN8vgz59eC5v 2ec2ID0x5ueIO9Ol5H82MQXPrlqMGlitx3aHRbKkiDzCZxp4orjnlHLwlLoe7vQP ZdAYatCwiGHsS9kH+Z5PpOr4WZGQ1QH/cFYvqkw0Kh/fwgihs64HWTypcj3hIWie aE0+ySVELb7D/eUz8nzJQ/kz755w2k1tyDe0OcJzeLacacZTC4tR7LNYYFEiRLqz 9+i50s8E05VCvjmMGDd3wfRLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfj+7GjJu wJpZuXR3vFClnZ+uilowHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCvBJIScORc1BJnaEQDy2wI16TVzyMQUA3ZREoNoC5A0dwYFNwSZrDG8URU7SRR +F2d3WNbI/0TFpGfc9nlmoHYG+t+aiQGQKUAPIURDxz3SYthFrIlglJkLMYWNQro SQxhfL3B0tZ8CTOu16hONaD4xYtAmx8addWF03CffVz/zeMZVKFi5fmx33CQyIX/ eDDezUvK1jmABtDgKOXi48JOdkhPEGGlIJXJyYY4dRISUVc/iJO+kPpkWzuc5pvo 1sEqGgEW1fV9ZgtuRskreicZtB2+Qbp1t0QpxYwSOM9FfSfJ3K2ug+S89RNJzvWb HAIQ1661k/gIa26V7TZ1NqfL -----END CERTIFICATE-----Generated at Thu May 21 10:15:12 2026 by rpki-client