$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: FSnB13pvyQDzT6Scmozj6ZxeHkJEd9TUth6D4BTSb28= Subject key identifier: 1A:14:03:42:13:73:ED:21:31:5B:B6:68:BF:30:4F:1A:D7:62:99:3A Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02FD Signing time: Thu 23 Jul 2026 02:18:31 +0000 Manifest this update: Thu 23 Jul 2026 02:18:31 +0000 Manifest next update: Thu 30 Jul 2026 02:18:31 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: o7OwfToaO++C+EB2NY+nVL69t9Mi3oc8rHaCbNjyXrg=) 2: 2D554D1875B911F19160F3B762A30FBC.roa (hash: awvfykrSz6QoQMrBSUpkmUV2t8VsWMbwM0JMYPHRNiE=) 3: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 2sdmpYEclOMLpBPBQMRyf2bR5K+Znn8UXPaVbPG6E8g=) 4: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: 3ocK4Bfl3SbnaTMCj/lDw0pUXGryAmwBhjWzwEoz6ug=) 5: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: kcXC8wBP+o9JuaOs9TbOrSDUWgSogQuiEdXCi6dydEA=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: ZEuPiUQckZniRx9NOhZ6gYYx61mX4enZZWyGpfGF2y0=) 7: D21111C2190011F187AE9EA5203D8C67.roa (hash: QBY/KlIfl7r0REBMASrW8pgiV36TJqXHiWnzxZNFLi8=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jul 23 02:18:31 2026 GMT Not After : Jul 30 02:18:31 2026 GMT Subject: CN=6a6179f7-9fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:c4:08:27:bd:9a:e9:5d:5c:b8:52:25:93: c7:3d:b5:df:81:fa:51:4e:6b:93:a2:c3:61:f6:ce: 23:6b:cd:40:7f:06:49:ef:54:4c:94:2b:c6:26:82: a0:2d:f1:ea:89:10:f3:83:a5:53:7f:a6:81:d9:75: 48:01:9b:bd:f1:5e:39:35:b2:c8:24:f0:ec:cc:95: 56:1a:fd:c0:86:36:12:e3:bc:88:0d:43:c3:56:04: 56:59:38:1b:de:4d:b2:6e:bb:58:fa:a2:ba:ec:62: 27:6c:a6:95:b2:48:0f:0e:89:f5:35:ff:b4:34:ae: c6:98:61:90:6f:98:19:5a:1d:61:b2:11:34:5b:96: 46:39:1e:3c:08:ca:6c:72:d0:37:d6:33:1c:28:f8: 89:b0:33:cd:60:e3:1d:1c:39:96:16:32:8e:77:5b: c0:6e:03:cd:96:54:f1:71:7e:b0:11:73:93:f3:5c: 56:0e:e5:f0:35:f7:52:8a:97:9f:e8:a2:e6:ff:26: fb:40:31:6c:d3:e0:86:4c:93:93:8e:fc:ad:64:54: 22:b3:cc:9f:50:6e:00:63:43:e4:ac:d7:25:fe:5c: cc:e6:de:06:63:b0:ed:dc:7a:3e:d6:44:fd:8c:e0: ab:24:a8:da:e9:d1:09:9a:dd:4a:b5:89:2a:ba:93: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:14:03:42:13:73:ED:21:31:5B:B6:68:BF:30:4F:1A:D7:62:99:3A X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:de:53:40:0c:44:6c:18:5b:8d:8f:fc:31:82:15:bf:68:46: f9:34:3d:73:2f:04:cc:57:d6:d3:95:b6:88:55:74:2e:d5:84: 4f:bb:d7:ec:16:e6:ce:70:67:5e:4a:e2:a0:b9:14:46:8c:40: 22:c7:5d:1e:28:3f:18:08:d9:0f:4e:f6:bb:b8:90:37:40:ca: 5b:da:a6:1d:90:9f:90:82:35:00:2d:57:d3:df:38:ec:6b:ac: 67:51:30:dd:8a:f2:b0:29:9f:0c:70:5a:55:c8:a6:82:2a:76: 91:17:fd:07:e9:28:11:2b:2e:9a:10:64:a5:b9:c1:e7:85:bd: c7:ec:f5:7d:5e:c9:01:b7:f5:2b:47:df:2c:76:2a:a6:7d:95: 17:49:71:59:02:11:47:73:25:70:db:34:83:ac:53:ec:73:e6: 3b:8e:4c:34:fb:9f:74:20:f5:7a:c1:84:eb:da:64:58:ea:41: ed:a0:36:f5:a4:f0:ef:80:9d:e3:89:42:79:db:a7:ac:37:4d: 8c:8f:5e:bb:58:9c:3a:35:08:44:2a:2b:b7:8a:23:24:94:26: a2:d4:df:c2:2d:a0:4a:da:2b:59:85:d1:11:4b:9a:57:39:f0: 0d:90:30:4f:38:94:9a:b8:97:a7:6c:08:0b:d0:e0:1f:6a:9e: 9b:6b:11:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNzIzMDIxODMxWhcNMjYwNzMwMDIxODMxWjAYMRYwFAYD VQQDEw02YTYxNzlmNy05ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBDECCe9muldXLhSJZPHPbXfgfpRTmuTosNh9s4ja81AfwZJ71RMlCvGJoKg LfHqiRDzg6VTf6aB2XVIAZu98V45NbLIJPDszJVWGv3AhjYS47yIDUPDVgRWWTgb 3k2ybrtY+qK67GInbKaVskgPDon1Nf+0NK7GmGGQb5gZWh1hshE0W5ZGOR48CMps ctA31jMcKPiJsDPNYOMdHDmWFjKOd1vAbgPNllTxcX6wEXOT81xWDuXwNfdSipef 6KLm/yb7QDFs0+CGTJOTjvytZFQis8yfUG4AY0PkrNcl/lzM5t4GY7Dt3Ho+1kT9 jOCrJKja6dEJmt1KtYkqupMGeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoUA0IT c+0hMVu2aL8wTxrXYpk6MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQd5TQAxEbBhbjY/8MYIVv2hG+TQ9cy8EzFfW05W2iFV0LtWET7vX7BbmznBn XkrioLkURoxAIsddHig/GAjZD072u7iQN0DKW9qmHZCfkII1AC1X09847GusZ1Ew 3YrysCmfDHBaVcimgip2kRf9B+koESsumhBkpbnB54W9x+z1fV7JAbf1K0ffLHYq pn2VF0lxWQIRR3MlcNs0g6xT7HPmO45MNPufdCD1esGE69pkWOpB7aA29aTw74Cd 44lCedunrDdNjI9eu1icOjUIRCort4ojJJQmotTfwi2gStorWYXREUuaVznwDZAw TziUmriXp2wIC9DgH2qem2sR3Q== -----END CERTIFICATE-----Generated at Thu Jul 23 21:41:58 2026 by rpki-client