$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: mnf78ckqv8SzmhR4YvGKaLOS52taJhdx/Q6lef62hsM= Subject key identifier: 8B:30:6D:AC:AE:0E:F7:26:BA:45:B4:C2:AC:45:70:12:00:84:91:A4 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 0280 Signing time: Tue 23 Jun 2026 02:04:15 +0000 Manifest this update: Tue 23 Jun 2026 02:04:14 +0000 Manifest next update: Tue 30 Jun 2026 02:04:14 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: PvHOR865qgfGc/9b/eHXlFVof4TjIhDRnIYuiCPo8qg=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jun 23 02:04:14 2026 GMT Not After : Jun 30 02:04:14 2026 GMT Subject: CN=6a39e99f-556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:42:68:73:57:13:50:60:06:6d:89:85:fe:a7: 7a:31:50:db:bb:54:6d:7b:6b:85:78:e0:9e:e9:81: 9b:02:05:9a:42:20:29:23:bd:b2:1f:0c:2e:fb:68: 21:43:76:50:d0:6f:88:14:9d:ce:0a:1f:f7:d4:63: b9:08:ad:51:8e:e0:d5:4b:fb:bf:b9:69:2c:5b:92: ea:eb:18:47:a5:9c:3c:84:59:60:0e:10:cd:76:3d: 4a:d5:cd:bd:07:7e:d3:ec:82:25:0d:52:4c:fc:e5: a4:8c:27:27:2f:d3:7b:34:90:ce:4e:88:25:ca:e0: d6:3f:38:be:e3:18:16:ed:13:3d:55:65:a8:92:93: df:8b:8c:63:9c:e8:7e:4c:d1:ce:07:18:b5:63:10: f4:db:6d:e8:5b:08:1a:83:c6:d8:24:10:58:12:2c: 83:51:01:23:f8:64:fe:46:f7:e0:25:26:ae:42:19: fb:6a:4e:d0:6f:55:d4:37:79:17:af:c8:e5:08:8e: 16:4a:78:33:85:0a:49:5a:7b:fa:17:7e:c4:07:31: 62:33:70:d4:25:7e:35:e2:09:b8:14:60:85:f4:82: 8c:24:59:e4:9c:63:a7:bb:3f:85:96:ed:9e:8c:c7: dd:1c:44:72:ce:54:6b:f1:aa:90:05:fd:1a:0f:e1: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:30:6D:AC:AE:0E:F7:26:BA:45:B4:C2:AC:45:70:12:00:84:91:A4 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6d:d6:aa:e5:11:6c:1e:ca:f9:fa:37:62:d5:31:73:c9:92: 42:f0:25:27:94:2c:4c:82:23:c7:9d:e6:0b:77:37:6e:45:d4: f8:69:8e:b1:da:32:6a:fa:a2:ca:41:5d:6e:70:45:b4:87:5f: b4:b6:4d:41:9a:8d:01:ac:ec:d0:14:b7:31:1e:6b:83:d5:20: 6d:92:b5:79:15:13:a7:49:fc:ec:1d:1e:81:3a:e1:ec:bb:c5: 00:ff:d1:be:77:34:de:fc:11:8f:53:fa:a2:d3:da:2e:4a:fc: 99:49:22:a3:5b:c5:aa:5c:7f:38:87:45:0e:c6:c7:28:38:86: ce:88:66:fb:0b:a8:27:5d:a4:51:79:02:db:31:b6:fd:92:46: 41:28:f6:05:29:18:0f:35:f4:f4:7d:89:f8:56:41:ea:7e:7a: 6c:9a:ab:32:3c:5e:c9:ad:d7:7e:92:da:43:20:3e:53:f9:c2: d4:52:5d:f9:7b:e3:c1:1b:65:2f:8b:3d:86:a4:32:3d:66:73: eb:ce:d1:a6:f2:2d:fc:d4:23:41:57:f1:60:90:41:21:11:c3: 2b:74:a5:30:7b:4a:dc:bb:b7:b6:15:0f:2d:d9:c8:a9:c4:35: f0:06:b1:77:5f:0e:37:7b:a0:62:c7:cc:ec:43:29:cd:51:da: de:23:7b:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwNjIzMDIwNDE0WhcNMjYwNjMwMDIwNDE0WjAYMRYwFAYD VQQDEw02YTM5ZTk5Zi01NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kJoc1cTUGAGbYmF/qd6MVDbu1Rte2uFeOCe6YGbAgWaQiApI72yHwwu+2gh Q3ZQ0G+IFJ3OCh/31GO5CK1RjuDVS/u/uWksW5Lq6xhHpZw8hFlgDhDNdj1K1c29 B37T7IIlDVJM/OWkjCcnL9N7NJDOToglyuDWPzi+4xgW7RM9VWWokpPfi4xjnOh+ TNHOBxi1YxD0223oWwgag8bYJBBYEiyDUQEj+GT+RvfgJSauQhn7ak7Qb1XUN3kX r8jlCI4WSngzhQpJWnv6F37EBzFiM3DUJX414gm4FGCF9IKMJFnknGOnuz+Flu2e jMfdHERyzlRr8aqQBf0aD+FYDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIswbayu DvcmukW0wqxFcBIAhJGkMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbm3WquURbB7K+fo3YtUxc8mSQvAlJ5QsTIIjx53mC3c3bkXU+GmOsdoyavqi ykFdbnBFtIdftLZNQZqNAazs0BS3MR5rg9UgbZK1eRUTp0n87B0egTrh7LvFAP/R vnc03vwRj1P6otPaLkr8mUkio1vFqlx/OIdFDsbHKDiGzohm+wuoJ12kUXkC2zG2 /ZJGQSj2BSkYDzX09H2J+FZB6n56bJqrMjxeya3XfpLaQyA+U/nC1FJd+XvjwRtl L4s9hqQyPWZz687RpvIt/NQjQVfxYJBBIRHDK3SlMHtK3Lu3thUPLdnIqcQ18Aax d18ON3ugYsfM7EMpzVHa3iN7ow== -----END CERTIFICATE-----Generated at Wed Jun 24 11:24:39 2026 by rpki-client