$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: mjA220BU3RLywIqi1ZbhXMsoOZH7wWAcjH0A+yYPOic= Subject key identifier: F2:1C:D4:05:22:B7:39:D6:A9:30:4A:12:B1:DD:E7:D7:88:98:E9:18 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0995 Signing time: Wed 20 May 2026 20:02:03 +0000 Manifest this update: Wed 20 May 2026 20:02:03 +0000 Manifest next update: Wed 27 May 2026 20:02:03 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: 27PWiBgvfmGQQClv/wTJuZritH86oXA3gJp0yfbDhFE=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2474 (0x9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: May 20 20:02:03 2026 GMT Not After : May 27 20:02:03 2026 GMT Subject: CN=6a0e133b-3c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:9a:78:d9:ac:07:ec:c2:30:b3:ee:ca:28: 75:90:60:eb:b4:31:09:88:d5:61:00:49:97:ce:7a: 5f:00:ac:4e:03:4b:b5:81:d0:41:3e:f6:c4:41:ae: b2:09:d9:b7:d4:5b:24:f6:42:04:27:9c:55:41:74: aa:11:a1:a2:e0:6c:d2:3f:3d:6a:15:f2:74:d7:6f: 25:1e:e4:2a:d6:7f:6b:0e:d0:27:3b:e2:fe:c9:2c: 3d:43:1e:e4:a2:7a:c6:e4:ee:cc:4b:b2:11:d2:28: fd:08:33:0d:87:be:6d:b6:29:aa:c9:74:42:bd:fa: 65:57:3a:78:cf:90:1e:f7:bc:a7:5d:ae:5e:e6:1e: 70:c1:b8:4d:6b:64:67:7b:47:db:44:43:51:a9:07: fa:c5:ab:a7:7b:9d:88:43:24:b3:3c:2c:4d:59:ab: 5d:8a:e5:46:c8:a0:f8:6f:b8:b6:70:26:b1:8e:d4: 2e:13:9c:cb:e8:1b:7e:37:f9:35:20:41:d5:54:f4: f0:2e:b4:05:e9:69:34:d2:ae:45:11:69:70:4b:7a: 4a:bf:fb:c9:53:cd:35:da:ba:fa:59:42:1b:05:07: a8:b0:4a:e7:64:a7:dd:69:18:18:ce:c0:41:60:1e: f4:36:9d:2b:8b:3a:6c:4d:56:13:60:80:cb:69:39: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1C:D4:05:22:B7:39:D6:A9:30:4A:12:B1:DD:E7:D7:88:98:E9:18 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:38:ed:b0:5f:0e:9f:22:2a:12:e1:69:a4:63:cc:84:ab:63: df:56:77:b7:69:23:7f:ce:a8:3c:7b:3d:a6:a8:0b:dc:ba:e6: 7a:5d:cc:32:53:68:e1:c7:e9:29:01:67:63:c7:f3:2f:01:98: 33:13:a0:fa:5f:bc:e3:51:b0:f9:de:b5:6d:99:19:fc:77:05: 82:e6:29:53:12:bf:18:90:e1:8e:68:f8:40:cf:5b:0a:e8:2d: 4c:68:d1:e7:6c:ac:22:7f:03:2d:df:38:e8:d1:fd:35:f1:7d: 67:03:db:ac:c7:88:b1:87:29:96:2a:03:a2:49:3e:8d:db:0f: 0f:8e:c4:13:38:2f:a5:a7:16:9c:7b:47:2f:25:23:76:19:76: d7:4e:08:07:c4:2f:2e:8c:ae:0c:b3:fa:c7:56:c4:28:a1:6a: b3:4a:55:de:5d:ee:5d:0e:4f:1c:6c:e3:16:05:28:ab:05:09: 96:d6:41:a6:fd:82:2c:25:04:80:7d:cd:c2:39:37:6d:fa:9f: 9d:e3:85:6e:b4:4a:18:e0:57:41:2a:5e:01:f2:04:a9:47:5b: 79:11:95:03:54:42:6d:5e:50:59:ac:ba:44:73:e5:f8:c0:09: 0f:9e:0e:8f:32:4d:d5:31:b5:bf:1f:fa:aa:86:0b:25:db:e0: 15:70:ef:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwNTIwMjAwMjAzWhcNMjYwNTI3MjAwMjAzWjAYMRYwFAYD VQQDEw02YTBlMTMzYi0zYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYWaeNmsB+zCMLPuyih1kGDrtDEJiNVhAEmXznpfAKxOA0u1gdBBPvbEQa6y Cdm31Fsk9kIEJ5xVQXSqEaGi4GzSPz1qFfJ0128lHuQq1n9rDtAnO+L+ySw9Qx7k onrG5O7MS7IR0ij9CDMNh75ttimqyXRCvfplVzp4z5Ae97ynXa5e5h5wwbhNa2Rn e0fbRENRqQf6xaune52IQySzPCxNWatdiuVGyKD4b7i2cCaxjtQuE5zL6Bt+N/k1 IEHVVPTwLrQF6Wk00q5FEWlwS3pKv/vJU8012rr6WUIbBQeosErnZKfdaRgYzsBB YB70Np0rizpsTVYTYIDLaTn18wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIc1AUi tznWqTBKErHd59eImOkYMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIjjtsF8OnyIqEuFppGPMhKtj31Z3t2kjf86oPHs9pqgL3Lrmel3MMlNo4cfp KQFnY8fzLwGYMxOg+l+841Gw+d61bZkZ/HcFguYpUxK/GJDhjmj4QM9bCugtTGjR 52ysIn8DLd846NH9NfF9ZwPbrMeIsYcplioDokk+jdsPD47EEzgvpacWnHtHLyUj dhl2104IB8QvLoyuDLP6x1bEKKFqs0pV3l3uXQ5PHGzjFgUoqwUJltZBpv2CLCUE gH3Nwjk3bfqfneOFbrRKGOBXQSpeAfIEqUdbeRGVA1RCbV5QWay6RHPl+MAJD54O jzJN1TG1vx/6qoYLJdvgFXDvxA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:29 2026 by rpki-client