$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: BzTStEFR3HZXwyUrz9fhoZ4CP1PdsOJy/1SDPSlCjrU= Subject key identifier: 3E:AB:46:6E:94:71:58:66:E4:0B:34:D1:E0:EA:07:D3:3B:CA:4B:8A Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D3C Signing time: Wed 20 May 2026 18:06:48 +0000 Manifest this update: Wed 20 May 2026 18:06:47 +0000 Manifest next update: Wed 27 May 2026 18:06:47 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: ckENVtH2SVIIF7wVhXG34Sl91ZzvqYYt0FWjEZDz84I=) 2: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) 3: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: May 20 18:06:47 2026 GMT Not After : May 27 18:06:47 2026 GMT Subject: CN=6a0df838-f04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:d5:cb:90:36:a3:e3:c3:cf:b6:b5:82:03: 90:d9:05:12:b7:10:aa:25:52:d1:c2:9f:40:aa:7b: 8a:8a:c1:45:b9:7c:b5:5f:e0:7a:a2:b2:ef:ca:4d: 41:61:03:70:4a:ab:04:56:12:c8:b4:a2:21:4b:a9: 17:53:eb:ff:94:cd:d1:28:6a:35:90:2e:76:37:3e: ef:3e:23:9d:de:08:43:bb:82:99:bd:32:48:ce:0e: 65:3f:98:f3:b2:2e:4e:a0:9e:b2:c8:31:62:a4:11: e7:b6:4b:8e:64:9e:a1:10:7c:6b:5e:48:72:e9:12: b3:04:97:55:4a:4e:78:12:9a:c4:d7:f8:68:bc:96: 39:e6:6f:3c:0f:9c:db:3b:0a:ff:b5:21:a4:55:df: 58:ce:30:70:e2:d9:46:ec:07:b9:90:1e:1c:f5:b0: 9a:dc:11:12:c8:5f:78:9d:72:b1:64:74:b9:8d:21: f6:6d:28:2f:57:6c:ec:4e:85:b6:d2:87:3b:a7:86: a3:be:db:58:70:50:40:08:28:0e:50:cb:51:85:06: 48:5b:d2:50:c7:f3:99:cf:3b:80:74:89:e8:26:86: 82:38:84:d2:a7:73:30:27:9e:b7:8c:51:8e:b9:3f: 43:d9:bd:dc:77:a8:ff:c7:89:1d:c6:f2:43:eb:7f: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AB:46:6E:94:71:58:66:E4:0B:34:D1:E0:EA:07:D3:3B:CA:4B:8A X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bd:e2:45:5e:cc:70:43:50:f8:d8:db:ad:6b:a5:d0:81:93: bd:1b:f6:52:c4:cb:bc:60:58:9a:9f:45:b9:5a:5c:80:d6:c6: 94:7a:1e:29:6f:60:cd:8f:e1:a3:04:30:d5:9d:f7:3f:57:5d: e5:5d:c0:b9:1a:27:38:29:69:d6:be:c9:2c:c8:93:b2:d2:a2: a3:b6:43:78:ba:13:3b:46:f2:b0:31:55:60:69:41:d2:66:ff: 08:a0:02:f3:21:35:5f:8f:e8:ed:d9:d2:6e:d5:80:36:7a:fd: bc:f4:ea:67:c1:4f:68:42:67:c2:ce:5a:01:68:e4:25:5d:20: ff:55:24:89:8a:25:e8:a3:ed:f4:25:a8:9d:1e:1d:87:27:1c: 65:e0:e1:ec:e4:da:00:e1:6e:05:90:a3:cb:eb:04:ec:da:b7: ef:dc:4b:d3:86:54:8c:7d:6e:6f:4f:ab:c3:eb:df:12:f7:5e: de:fd:95:56:76:2e:6c:23:83:a9:14:44:71:61:3b:02:a7:d9: 5c:7c:32:2e:1f:74:f5:14:e8:a1:f8:1e:33:35:2f:8e:0a:32: 0a:f8:27:1d:e9:44:20:17:09:6d:a3:34:94:27:aa:ee:5b:76: 10:3f:b7:4f:85:ea:87:42:68:06:8b:d8:84:9b:ba:00:19:3b: 7e:9a:4b:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwNTIwMTgwNjQ3WhcNMjYwNTI3MTgwNjQ3WjAYMRYwFAYD VQQDEw02YTBkZjgzOC1mMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UXVy5A2o+PDz7a1ggOQ2QUStxCqJVLRwp9AqnuKisFFuXy1X+B6orLvyk1B YQNwSqsEVhLItKIhS6kXU+v/lM3RKGo1kC52Nz7vPiOd3ghDu4KZvTJIzg5lP5jz si5OoJ6yyDFipBHntkuOZJ6hEHxrXkhy6RKzBJdVSk54EprE1/hovJY55m88D5zb Owr/tSGkVd9YzjBw4tlG7Ae5kB4c9bCa3BESyF94nXKxZHS5jSH2bSgvV2zsToW2 0oc7p4ajvttYcFBACCgOUMtRhQZIW9JQx/OZzzuAdInoJoaCOITSp3MwJ563jFGO uT9D2b3cd6j/x4kdxvJD63+CbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6rRm6U cVhm5As00eDqB9M7ykuKMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjb3iRV7McENQ+NjbrWul0IGTvRv2UsTLvGBYmp9FuVpcgNbGlHoeKW9gzY/h owQw1Z33P1dd5V3AuRonOClp1r7JLMiTstKio7ZDeLoTO0bysDFVYGlB0mb/CKAC 8yE1X4/o7dnSbtWANnr9vPTqZ8FPaEJnws5aAWjkJV0g/1UkiYol6KPt9CWonR4d hyccZeDh7OTaAOFuBZCjy+sE7Nq379xL04ZUjH1ub0+rw+vfEvde3v2VVnYubCOD qRREcWE7AqfZXHwyLh909RToofgeMzUvjgoyCvgnHelEIBcJbaM0lCeq7lt2ED+3 T4Xqh0JoBovYhJu6ABk7fppLUA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:09 2026 by rpki-client