$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: y0ddhg8XvfA6MIbEmhGxjbekNtZaulJfNiE48oHh7cY= Subject key identifier: E3:F0:E7:A5:EA:BF:9B:37:86:15:BA:C5:7A:AD:28:E8:08:E5:97:1B Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0CF1 Signing time: Wed 20 May 2026 18:18:44 +0000 Manifest this update: Wed 20 May 2026 18:18:44 +0000 Manifest next update: Wed 27 May 2026 18:18:44 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 1wRV/XH9m5URwheq/HsMtGqJPNVE0iIb40Sw+ssXiBo=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: meOvUnI6mZjXF6pHdFTMnP3Ln7ggpvg5+mk6tSp8zNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: May 20 18:18:44 2026 GMT Not After : May 27 18:18:44 2026 GMT Subject: CN=6a0dfb04-a4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:4c:9a:1e:fb:50:57:1e:7a:60:99:57:de: f3:b6:a6:93:98:c5:dd:04:59:da:67:ab:b1:a9:d6: 90:09:96:a8:5e:96:98:f1:27:4e:11:2d:80:b6:eb: 8e:f2:d0:c2:fa:cd:07:07:89:6c:86:7d:f1:1b:b0: 15:2d:0d:54:e9:12:e0:65:60:8c:23:6a:cb:59:45: 4d:32:9c:bf:5c:5f:f2:f6:55:70:ff:f9:d7:5d:3e: e9:ef:a0:10:a7:c1:81:dc:4b:c3:52:75:8b:54:76: 56:c1:1b:bb:2e:ce:f0:fe:b4:01:21:17:8d:5a:3f: d6:d1:63:cc:b5:83:99:fe:3b:82:25:eb:6d:5d:6b: 1a:26:a6:5c:4d:52:0d:66:3b:bb:3f:4f:1c:5a:9d: 3d:ea:e5:f4:bf:e5:8c:11:ae:41:08:1f:e7:ea:48: 53:b4:e9:41:a6:ab:e9:15:9e:5b:b4:9e:1a:59:1f: c8:6a:6b:db:dd:87:7e:85:c8:b9:83:50:e4:28:7a: 2c:f1:9e:c6:3c:92:8a:2d:d6:1d:c7:d5:5a:9b:ed: 58:04:e6:d8:d8:e7:93:a6:8a:39:62:68:ea:f8:48: 06:1a:09:9b:e6:b8:6f:5b:a4:0c:02:35:28:80:62: 63:1d:95:5d:26:0e:4a:b5:44:f6:b1:f3:a1:2e:29: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:E7:A5:EA:BF:9B:37:86:15:BA:C5:7A:AD:28:E8:08:E5:97:1B X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c1:f0:63:69:b3:4e:e0:a3:cb:75:c1:74:4c:19:4f:cf:41: 3a:ac:60:e1:2f:23:56:3c:28:e4:c4:6d:75:99:7e:c2:a2:d7: ae:30:ee:b7:a0:75:ff:9f:be:88:cc:93:f0:87:5c:f5:66:c3: 91:39:24:f9:70:da:ba:07:c2:9e:46:eb:80:a1:6a:8b:fa:f3: 57:5e:af:a4:07:0e:8c:e5:e9:62:e7:33:d5:16:a8:37:6e:5b: 35:29:f5:85:56:6e:57:c9:e4:d3:cc:d9:b1:2a:53:78:e8:0f: 13:0a:52:8f:af:d5:01:cc:eb:00:04:3c:3c:8a:7f:34:f6:84: c3:bb:c6:5f:7d:17:86:df:7e:22:6d:c6:fe:37:61:5d:d4:b5: b9:76:2d:1a:a7:5c:17:b8:17:00:29:95:5d:ad:4e:77:ea:d0: 8e:0b:94:f2:cb:32:59:2b:4a:b7:ff:81:84:a1:ec:f6:5c:99: 84:f7:e7:70:06:4c:49:bc:e8:68:39:08:ca:19:00:eb:94:4b: d8:2b:38:b3:16:4f:73:bf:3d:99:e2:5c:e4:9c:dd:7f:5f:42: bc:88:d5:a3:49:92:f7:d1:81:18:e3:7c:e4:a9:23:a3:8a:28: 88:da:ea:d5:f2:fe:0c:18:d7:60:93:84:5d:e5:f3:18:5a:b5: 45:cc:1d:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjYwNTIwMTgxODQ0WhcNMjYwNTI3MTgxODQ0WjAYMRYwFAYD VQQDEw02YTBkZmIwNC1hNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdBMmh77UFceemCZV97ztqaTmMXdBFnaZ6uxqdaQCZaoXpaY8SdOES2AtuuO 8tDC+s0HB4lshn3xG7AVLQ1U6RLgZWCMI2rLWUVNMpy/XF/y9lVw//nXXT7p76AQ p8GB3EvDUnWLVHZWwRu7Ls7w/rQBIReNWj/W0WPMtYOZ/juCJettXWsaJqZcTVIN Zju7P08cWp096uX0v+WMEa5BCB/n6khTtOlBpqvpFZ5btJ4aWR/Iamvb3Yd+hci5 g1DkKHos8Z7GPJKKLdYdx9Vam+1YBObY2OeTpoo5Ymjq+EgGGgmb5rhvW6QMAjUo gGJjHZVdJg5KtUT2sfOhLin5aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPw56Xq v5s3hhW6xXqtKOgI5ZcbMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhcHwY2mzTuCjy3XBdEwZT89BOqxg4S8jVjwo5MRtdZl+wqLXrjDut6B1/5++ iMyT8Idc9WbDkTkk+XDaugfCnkbrgKFqi/rzV16vpAcOjOXpYucz1RaoN25bNSn1 hVZuV8nk08zZsSpTeOgPEwpSj6/VAczrAAQ8PIp/NPaEw7vGX30Xht9+Im3G/jdh XdS1uXYtGqdcF7gXACmVXa1Od+rQjguU8ssyWStKt/+BhKHs9lyZhPfncAZMSbzo aDkIyhkA65RL2Cs4sxZPc789meJc5Jzdf19CvIjVo0mS99GBGON85Kkjo4ooiNrq 1fL+DBjXYJOEXeXzGFq1RcwdJw== -----END CERTIFICATE-----Generated at Thu May 21 10:14:39 2026 by rpki-client