$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: 7b5UA73IZknt02Q5gLHT3tpTpnHXOQnfQInoV7RH9v0= Subject key identifier: 02:5B:EA:0F:89:EC:A2:FE:A8:41:5A:AC:83:1B:D1:98:4F:83:16:24 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: A9 Signing time: Thu 23 Jul 2026 09:04:48 +0000 Manifest this update: Thu 23 Jul 2026 09:04:48 +0000 Manifest next update: Thu 30 Jul 2026 09:04:48 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: tkX7PXa3/PB7PooFdQ3bzYTiPoKeCsv5kgfkal+SOiY=) 2: 995A12922D7911F185835B6B93833773.roa (hash: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=) 3: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 4: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Jul 23 09:04:48 2026 GMT Not After : Jul 30 09:04:48 2026 GMT Subject: CN=6a61d930-2391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:59:2d:4d:23:48:46:49:7e:20:e3:b6:49: 77:17:c2:86:03:ab:9f:10:ff:10:95:5a:a7:61:79: d9:89:d5:57:19:48:97:9a:77:c4:70:10:c8:92:6d: b9:bc:83:8c:11:98:d8:2e:6e:a2:64:d6:e1:86:d9: 7d:bc:e7:3d:53:b5:9f:4a:d1:a6:36:af:d2:85:e3: 58:0c:61:65:c2:0b:e5:1d:07:2b:b6:43:f4:87:d0: 2e:3e:fc:f7:b8:0e:55:93:e5:9f:f4:c9:5e:24:b5: 72:4d:57:b9:fb:e5:1e:de:f3:c1:e4:3f:3b:44:ef: 62:8f:88:8b:a0:1c:4f:b6:f4:82:f4:aa:1b:65:02: 9e:17:08:c4:80:5a:f7:4d:75:cd:7e:a0:fa:23:0b: 06:b1:93:44:bf:e6:02:40:54:ba:bd:83:84:a8:89: 48:47:05:29:ec:81:ff:6e:87:20:a6:50:ea:12:e1: 55:5b:c4:f2:81:a1:b3:d6:86:bc:a9:79:81:4f:6f: 0b:6e:df:3d:56:c8:e7:2d:3b:ad:22:c0:05:ed:d9: a0:7f:f8:09:a2:f7:42:af:c9:06:fd:df:82:10:18: 1e:d0:e9:49:60:89:3e:d9:36:29:ae:49:06:64:08: f2:05:d8:c9:3e:b3:51:14:0b:ff:ef:7f:dd:98:c0: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:EA:0F:89:EC:A2:FE:A8:41:5A:AC:83:1B:D1:98:4F:83:16:24 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:80:cc:5b:37:9d:77:74:ea:9d:d3:a5:78:37:f6:57:ae:23: 44:2e:9c:ad:e0:40:65:c4:6e:ca:f5:8a:47:a3:3f:23:3f:d0: 0b:a4:43:36:c3:06:ff:02:86:f2:d9:20:4b:39:79:6b:8a:38: ec:69:11:c3:4c:e8:3f:e6:e9:76:fe:1b:f3:46:e5:0d:71:0d: 70:45:13:e1:ee:71:5b:b0:24:80:7e:a5:9a:c9:f6:5d:d5:ec: f6:74:75:87:69:74:bf:a1:f7:f8:38:b6:f1:74:ee:52:2c:9c: 3a:4d:05:63:5c:0a:1a:f3:d7:64:53:76:b9:ba:86:64:8f:68: cc:90:ae:51:e5:78:6a:17:cf:b0:7d:d0:e8:e6:ee:2a:b0:a7: f2:cb:95:d3:a9:85:67:2f:34:46:80:97:48:97:7d:06:f8:39: e3:62:41:39:11:d9:78:44:19:e6:ae:23:9a:45:b2:0b:f4:f2: e2:95:36:b2:ff:67:2d:21:f6:98:62:08:0e:d8:9a:dc:b9:74: ea:f5:e6:eb:06:f1:95:5c:c6:01:44:c9:a6:bd:24:8a:f5:bb: 29:8e:e5:bb:ae:44:e8:aa:71:01:28:05:e7:55:31:86:e1:53: 32:92:12:b6:44:68:7b:f4:e7:ce:52:38:01:9c:66:3a:ed:68: fb:cf:57:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYwNzIzMDkwNDQ4WhcNMjYwNzMwMDkwNDQ4WjAYMRYwFAYD VQQDEw02YTYxZDkzMC0yMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgRZLU0jSEZJfiDjtkl3F8KGA6ufEP8QlVqnYXnZidVXGUiXmnfEcBDIkm25 vIOMEZjYLm6iZNbhhtl9vOc9U7WfStGmNq/SheNYDGFlwgvlHQcrtkP0h9AuPvz3 uA5Vk+Wf9MleJLVyTVe5++Ue3vPB5D87RO9ij4iLoBxPtvSC9KobZQKeFwjEgFr3 TXXNfqD6IwsGsZNEv+YCQFS6vYOEqIlIRwUp7IH/bocgplDqEuFVW8TygaGz1oa8 qXmBT28Lbt89VsjnLTutIsAF7dmgf/gJovdCr8kG/d+CEBge0OlJYIk+2TYprkkG ZAjyBdjJPrNRFAv/73/dmMDkWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJb6g+J 7KL+qEFarIMb0ZhPgxYkMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWIDMWzedd3TqndOleDf2V64jRC6creBAZcRuyvWKR6M/Iz/QC6RDNsMG/wKG 8tkgSzl5a4o47GkRw0zoP+bpdv4b80blDXENcEUT4e5xW7AkgH6lmsn2XdXs9nR1 h2l0v6H3+Di28XTuUiycOk0FY1wKGvPXZFN2ubqGZI9ozJCuUeV4ahfPsH3Q6Obu KrCn8suV06mFZy80RoCXSJd9Bvg542JBORHZeEQZ5q4jmkWyC/Ty4pU2sv9nLSH2 mGIIDtia3Ll06vXm6wbxlVzGAUTJpr0kivW7KY7lu65E6KpxASgF51UxhuFTMpIS tkRoe/TnzlI4AZxmOu1o+89XWQ== -----END CERTIFICATE-----Generated at Fri Jul 24 18:13:29 2026 by rpki-client