$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: LKka5V1VnV/b2x5RDEfemEmzkcvrHmorjMoju9adJBQ= Subject key identifier: 4F:4A:33:99:54:0C:60:AD:84:15:C3:8C:56:F5:A1:80:16:07:E9:59 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 0142 Signing time: Mon 01 Jun 2026 06:22:56 +0000 Manifest this update: Mon 01 Jun 2026 06:22:56 +0000 Manifest next update: Mon 08 Jun 2026 06:22:56 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: +ZNt10paMb3ItItltk/COJMzB1gSW2wPn3bMo2Af8qY=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) 3: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: cuURsbxNvtOqTd1FnCF2I2C85rcA4nGp1HY8p4P3GjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Jun 1 06:22:56 2026 GMT Not After : Jun 8 06:22:56 2026 GMT Subject: CN=6a1d2540-c740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:95:d2:7f:4d:22:9f:a1:70:1a:33:ad:5f: 0f:c8:89:70:c8:fe:f2:ff:7a:95:24:8c:40:98:7d: bd:ca:f4:ab:cf:0a:39:ef:1d:c8:6d:42:ab:08:65: 4b:61:b0:26:93:3c:28:bf:de:a6:82:31:33:e4:78: 08:d8:0f:5b:a3:fd:77:65:c3:21:cd:13:e8:75:26: 9e:8c:92:98:33:4d:bc:b3:26:f4:57:84:4c:ec:09: 14:a4:ed:42:17:f9:5f:fb:6c:27:07:64:b8:ba:9c: f8:02:7c:7c:0e:93:ae:20:6a:71:22:0e:87:8e:39: f8:b6:c4:28:c6:a1:4c:43:e3:df:6c:3d:31:3d:4c: 99:89:d5:ab:55:a2:3c:63:c0:7c:9e:65:02:04:ff: 58:d5:ef:fc:b2:d3:ff:47:83:15:16:7e:25:34:53: da:a6:4c:8a:38:bf:00:c9:29:ed:37:a2:1a:44:d9: 7e:2c:b1:03:d1:3a:24:29:97:de:3c:57:88:82:58: 65:e9:2e:68:06:f6:8c:6a:8b:2c:da:f3:bb:2a:e3: c6:6e:38:1e:e5:fe:4d:df:4d:7c:41:d4:6b:ad:7c: 13:56:84:7d:02:51:78:35:b6:00:be:af:c7:06:a7: 75:67:aa:c4:ad:d6:ef:4c:87:4c:1e:ed:2f:c7:b8: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4A:33:99:54:0C:60:AD:84:15:C3:8C:56:F5:A1:80:16:07:E9:59 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3a:cc:e6:06:be:db:88:5d:29:cd:90:41:d9:2f:15:b8:55: b1:bc:f6:19:44:c9:d9:42:7b:b3:b3:61:f0:2b:1b:fe:0c:b9: 67:bb:84:58:96:96:44:9e:56:77:f7:c2:28:71:4f:80:bd:fd: 9d:d9:5d:9e:06:72:74:9d:ec:11:37:e4:de:38:e7:7e:6f:bd: 12:dd:53:b9:23:d6:bc:88:ef:ba:33:0a:49:56:b9:32:a4:6b: 32:bb:d1:24:8c:a0:32:2b:62:dc:8c:4d:0a:ad:1f:5e:e1:41: 8c:d6:e0:d9:db:89:81:17:b2:8b:ec:8a:b2:8c:a0:09:c8:e9: 6c:f1:26:29:9a:cc:af:e8:4b:fa:1d:99:ae:b9:b0:c3:7c:5e: a7:2a:61:0b:05:33:2c:31:fe:2a:64:b2:fe:09:0f:f4:5f:25: 55:50:2e:a9:95:d7:9c:2a:de:fd:f9:f5:c8:4d:7c:3c:cd:11: be:bd:6c:4f:f1:57:ce:90:c0:87:69:66:67:ab:b9:70:29:4c: 5d:a7:32:1f:51:21:6d:3e:dd:99:b8:e5:cc:39:73:89:fe:02: 2d:31:d5:d0:f5:8e:8c:02:62:d9:0d:e4:03:bb:92:31:03:35: bf:95:de:0c:d3:cf:20:5d:3f:50:5f:b2:18:10:fb:8b:aa:15: 9c:89:d9:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYwNjAxMDYyMjU2WhcNMjYwNjA4MDYyMjU2WjAYMRYwFAYD VQQDEw02YTFkMjU0MC1jNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCuV0n9NIp+hcBozrV8PyIlwyP7y/3qVJIxAmH29yvSrzwo57x3IbUKrCGVL YbAmkzwov96mgjEz5HgI2A9bo/13ZcMhzRPodSaejJKYM028syb0V4RM7AkUpO1C F/lf+2wnB2S4upz4Anx8DpOuIGpxIg6Hjjn4tsQoxqFMQ+PfbD0xPUyZidWrVaI8 Y8B8nmUCBP9Y1e/8stP/R4MVFn4lNFPapkyKOL8AySntN6IaRNl+LLED0TokKZfe PFeIglhl6S5oBvaMaoss2vO7KuPGbjge5f5N3018QdRrrXwTVoR9AlF4NbYAvq/H Bqd1Z6rErdbvTIdMHu0vx7gkxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9KM5lU DGCthBXDjFb1oYAWB+lZMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAizrM5ga+24hdKc2QQdkvFbhVsbz2GUTJ2UJ7s7Nh8Csb/gy5Z7uEWJaWRJ5W d/fCKHFPgL39ndldngZydJ3sETfk3jjnfm+9Et1TuSPWvIjvujMKSVa5MqRrMrvR JIygMiti3IxNCq0fXuFBjNbg2duJgReyi+yKsoygCcjpbPEmKZrMr+hL+h2Zrrmw w3xepyphCwUzLDH+KmSy/gkP9F8lVVAuqZXXnCre/fn1yE18PM0Rvr1sT/FXzpDA h2lmZ6u5cClMXacyH1EhbT7dmbjlzDlzif4CLTHV0PWOjAJi2Q3kA7uSMQM1v5Xe DNPPIF0/UF+yGBD7i6oVnInZpw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:32 2026 by rpki-client