$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: spRplyL2vCNQOH0dK9G2ZIvxpfeT0Uesx5PncK9fJbQ= Subject key identifier: 06:A3:89:56:86:26:F3:1E:F0:88:7A:2E:D6:FC:70:44:96:20:3A:00 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 0230 Signing time: Thu 21 May 2026 02:41:40 +0000 Manifest this update: Thu 21 May 2026 02:41:40 +0000 Manifest next update: Thu 28 May 2026 02:41:40 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: StXY0KGc2sr8Sp2H8ljSF9ZUgCoeiRz7Egmas8dgUaM=) 2: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) 3: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) 4: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: May 21 02:41:40 2026 GMT Not After : May 28 02:41:40 2026 GMT Subject: CN=6a0e70e4-9045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:cc:3b:c4:fb:e5:c0:e3:2c:0e:37:c6:98: ee:b9:ec:cd:e7:29:a8:06:19:7d:3e:f9:ad:98:26: a6:ee:cb:06:ed:f8:d6:0d:6c:0e:28:fa:79:d1:1b: cc:4d:32:35:44:18:bb:72:cb:a2:fb:e5:4c:68:d3: 2f:17:5f:bd:e0:2b:22:7e:d7:70:c5:65:68:54:d7: 4c:f7:0c:ad:b1:8c:d8:c6:04:fa:00:09:35:49:3d: db:a7:07:ee:c8:aa:1c:77:aa:16:5b:df:2b:af:c8: 38:4b:eb:4d:19:08:c1:c7:49:26:d3:ba:4b:f1:5e: fc:9e:66:35:e4:ab:bb:58:98:7a:a8:e3:c8:8f:aa: 88:2f:3d:4c:bb:fc:a9:b5:2d:24:c2:7e:3a:b6:c9: 3a:34:65:4d:c4:ae:58:26:a6:eb:1d:60:39:65:d0: 42:4b:fe:f2:4f:94:0e:37:dc:96:b6:14:ce:37:1a: 5b:56:c5:6d:6e:c2:9c:7f:b8:61:50:01:0f:b5:09: db:0e:29:4b:3f:0f:aa:28:92:01:32:4d:95:5c:54: 38:ab:04:14:71:52:17:ff:49:d1:65:ce:08:b4:8c: 38:e9:10:fb:51:c0:d5:0e:9a:86:58:31:b3:3d:02: d6:62:f3:d5:e8:c6:22:dc:da:aa:bc:9c:84:4a:29: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A3:89:56:86:26:F3:1E:F0:88:7A:2E:D6:FC:70:44:96:20:3A:00 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:e4:c9:3e:ed:35:4d:4b:0b:50:5a:aa:a3:ad:db:23:26: 77:d4:31:7f:06:f5:bb:bb:b7:e9:27:58:5b:98:ff:e2:e5:17: a3:37:e2:98:ae:f6:86:96:cd:9c:95:a1:5f:a1:b2:5f:38:88: cd:0b:e1:b3:92:2e:15:9d:52:fe:2a:b7:cf:f3:74:5f:52:10: 8c:04:d5:e0:ac:43:b0:d4:57:cf:ee:33:6b:36:06:8f:51:52: 87:c3:50:68:ab:0d:d9:52:49:6e:d1:40:80:fa:68:61:37:8e: 3b:64:1d:20:9c:e6:23:d5:f8:58:92:fc:54:83:b0:11:50:eb: a7:d9:10:9a:4d:7e:1a:53:31:42:ae:b0:3f:e8:00:23:da:04: 21:b3:50:e6:94:28:ed:c5:76:fb:38:28:29:df:3b:5b:9c:e5: 31:de:6e:39:92:0b:8e:df:bc:7b:28:58:fc:8b:a9:31:54:a7: 30:3c:53:da:38:4e:b5:ed:27:93:bf:a4:85:e1:d7:6a:2e:c3: 7d:da:33:61:40:64:eb:67:96:2d:82:63:9a:1c:31:08:ee:87: f2:b3:4c:74:02:71:4f:61:1c:1f:67:60:4d:cc:72:82:3a:11: 3d:c4:0e:6a:df:6a:de:38:ad:92:de:19:aa:68:d1:59:02:6d: 59:2b:1e:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYwNTIxMDI0MTQwWhcNMjYwNTI4MDI0MTQwWjAYMRYwFAYD VQQDEw02YTBlNzBlNC05MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoU/MO8T75cDjLA43xpjuuezN5ymoBhl9PvmtmCam7ssG7fjWDWwOKPp50RvM TTI1RBi7csui++VMaNMvF1+94CsiftdwxWVoVNdM9wytsYzYxgT6AAk1ST3bpwfu yKocd6oWW98rr8g4S+tNGQjBx0km07pL8V78nmY15Ku7WJh6qOPIj6qILz1Mu/yp tS0kwn46tsk6NGVNxK5YJqbrHWA5ZdBCS/7yT5QON9yWthTONxpbVsVtbsKcf7hh UAEPtQnbDilLPw+qKJIBMk2VXFQ4qwQUcVIX/0nRZc4ItIw46RD7UcDVDpqGWDGz PQLWYvPV6MYi3NqqvJyESinUlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAajiVaG JvMe8Ih6Ltb8cESWIDoAMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaynkyT7tNU1LC1BaqqOt2yMmd9Qxfwb1u7u36SdYW5j/4uUXozfimK72hpbN nJWhX6GyXziIzQvhs5IuFZ1S/iq3z/N0X1IQjATV4KxDsNRXz+4zazYGj1FSh8NQ aKsN2VJJbtFAgPpoYTeOO2QdIJzmI9X4WJL8VIOwEVDrp9kQmk1+GlMxQq6wP+gA I9oEIbNQ5pQo7cV2+zgoKd87W5zlMd5uOZILjt+8eyhY/IupMVSnMDxT2jhOte0n k7+kheHXai7DfdozYUBk62eWLYJjmhwxCO6H8rNMdAJxT2EcH2dgTcxygjoRPcQO at9q3jitkt4ZqmjRWQJtWSse+w== -----END CERTIFICATE-----Generated at Thu May 21 10:28:39 2026 by rpki-client