$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: TMB2wp676kdmMUKFgDJVeo6EB5uh1+ETpSqb18XX9tY= Subject key identifier: CE:B0:17:FB:12:15:B9:DE:07:F5:3C:EC:7C:1E:E0:D3:65:B2:C7:A4 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 08C5 Signing time: Wed 20 May 2026 20:26:13 +0000 Manifest this update: Wed 20 May 2026 20:26:12 +0000 Manifest next update: Wed 27 May 2026 20:26:12 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: N4NsunPr/lC0bXpu+V6UNwBvbJ4EAC/k+0PC/QvNrY8=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: May 20 20:26:12 2026 GMT Not After : May 27 20:26:12 2026 GMT Subject: CN=6a0e18e5-7d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:0f:fe:bf:ea:09:3c:47:f2:53:5c:44:98: a3:db:8f:12:88:87:df:aa:34:60:e6:54:85:7f:9f: 8a:47:c3:0f:6f:90:cb:90:85:3d:93:b7:41:0d:5b: 0f:f6:3d:f9:f4:d6:ff:86:82:4b:ad:6b:52:a4:d7: 2d:b7:85:aa:0f:8e:60:83:3a:65:19:1e:ca:36:71: 9d:a3:2c:a8:7c:c1:d5:24:3b:47:8f:85:55:36:90: ae:e8:a8:b5:a6:4e:d3:f8:b9:91:f1:ec:e5:90:64: 29:04:07:df:fd:ef:4e:ec:4c:ea:be:50:ac:bc:aa: d5:b8:07:44:b7:7f:33:14:a1:a6:a3:66:3e:eb:2c: af:ec:97:8d:38:0b:db:0a:94:51:0e:ab:81:17:b1: ab:71:0e:c7:94:47:2f:6f:53:fe:c7:62:e5:84:11: 1b:ce:89:2d:30:70:94:65:b4:62:ae:55:40:fe:a0: 7a:d8:c5:a4:bf:89:b4:d7:2e:6c:56:77:28:a6:91: b0:58:a9:c0:ed:b8:ad:18:2c:cd:cf:68:62:0b:86: fd:81:01:ea:69:91:68:64:dd:f3:84:ad:0a:22:62: 1d:2f:09:d4:88:18:26:a1:c7:c9:4a:ca:73:df:ff: 6d:46:8b:62:97:0d:41:8c:a9:6a:c7:50:45:c9:ef: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:17:FB:12:15:B9:DE:07:F5:3C:EC:7C:1E:E0:D3:65:B2:C7:A4 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a4:5a:89:2a:9f:5b:13:ea:bc:e7:6c:5f:f4:d6:94:7c:62: 71:40:21:7a:60:dc:93:80:69:c5:b9:93:17:34:eb:95:d8:75: 2b:4f:4e:a3:64:00:a1:4e:cf:d7:2a:da:1d:04:cc:02:1f:56: 34:4a:94:20:b0:e5:21:f1:3b:60:6a:dd:d4:61:a8:35:27:6b: 1a:31:fb:8a:9c:d5:72:e6:e8:05:fb:0a:0e:15:60:bf:86:32: cf:2d:00:c2:66:da:f9:b3:99:61:6c:84:31:cb:e3:1a:d9:20: 2e:b5:9e:1e:e2:5d:fe:7a:96:98:6d:06:78:c4:c4:d9:6a:d0: 1b:eb:68:58:87:95:a8:13:08:53:b0:61:59:94:14:8e:e6:f0: 82:03:be:ba:68:54:17:70:7e:3b:e4:65:48:25:c6:27:07:92: 6e:76:6b:3a:53:0d:1c:1a:23:ac:e2:e4:12:52:bc:a6:3f:e6: f0:1d:10:fb:ba:b0:18:44:1f:5f:fe:db:28:c1:b3:6c:7e:cd: 96:b3:cd:41:e6:6f:15:3f:1a:3f:b4:e1:23:ae:0a:25:01:1e: e4:f6:3a:3f:c2:04:93:8c:55:71:44:84:5a:90:61:b1:e2:8c: 2d:b6:14:c9:2a:34:c3:9b:63:62:b3:af:93:63:c7:c1:66:bb: ba:f0:85:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwNTIwMjAyNjEyWhcNMjYwNTI3MjAyNjEyWjAYMRYwFAYD VQQDEw02YTBlMThlNS03ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsokP/r/qCTxH8lNcRJij248SiIffqjRg5lSFf5+KR8MPb5DLkIU9k7dBDVsP 9j359Nb/hoJLrWtSpNctt4WqD45ggzplGR7KNnGdoyyofMHVJDtHj4VVNpCu6Ki1 pk7T+LmR8ezlkGQpBAff/e9O7EzqvlCsvKrVuAdEt38zFKGmo2Y+6yyv7JeNOAvb CpRRDquBF7GrcQ7HlEcvb1P+x2LlhBEbzoktMHCUZbRirlVA/qB62MWkv4m01y5s VncoppGwWKnA7bitGCzNz2hiC4b9gQHqaZFoZN3zhK0KImIdLwnUiBgmocfJSspz 3/9tRotilw1BjKlqx1BFye8QfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6wF/sS FbneB/U87Hwe4NNlssekMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV6RaiSqfWxPqvOdsX/TWlHxicUAhemDck4BpxbmTFzTrldh1K09Oo2QAoU7P 1yraHQTMAh9WNEqUILDlIfE7YGrd1GGoNSdrGjH7ipzVcuboBfsKDhVgv4Yyzy0A wmba+bOZYWyEMcvjGtkgLrWeHuJd/nqWmG0GeMTE2WrQG+toWIeVqBMIU7BhWZQU jubwggO+umhUF3B+O+RlSCXGJweSbnZrOlMNHBojrOLkElK8pj/m8B0Q+7qwGEQf X/7bKMGzbH7NlrPNQeZvFT8aP7ThI64KJQEe5PY6P8IEk4xVcUSEWpBhseKMLbYU ySo0w5tjYrOvk2PHwWa7uvCFbA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:03 2026 by rpki-client