$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: Y1sv+FF2W78iTqADEwTV4KVdtWq/c+lajkEB8oHFEys= Subject key identifier: C4:A8:EC:AA:05:85:5A:20:1A:EA:21:8D:90:5B:13:32:2F:48:9A:CE Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 09AD Signing time: Wed 20 May 2026 20:13:38 +0000 Manifest this update: Wed 20 May 2026 20:13:37 +0000 Manifest next update: Wed 27 May 2026 20:13:37 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: +wN9fNjtlis7Ap5db1Ka0eLgqjEOPcVNC7kBGm/nVQ0=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: May 20 20:13:37 2026 GMT Not After : May 27 20:13:37 2026 GMT Subject: CN=6a0e15f1-9be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:dd:96:fe:7d:8a:ce:03:27:a5:76:d2:10: 4f:ee:11:f9:04:4b:a6:cc:37:67:46:0b:ab:3c:12: 7d:84:48:dd:fe:07:3d:21:34:da:fc:59:c8:30:dd: 4c:c1:31:7f:55:07:d6:9b:33:f5:2f:8b:9f:83:35: 1a:94:05:cb:66:43:df:0a:49:e2:7c:55:e3:4f:ab: 36:81:6e:ef:4e:3a:66:39:5c:97:d4:36:a6:b0:b7: 0d:e0:e6:49:8f:66:c2:2a:ba:ad:2e:6e:cd:a7:a8: 57:a5:fb:dc:51:41:3e:b2:8e:a4:cb:2e:97:2c:e3: 9c:ab:c2:77:99:c2:c1:81:42:ff:a2:51:cc:15:93: d6:df:47:54:dc:84:92:5e:de:12:89:36:03:fc:35: bc:dd:ed:66:73:71:36:df:82:f8:f3:3b:78:84:fe: 7d:25:94:d8:a6:f5:a1:ec:b8:dd:a8:75:21:1c:5e: 69:87:52:8e:0f:52:21:ff:60:60:b5:6b:f7:5d:c6: e6:1f:c0:b6:a7:06:3a:9d:a6:b5:a8:7f:56:ac:38: 11:6b:82:0d:02:86:c1:3f:b2:e0:f9:4b:4c:ea:3f: b8:33:9b:27:dd:7f:68:7c:f4:90:9e:b8:9b:46:24: e9:03:82:72:61:b8:54:fe:4b:c1:48:c0:88:2d:91: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:EC:AA:05:85:5A:20:1A:EA:21:8D:90:5B:13:32:2F:48:9A:CE X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3e:4d:fd:39:3d:69:a8:37:de:1e:d7:13:87:90:49:f8:b5: 6c:bd:39:bd:fa:db:23:18:b6:d0:bf:b3:e0:a8:50:db:91:26: 7c:58:80:d5:5f:08:9d:11:93:d7:4a:79:ce:fa:f6:4d:47:6b: 46:6f:69:8f:bf:4a:55:a5:37:5b:52:71:88:0a:7f:20:bf:00: fb:03:b3:66:82:e4:eb:3e:72:c5:1f:3d:bd:d2:19:df:7d:3c: fb:63:7b:17:dc:c0:e0:77:b5:6c:7c:5a:cd:de:04:df:ab:9c: 02:ed:21:e7:6f:46:86:97:c6:61:e2:ff:90:b3:ed:84:af:52: b0:fa:2f:b6:cd:3e:61:ca:25:82:4a:92:d9:c3:69:aa:0a:ab: dc:d0:95:95:3c:b4:70:71:aa:85:a4:b4:33:3a:f1:6e:f8:19: e1:c7:59:e4:85:f2:71:54:fd:7c:3d:5d:24:4a:93:51:b2:6b: 36:c7:7a:51:1b:f2:e0:82:d5:09:d6:89:c3:49:6e:3d:d5:b1: e2:2b:49:e2:b1:01:7f:11:b4:b5:a6:e4:ce:4d:bc:ba:76:a2: f3:ef:f4:4e:57:37:e0:6e:e3:14:03:d3:6c:f4:63:c2:6d:7c: d1:b4:b7:c7:61:9c:9b:89:5e:f6:31:45:c8:f5:9a:1c:6b:1c: 2a:93:ed:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNjA1MjAyMDEzMzdaFw0yNjA1MjcyMDEzMzdaMBgxFjAUBgNV BAMTDTZhMGUxNWYxLTliZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwGN2W/n2KzgMnpXbSEE/uEfkES6bMN2dGC6s8En2ESN3+Bz0hNNr8Wcgw3UzB MX9VB9abM/Uvi5+DNRqUBctmQ98KSeJ8VeNPqzaBbu9OOmY5XJfUNqawtw3g5kmP ZsIquq0ubs2nqFel+9xRQT6yjqTLLpcs45yrwneZwsGBQv+iUcwVk9bfR1TchJJe 3hKJNgP8Nbzd7WZzcTbfgvjzO3iE/n0llNim9aHsuN2odSEcXmmHUo4PUiH/YGC1 a/ddxuYfwLanBjqdprWof1asOBFrgg0ChsE/suD5S0zqP7gzmyfdf2h89JCeuJtG JOkDgnJhuFT+S8FIwIgtkT5zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxKjsqgWF WiAa6iGNkFsTMi9Ims4wHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfPk39OT1pqDfeHtcTh5BJ+LVsvTm9+tsjGLbQv7PgqFDbkSZ8WIDVXwidEZPX SnnO+vZNR2tGb2mPv0pVpTdbUnGICn8gvwD7A7NmguTrPnLFHz290hnffTz7Y3sX 3MDgd7VsfFrN3gTfq5wC7SHnb0aGl8Zh4v+Qs+2Er1Kw+i+2zT5hyiWCSpLZw2mq Cqvc0JWVPLRwcaqFpLQzOvFu+Bnhx1nkhfJxVP18PV0kSpNRsms2x3pRG/LggtUJ 1onDSW491bHiK0nisQF/EbS1puTOTby6dqLz7/ROVzfgbuMUA9Ns9GPCbXzRtLfH YZybiV72MUXI9Zocaxwqk+2H -----END CERTIFICATE-----Generated at Thu May 21 11:04:02 2026 by rpki-client