$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft File: zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json) Hash identifier: xrQKPAG0FZdB0pdYG0E+wDAIBsfriSE91yesJrWBpCs= Subject key identifier: 33:5B:CA:26:EE:B3:6C:F2:5E:77:62:35:82:93:5D:9F:46:01:87:4B Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft Manifest number: 23 Signing time: Sat 13 Jun 2026 08:21:01 +0000 Manifest this update: Sat 13 Jun 2026 08:21:01 +0000 Manifest next update: Sat 20 Jun 2026 08:21:01 +0000 Files and hashes: 1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: 3nbkrqRaac7eJnzxm618WsetCCPYzxvOautCYzugBm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Validity Not Before: Jun 13 08:21:01 2026 GMT Not After : Jun 20 08:21:01 2026 GMT Subject: CN=6a2d12ed-eba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:fc:87:71:d6:01:5e:59:e0:1c:66:51:a8: 4a:cc:83:64:e8:3c:b8:4c:5c:3a:cd:d7:36:12:d1: fe:49:d2:6d:c4:89:7d:da:5b:ed:93:69:f0:14:49: c4:9c:8e:49:29:20:9b:f8:db:6a:00:ed:bb:db:38: b1:e1:5c:22:70:eb:52:3b:91:d3:74:67:55:f8:60: 0d:f5:43:3a:d4:85:e0:66:a0:58:a0:c8:ac:40:a9: 49:3d:66:f5:bf:12:cc:6e:99:37:1b:5f:dd:d4:9a: c8:7b:c7:d3:25:b0:ea:ff:82:57:15:25:84:fb:f2: 56:fd:9d:f1:8b:2d:e7:f6:36:33:78:65:d2:2c:bf: 11:f0:96:d7:93:41:15:56:03:90:6f:18:5a:5f:85: 1f:ab:8b:51:f1:05:a7:84:71:66:8a:5e:db:b5:f3: ec:a3:37:0e:5d:f3:c4:f0:44:61:72:82:5e:1b:d8: 3b:8a:a1:bd:f0:ba:85:95:2a:1e:16:99:e8:20:74: 92:7e:ed:71:29:60:91:c9:4d:5b:be:a8:f3:70:9c: 4e:0d:31:db:a9:94:d6:b0:45:62:9b:0e:99:29:51: 4c:0b:fb:82:6f:cb:21:d8:d5:f1:af:fc:f7:a5:f4: 5c:d4:28:39:c1:ba:24:15:c0:b6:30:7a:aa:12:89: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5B:CA:26:EE:B3:6C:F2:5E:77:62:35:82:93:5D:9F:46:01:87:4B X509v3 Authority Key Identifier: keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9d:c6:77:08:35:c2:78:cd:d6:8b:14:c3:7c:f8:d6:c5:7f: 1c:d6:f5:b7:7e:03:0a:db:10:32:05:40:09:2f:8c:ff:9c:7a: 57:7a:67:c0:57:f5:0f:82:9b:15:89:6b:18:fb:d9:9a:46:79: 29:79:3f:eb:a0:3f:f3:19:5b:f3:e7:0f:f2:4b:9f:36:11:42: 93:81:03:d5:fc:f2:62:34:e1:e6:dc:47:1b:40:78:64:53:f0: 67:53:d0:b4:b3:8a:60:99:c0:5c:a0:77:9a:e5:8e:9b:81:78: 42:42:cf:c3:b3:27:16:5e:93:ae:59:60:35:30:5b:e0:d7:8f: 55:1e:ca:69:8e:b1:8f:c4:7a:56:e3:aa:9e:fe:eb:21:5e:9a: 50:79:f7:a0:d4:42:48:7d:b8:19:fa:e7:18:d1:5a:07:10:4f: d1:2c:68:64:a5:07:fb:42:a6:65:dc:21:7c:5c:ab:53:f6:2c: 50:38:ba:45:6f:98:7c:d1:9b:5b:80:ea:e3:a3:af:2d:b5:53: ed:a8:29:d3:74:cf:7c:14:da:98:d5:c9:44:71:eb:68:62:57: ae:3c:bc:f4:01:a7:79:4e:72:1a:40:6b:68:9c:16:ab:38:62: 90:74:44:54:8f:b5:c7:3e:00:0f:6a:20:52:c5:af:1d:7d:fa: 9d:70:e2:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjM1ODExMC8GA1UEBRMoQ0RDMTMxODUwQTI1RjBDQ0RGQzlCOUI5Q0M4RUU2NEMz QUZBNkQwODAeFw0yNjA2MTMwODIxMDFaFw0yNjA2MjAwODIxMDFaMBgxFjAUBgNV BAMTDTZhMmQxMmVkLWViYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCS4PyHcdYBXlngHGZRqErMg2ToPLhMXDrN1zYS0f5J0m3EiX3aW+2TafAUScSc jkkpIJv422oA7bvbOLHhXCJw61I7kdN0Z1X4YA31QzrUheBmoFigyKxAqUk9ZvW/ EsxumTcbX93Umsh7x9MlsOr/glcVJYT78lb9nfGLLef2NjN4ZdIsvxHwlteTQRVW A5BvGFpfhR+ri1HxBaeEcWaKXtu18+yjNw5d88TwRGFygl4b2DuKob3wuoWVKh4W meggdJJ+7XEpYJHJTVu+qPNwnE4NMduplNawRWKbDpkpUUwL+4JvyyHY1fGv/Pel 9FzUKDnBuiQVwLYweqoSiTHjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM1vKJu6z bPJed2I1gpNdn0YBh0swHwYDVR0jBBgwFoAUzcExhQol8Mzfybm5zI7mTDr6bQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0M4RkQ4MDA0MzhB MjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16ZnlibTV6STdtVERyNmJR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNFeGhRb2w4TXpmeWJtNXpJN21URHI2YlFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC MzU4L0M4RkQ4MDA0MzhBMjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16 ZnlibTV6STdtVERyNmJRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhncZ3CDXCeM3WixTDfPjWxX8c1vW3fgMK2xAyBUAJL4z/nHpXemfAV/UPgpsV iWsY+9maRnkpeT/roD/zGVvz5w/yS582EUKTgQPV/PJiNOHm3EcbQHhkU/BnU9C0 s4pgmcBcoHea5Y6bgXhCQs/DsycWXpOuWWA1MFvg149VHsppjrGPxHpW46qe/ush XppQefeg1EJIfbgZ+ucY0VoHEE/RLGhkpQf7QqZl3CF8XKtT9ixQOLpFb5h80Ztb gOrjo68ttVPtqCnTdM98FNqY1clEcetoYleuPLz0Aad5TnIaQGtonBarOGKQdERU j7XHPgAPaiBSxa8dffqdcOKj -----END CERTIFICATE-----Generated at Sun Jun 14 00:54:40 2026 by rpki-client