$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: XPc31sGQKZfbdycY0PoT8qKSpy0MTtdCF7JAqncaVM8= Subject key identifier: 1A:4E:1A:6D:79:7C:8B:C5:84:FA:22:14:6F:1A:60:A2:10:80:44:CA Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 027B Signing time: Sat 13 Jun 2026 02:00:32 +0000 Manifest this update: Sat 13 Jun 2026 02:00:32 +0000 Manifest next update: Sat 20 Jun 2026 02:00:32 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: NBQ7TYzBYD74PaH/7A6fbplulkzZylh9U7auP1sk0xA=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jun 13 02:00:32 2026 GMT Not After : Jun 20 02:00:32 2026 GMT Subject: CN=6a2cb9c0-a38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:9f:e8:7d:cb:7b:e5:3b:d9:7c:85:3a:16: 7f:25:a8:6b:be:1d:07:07:60:ca:95:1c:24:0b:67: 40:c9:e0:bf:12:7e:9e:ad:b2:65:ea:91:68:c0:20: cf:e3:41:6d:0f:36:2f:dd:9d:bc:73:92:22:07:36: cf:fc:36:b8:69:30:35:6c:96:3e:d1:6b:81:36:f8: f2:df:dd:d0:d6:20:4d:94:9a:36:28:cd:39:5f:c4: c2:d7:12:cf:74:db:a7:b0:f6:0b:91:35:ea:a5:53: 2a:1b:37:e4:a1:9a:0e:e8:21:5c:0a:32:3e:fd:2c: 23:35:3d:34:9a:41:ba:54:2c:0f:dd:c5:da:d4:da: 22:eb:01:14:d6:50:ae:c1:99:a6:b3:23:c8:ee:7e: d9:29:8e:49:e1:a8:87:1f:37:27:4f:7d:91:85:02: 0d:cc:2f:9b:df:fd:4d:d3:fa:5f:4f:5a:20:6d:d8: 5f:89:42:aa:7b:64:37:0e:4d:7c:c4:ae:bc:be:cf: 85:1a:38:15:43:a9:62:9c:4e:a4:ef:29:33:62:b4: 23:c0:30:54:18:6a:9d:aa:5d:be:0b:06:2d:0c:dd: a3:0d:fa:28:1e:4b:3c:7a:74:07:0f:c7:02:71:b2: 2d:17:ba:79:c6:fe:e7:1a:9a:37:99:02:52:d5:c6: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4E:1A:6D:79:7C:8B:C5:84:FA:22:14:6F:1A:60:A2:10:80:44:CA X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1d:d9:e3:cd:8d:cd:fe:a6:99:f4:a7:43:53:70:97:0b:6f: b8:23:8d:ab:2e:ad:24:26:c5:c7:89:43:a0:20:5f:86:53:b4: a9:44:ad:f0:6f:e1:7c:77:d9:e2:1b:e6:76:35:e2:ae:05:c4: 76:a4:8e:f6:f1:a8:20:7e:6e:a1:21:ce:26:71:8f:43:bc:77: de:25:0a:08:4b:a2:07:28:c1:ed:af:c9:b2:3f:ec:0b:c2:2e: 53:4e:97:e3:5e:48:99:85:8e:a2:6b:ed:6b:c7:f0:0e:c8:d1: 60:49:90:39:e5:9d:36:0f:d1:68:b2:e1:4d:b4:6b:01:f7:91: 5c:f0:38:d2:02:10:3a:ca:44:98:54:42:d1:18:f4:bf:fb:42: 72:fe:3c:68:3c:34:48:fa:a7:ca:14:2e:52:46:02:5b:65:82: 57:43:47:52:48:59:b8:1f:e7:b0:62:45:4c:f8:9f:fe:ec:e0: 0c:e0:b7:2d:7a:7c:83:e2:39:db:ea:76:fb:59:55:d2:4c:1d: 0c:6a:e9:93:da:75:c9:e1:2b:60:b7:79:73:8a:fb:1b:e4:f1: 4c:7f:00:ec:52:85:7d:fd:fa:af:ef:93:e7:ca:6f:e1:c3:02: 4b:55:a9:a2:b9:71:38:99:e6:56:0c:98:85:aa:9c:1a:dc:4d: cd:0b:88:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwNjEzMDIwMDMyWhcNMjYwNjIwMDIwMDMyWjAYMRYwFAYD VQQDEw02YTJjYjljMC1hMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXmf6H3Le+U72XyFOhZ/Jahrvh0HB2DKlRwkC2dAyeC/En6erbJl6pFowCDP 40FtDzYv3Z28c5IiBzbP/Da4aTA1bJY+0WuBNvjy393Q1iBNlJo2KM05X8TC1xLP dNunsPYLkTXqpVMqGzfkoZoO6CFcCjI+/SwjNT00mkG6VCwP3cXa1Noi6wEU1lCu wZmmsyPI7n7ZKY5J4aiHHzcnT32RhQINzC+b3/1N0/pfT1ogbdhfiUKqe2Q3Dk18 xK68vs+FGjgVQ6linE6k7ykzYrQjwDBUGGqdql2+CwYtDN2jDfooHks8enQHD8cC cbItF7p5xv7nGpo3mQJS1cZyqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpOGm15 fIvFhPoiFG8aYKIQgETKMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZB3Z482Nzf6mmfSnQ1NwlwtvuCONqy6tJCbFx4lDoCBfhlO0qUSt8G/hfHfZ 4hvmdjXirgXEdqSO9vGoIH5uoSHOJnGPQ7x33iUKCEuiByjB7a/Jsj/sC8IuU06X 415ImYWOomvta8fwDsjRYEmQOeWdNg/RaLLhTbRrAfeRXPA40gIQOspEmFRC0Rj0 v/tCcv48aDw0SPqnyhQuUkYCW2WCV0NHUkhZuB/nsGJFTPif/uzgDOC3LXp8g+I5 2+p2+1lV0kwdDGrpk9p1yeErYLd5c4r7G+TxTH8A7FKFff36r++T58pv4cMCS1Wp orlxOJnmVgyYhaqcGtxNzQuIDg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:14:55 2026 by rpki-client