$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft File: ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json) Hash identifier: kQhRkED7CBTy+6QE5iK91WHQz5+DiGgMajfXPBaxXy8= Subject key identifier: 8F:5D:D9:AB:E1:FC:32:20:A3:2E:16:D7:50:52:48:E2:64:12:08:6C Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 Certificate issuer: /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft Manifest number: 9F Signing time: Thu 21 May 2026 07:28:33 +0000 Manifest this update: Thu 21 May 2026 07:28:33 +0000 Manifest next update: Thu 28 May 2026 07:28:33 +0000 Files and hashes: 1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: sRMwjnhEZQC6BvXWCXdpongMnL7n9NXjflstebxqmcg=) 2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: tACDd5N+RFn6V8r5W3veEhQhFDtNDyDv0x3xjonY3ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74 Validity Not Before: May 21 07:28:33 2026 GMT Not After : May 28 07:28:33 2026 GMT Subject: CN=6a0eb421-fb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:81:18:d6:0a:4e:84:a9:d6:a3:1f:0c:ec: c7:24:23:a8:e3:11:87:9f:98:3d:16:0c:53:b7:10: e3:86:88:0b:e6:27:1e:21:f3:74:0e:c5:f7:fe:53: ef:96:f2:0a:77:1a:4b:c3:c8:69:0e:c0:82:ff:4a: ae:fe:9f:e2:33:92:3c:a8:7a:4c:0a:cd:23:81:ed: 53:a1:95:c3:74:50:11:85:3d:28:55:23:82:03:0a: b2:75:9a:cc:a6:db:28:2d:fb:51:d7:20:cf:29:f1: de:d4:d4:10:1c:5a:b5:1c:dc:8b:27:55:1b:c8:6a: 17:72:e6:ba:58:b8:38:f1:73:16:3e:1f:17:c7:87: bd:ec:ca:30:58:6b:ce:01:dd:ca:16:a3:c1:de:1c: 22:eb:cc:2a:66:62:fe:ad:f9:00:47:6c:c8:93:64: 00:df:e1:d9:3b:73:4f:04:f5:6b:4d:8a:68:5e:c0: 52:c1:7d:f2:da:ff:c6:c4:60:d4:db:2f:eb:97:68: 9d:d6:35:4c:23:dd:c2:50:d9:23:b1:b2:8e:60:8f: c5:fa:c3:0d:27:1d:8d:c9:20:8c:17:ce:75:e7:a2: 2a:ea:27:ba:0a:fd:35:e6:6f:eb:d3:b8:53:f1:8e: b6:e6:c6:62:4f:d7:e3:ba:78:0c:9a:7a:9c:ea:1d: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:D9:AB:E1:FC:32:20:A3:2E:16:D7:50:52:48:E2:64:12:08:6C X509v3 Authority Key Identifier: keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:97:5b:89:c7:cc:62:bb:b7:fa:31:5c:13:b6:df:1b:e0:08: ec:5d:99:7c:3e:56:d0:83:4e:85:32:fa:6e:82:89:54:6e:cf: 53:71:5e:83:cc:90:7e:20:4e:c9:fc:41:5e:d0:fd:17:2f:0f: 14:37:08:6c:eb:c7:a2:41:10:97:f6:b9:0f:d4:5d:1b:c0:6e: 63:2e:d3:4f:86:07:29:4d:fa:19:41:fb:0d:13:78:bf:4c:ef: 65:1c:c9:9d:3c:7a:c7:25:af:c5:6b:b2:ac:5c:92:51:57:12: a9:e8:03:86:84:58:d8:d8:12:bc:fe:bf:09:d3:7d:89:b3:35: 2c:9a:79:95:14:7d:16:0c:8e:0b:ab:65:6f:95:c9:4b:29:5c: 37:96:1d:9c:0e:83:f3:9e:58:fa:98:a0:e7:eb:69:4c:a7:ca: 8c:00:b4:f4:d7:c7:4a:21:50:d4:15:bc:64:70:62:58:f2:ff: 8f:eb:78:1d:e8:fe:5a:be:e2:d8:49:19:91:d0:b7:69:be:4f: b2:90:2f:b8:90:d3:84:8a:83:11:3b:dd:80:0d:53:af:81:a1: 25:e3:0c:73:c6:b4:cb:2b:ed:38:2d:fe:b7:6c:2a:40:4d:b0: d7:9f:ee:69:a0:b0:35:ed:d6:ae:d9:aa:2b:64:ae:1e:47:f6: 14:7a:11:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFRDUxMTAvBgNVBAUTKDY2NzgxNzlBNURBOEU1RTkxRTdEOURERkM5RkY1QjM1 NDNFRDRENzQwHhcNMjYwNTIxMDcyODMzWhcNMjYwNTI4MDcyODMzWjAYMRYwFAYD VQQDEw02YTBlYjQyMS1mYjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSqBGNYKToSp1qMfDOzHJCOo4xGHn5g9FgxTtxDjhogL5iceIfN0DsX3/lPv lvIKdxpLw8hpDsCC/0qu/p/iM5I8qHpMCs0jge1ToZXDdFARhT0oVSOCAwqydZrM ptsoLftR1yDPKfHe1NQQHFq1HNyLJ1UbyGoXcua6WLg48XMWPh8Xx4e97MowWGvO Ad3KFqPB3hwi68wqZmL+rfkAR2zIk2QA3+HZO3NPBPVrTYpoXsBSwX3y2v/GxGDU 2y/rl2id1jVMI93CUNkjsbKOYI/F+sMNJx2NySCMF85156Iq6ie6Cv015m/r07hT 8Y625sZiT9fjungMmnqc6h2xRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9d2avh /DIgoy4W11BSSOJkEghsMB8GA1UdIwQYMBaAFGZ4F5pdqOXpHn2d38n/WzVD7U10 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUVENS9BRkE0NjQ2NDY3 MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVla2VmWjNmeWY5Yk5VUHRU WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUVENS9BRkE0NjQ2NDY3MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVl a2VmWjNmeWY5Yk5VUHRUWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAopdbicfMYru3+jFcE7bfG+AI7F2ZfD5W0INOhTL6boKJVG7PU3Feg8yQfiBO yfxBXtD9Fy8PFDcIbOvHokEQl/a5D9RdG8BuYy7TT4YHKU36GUH7DRN4v0zvZRzJ nTx6xyWvxWuyrFySUVcSqegDhoRY2NgSvP6/CdN9ibM1LJp5lRR9FgyOC6tlb5XJ SylcN5YdnA6D855Y+pig5+tpTKfKjAC09NfHSiFQ1BW8ZHBiWPL/j+t4Hej+Wr7i 2EkZkdC3ab5PspAvuJDThIqDETvdgA1Tr4GhJeMMc8a0yyvtOC3+t2wqQE2w15/u aaCwNe3WrtmqK2SuHkf2FHoR5g== -----END CERTIFICATE-----Generated at Thu May 21 10:17:13 2026 by rpki-client