$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: C/FHaE8f+o7ufzqHjizavXQl7/sC2HLad7C8E4BIE4g= Subject key identifier: 23:9F:31:67:2E:65:65:D5:C2:00:F9:B9:5A:C7:43:C0:BB:94:97:CA Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 3166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 314C Signing time: Wed 20 May 2026 15:26:32 +0000 Manifest this update: Wed 20 May 2026 15:26:32 +0000 Manifest next update: Wed 27 May 2026 15:26:32 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: WvFGZb5i85Z1cXniMEYP2YsqnMgmJtXVQq8hXuaDC1k=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: uTzcih1KaqTWD5o3aEAbBRCjnKgSsq3hesblpLVQM8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12646 (0x3166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: May 20 15:26:32 2026 GMT Not After : May 27 15:26:32 2026 GMT Subject: CN=6a0dd2a8-4ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:e8:98:e3:a5:f6:bd:c5:8c:9f:bb:c2:d5: 22:3f:9e:92:d6:da:45:52:ed:16:0b:49:1a:1c:22: 36:ce:2a:23:42:9e:78:d4:ea:71:cd:94:90:bb:bd: c8:bb:13:21:16:61:85:fe:f7:c3:3d:25:64:84:34: 97:4d:40:e7:5a:fc:d7:a7:ba:ed:da:92:b8:f7:05: 9e:04:fc:9c:13:f3:60:e9:d5:5c:f6:25:a3:1d:2f: de:99:03:70:ac:97:09:7c:96:63:6c:3f:6d:a7:8c: 04:58:7e:aa:49:07:4e:a6:80:54:31:77:c8:bc:41: 69:c1:8d:1b:22:27:e1:99:4c:80:47:38:55:90:a1: 4d:97:a5:59:e8:43:ab:3e:65:d6:b0:15:85:45:b2: f4:e8:55:cd:af:ba:14:82:80:2c:55:7b:9d:69:77: b7:30:c2:0f:bf:cc:e0:1d:4e:53:eb:79:e2:c0:85: bf:f4:8e:cd:cd:0d:c0:c3:a3:69:f5:22:10:b2:8a: 2c:8c:a4:b7:99:99:37:43:ad:1d:0e:1b:88:4a:4f: de:7d:a9:76:64:c5:99:4d:0c:4a:7f:5d:00:4f:19: 54:ed:fa:d5:be:64:7e:83:79:c3:ca:ee:ab:90:42: 25:ba:34:57:e5:9c:11:b2:ea:05:a0:87:a2:db:f7: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:31:67:2E:65:65:D5:C2:00:F9:B9:5A:C7:43:C0:BB:94:97:CA X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:82:0d:28:d7:90:21:ce:da:ec:25:e6:dc:b1:9c:c2:5b: 7a:b8:36:4f:79:96:3c:b9:15:72:e2:83:95:b6:f7:9e:19:95: eb:d7:e5:5c:fa:a6:66:20:0d:6c:a6:45:66:fd:73:df:6a:39: d3:44:f1:35:73:35:9e:8d:8e:da:f0:eb:3b:a9:2f:75:ba:65: ce:0b:c8:29:5b:c6:87:11:4c:5b:6b:47:f4:91:02:b2:0e:20: 07:55:aa:36:90:ac:a5:e6:b8:d3:89:1a:91:0d:47:10:82:5c: 55:4e:8b:c5:31:86:b9:c0:7e:c8:4b:91:78:48:af:a9:cc:46: 61:c4:57:be:39:53:6e:f8:48:ea:26:af:e9:48:7c:77:26:a5: fc:6a:98:e8:35:af:42:98:4a:a0:7b:d5:9c:33:b6:6f:e1:07: aa:38:af:35:72:40:28:9b:04:da:5e:55:43:ce:1b:25:37:a6: 26:67:be:26:86:b4:2b:69:1d:e3:16:0d:bf:ca:9a:21:f6:92: bf:5b:7c:9d:81:b6:ca:6a:a4:7b:1e:24:bf:a8:4f:70:66:55: 7a:5c:bf:eb:17:18:34:6c:75:e5:0a:f9:49:81:04:f6:c8:82: 2b:ee:17:2e:8b:48:85:67:8d:35:4b:07:f7:0e:0d:3e:fd:7f: 75:57:a7:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjYwNTIwMTUyNjMyWhcNMjYwNTI3MTUyNjMyWjAYMRYwFAYD VQQDEw02YTBkZDJhOC00YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkuXomOOl9r3FjJ+7wtUiP56S1tpFUu0WC0kaHCI2ziojQp541OpxzZSQu73I uxMhFmGF/vfDPSVkhDSXTUDnWvzXp7rt2pK49wWeBPycE/Ng6dVc9iWjHS/emQNw rJcJfJZjbD9tp4wEWH6qSQdOpoBUMXfIvEFpwY0bIifhmUyARzhVkKFNl6VZ6EOr PmXWsBWFRbL06FXNr7oUgoAsVXudaXe3MMIPv8zgHU5T63niwIW/9I7NzQ3Aw6Np 9SIQsoosjKS3mZk3Q60dDhuISk/efal2ZMWZTQxKf10ATxlU7frVvmR+g3nDyu6r kEIlujRX5ZwRsuoFoIei2/e1AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOfMWcu ZWXVwgD5uVrHQ8C7lJfKMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHp6CDSjXkCHO2uwl5tyxnMJberg2T3mWPLkVcuKDlbb3nhmV69flXPqmZiAN bKZFZv1z32o500TxNXM1no2O2vDrO6kvdbplzgvIKVvGhxFMW2tH9JECsg4gB1Wq NpCspea404kakQ1HEIJcVU6LxTGGucB+yEuReEivqcxGYcRXvjlTbvhI6iav6Uh8 dyal/GqY6DWvQphKoHvVnDO2b+EHqjivNXJAKJsE2l5VQ84bJTemJme+Joa0K2kd 4xYNv8qaIfaSv1t8nYG2ymqkex4kv6hPcGZVely/6xcYNGx15Qr5SYEE9siCK+4X LotIhWeNNUsH9w4NPv1/dVenag== -----END CERTIFICATE-----Generated at Thu May 21 10:16:14 2026 by rpki-client