$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: Se8m8EBj6m31M/FZgfihNij1fjM/Smu3tYf5ukM6PzI= Subject key identifier: 44:A8:CC:8D:B6:0B:75:B6:C9:7C:03:8F:1D:BC:5C:B9:68:60:AB:27 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 256C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 254C Signing time: Thu 04 Jun 2026 15:45:10 +0000 Manifest this update: Thu 04 Jun 2026 15:45:09 +0000 Manifest next update: Thu 11 Jun 2026 15:45:09 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: eBjOKmgX+csJLV+Exz9f/fZlgrXdcXB9Gs2eBkvYeL4=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9580 (0x256c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jun 4 15:45:09 2026 GMT Not After : Jun 11 15:45:09 2026 GMT Subject: CN=6a219d86-c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1d:7e:d0:11:17:60:35:b7:f3:0f:58:e1:b8: eb:33:9b:9d:8e:51:1c:4a:41:65:86:05:a7:c0:f4: df:d4:bc:a9:1d:b1:c9:84:8a:78:b2:fc:b7:70:77: 58:5f:07:aa:c2:0e:de:82:e3:c7:b7:f9:56:a2:27: 88:1f:67:3e:ec:af:ee:3f:fe:d2:f2:f7:82:1d:a2: e4:7a:48:ec:20:e2:df:32:9b:e5:01:8d:d1:03:0c: da:1c:31:a2:db:e1:a3:22:9c:32:a9:00:c3:79:1b: fe:28:a5:0c:ec:a3:89:ed:27:0c:77:04:31:2c:0e: 08:3a:6f:43:94:b6:fd:a3:53:1c:1a:74:f1:a4:3f: d0:ca:2a:79:fa:df:56:58:1c:0e:68:37:5e:cb:18: 9b:99:4b:be:e5:ae:70:31:91:89:93:fc:55:78:27: 8f:bb:75:7d:03:e5:76:b5:a7:f0:7e:24:cd:b6:8c: 22:36:43:01:03:cd:ac:d2:04:66:55:3d:fa:de:d6: 3f:6c:ed:02:71:f4:6a:e6:9e:d0:b5:ec:06:33:88: f7:a9:66:3a:49:d7:68:8c:66:3c:08:76:be:0f:65: 22:24:6c:9f:74:cc:54:d4:88:d1:a6:98:36:af:c9: 22:b3:61:c6:e2:dd:28:33:88:8a:d7:09:09:e7:6b: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:CC:8D:B6:0B:75:B6:C9:7C:03:8F:1D:BC:5C:B9:68:60:AB:27 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fd:c5:10:8f:8a:be:44:52:f5:f6:67:93:a3:bc:0a:7e:30: 44:98:d2:82:5e:24:ad:c3:22:39:fd:ba:14:02:97:40:22:ff: 35:b9:42:75:21:ee:5a:0b:28:0e:1a:18:e9:61:40:f8:b2:fc: 41:2a:e8:0e:d3:5b:f6:93:49:55:7d:7e:fc:5a:b3:b4:e6:fa: bf:95:5d:62:56:1e:2b:c9:ff:5d:49:a7:c8:c7:e0:ff:a3:6e: 34:4d:c9:a1:09:4b:22:10:57:d3:f0:a8:49:b6:f4:0f:7c:7d: 34:b1:b6:4f:a6:ca:23:bc:62:0e:88:d7:e4:18:80:3a:4a:df: a2:0a:cb:6f:ce:af:e6:72:36:44:42:dd:ee:49:aa:b5:b2:a9: 7a:86:3a:4e:c2:49:40:3d:29:89:4d:8e:5d:da:10:9a:37:83: ff:d7:40:5d:3b:08:4d:c0:5d:e7:8a:a9:ff:41:b3:45:3d:e1: 9f:f9:81:76:c9:5d:1d:ad:65:e9:cf:ff:9a:3c:42:d8:29:22: dc:80:35:b5:34:48:97:c5:64:4f:d7:35:7c:ac:d7:6f:fd:dc: de:4f:b2:b9:32:26:a7:bf:23:4f:4d:e3:5d:9d:81:f3:04:93: 44:b5:5c:72:0e:ad:34:d1:1e:b1:00:aa:18:80:d3:c5:15:3e: e5:62:8d:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNjA0MTU0NTA5WhcNMjYwNjExMTU0NTA5WjAYMRYwFAYD VQQDEw02YTIxOWQ4Ni1jNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B1+0BEXYDW38w9Y4bjrM5udjlEcSkFlhgWnwPTf1LypHbHJhIp4svy3cHdY Xweqwg7eguPHt/lWoieIH2c+7K/uP/7S8veCHaLkekjsIOLfMpvlAY3RAwzaHDGi 2+GjIpwyqQDDeRv+KKUM7KOJ7ScMdwQxLA4IOm9DlLb9o1McGnTxpD/Qyip5+t9W WBwOaDdeyxibmUu+5a5wMZGJk/xVeCePu3V9A+V2tafwfiTNtowiNkMBA82s0gRm VT363tY/bO0CcfRq5p7QtewGM4j3qWY6SddojGY8CHa+D2UiJGyfdMxU1IjRppg2 r8kis2HG4t0oM4iK1wkJ52tgVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESozI22 C3W2yXwDjx28XLloYKsnMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJP3FEI+KvkRS9fZnk6O8Cn4wRJjSgl4krcMiOf26FAKXQCL/NblCdSHuWgso DhoY6WFA+LL8QSroDtNb9pNJVX1+/FqztOb6v5VdYlYeK8n/XUmnyMfg/6NuNE3J oQlLIhBX0/CoSbb0D3x9NLG2T6bKI7xiDojX5BiAOkrfogrLb86v5nI2RELd7kmq tbKpeoY6TsJJQD0piU2OXdoQmjeD/9dAXTsITcBd54qp/0GzRT3hn/mBdsldHa1l 6c//mjxC2Cki3IA1tTRIl8VkT9c1fKzXb/3c3k+yuTImp78jT03jXZ2B8wSTRLVc cg6tNNEesQCqGIDTxRU+5WKNeg== -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:33 2026 by rpki-client