$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: tCuTnZmom+CXP51qQK74XhSZoZPsAze/aMIE6KRgvtE= Subject key identifier: F3:E3:35:FA:DF:C4:E8:A2:A5:20:3C:EB:C3:FB:14:F7:B7:2E:A4:35 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1240 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1205 Signing time: Wed 22 Jul 2026 17:15:52 +0000 Manifest this update: Wed 22 Jul 2026 17:15:51 +0000 Manifest next update: Wed 29 Jul 2026 17:15:51 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: JmaDn0I7HqzvGtd6FqrKikLm/BAdbNhxMLnJ7MKJD1E=) 2: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: 8sR59Lp6fQc79JgAgqC1t1+yUKy4/xiWteMrpfGnLFs=) 3: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) 4: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Jul 22 17:15:51 2026 GMT Not After : Jul 29 17:15:51 2026 GMT Subject: CN=6a60fac7-f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:62:96:05:5a:1b:bc:91:0d:04:ad:b8:bb: f2:b9:44:f4:dc:91:78:69:d2:5d:be:e8:af:b8:f5: 9b:6f:b1:43:1d:e7:80:15:de:30:43:3f:80:06:42: 34:9e:bd:62:d5:70:c6:60:d5:cc:5b:d8:d1:91:0e: dd:53:33:16:09:43:c3:ee:79:fe:0f:64:a6:30:e8: 5e:1f:e2:d4:06:54:f2:a9:ba:1b:43:7e:18:be:1a: f6:24:85:f9:a9:2b:90:78:5c:4d:07:0b:e4:aa:d7: 8c:ab:48:2a:f2:bd:b6:94:e6:c8:46:08:f7:e2:d3: 13:5f:4d:0f:b7:c9:02:f2:94:13:16:b5:76:2a:ce: b7:7b:18:69:15:d4:0d:99:3a:e4:67:56:68:1a:18: b8:b4:41:da:9d:dd:4b:f7:25:69:d8:b6:d0:8c:93: 6e:c8:e3:e6:f6:7b:19:93:b3:4f:14:77:f2:aa:a9: 88:21:93:c9:01:56:8d:c2:d6:7f:4c:57:9c:06:84: 02:6c:d4:e7:c8:8a:c3:dc:e0:c9:22:45:2d:2f:36: 14:f7:9a:c0:8b:1e:21:80:29:92:e5:f5:af:81:b7: f4:60:cb:01:72:85:f1:8f:d1:a6:50:b3:17:85:46: 1e:c3:22:b8:b0:4c:5d:12:e7:2f:7b:31:ca:26:2f: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E3:35:FA:DF:C4:E8:A2:A5:20:3C:EB:C3:FB:14:F7:B7:2E:A4:35 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f1:36:34:21:ac:0a:a2:34:df:a0:8f:6f:a4:35:56:db:1a: ac:4f:5f:c7:7d:22:a9:f3:67:bb:fb:4a:37:b3:58:0e:94:5e: 33:83:0b:e8:7b:21:07:f5:9f:2d:1a:e9:96:43:e8:9b:e1:92: 89:bd:ef:d2:50:52:85:c6:7f:7f:06:c3:7e:af:25:74:41:06: 12:2d:a1:76:80:5b:4b:8b:1f:85:a1:ad:2d:c2:94:d4:5e:2a: 6e:a5:4d:33:45:32:ee:cc:83:39:00:e8:41:7c:13:1b:8c:a7: 5a:2c:65:3f:79:df:43:e8:63:7d:8f:5e:70:08:b1:2d:39:49: 07:02:8b:69:a1:9c:72:6f:1b:3b:41:4b:85:8b:d6:05:a0:6f: b2:3b:4b:e6:5d:e7:80:ca:b2:95:de:3a:0d:6d:c1:bf:d6:b0: 37:04:f1:32:d2:e7:da:86:03:ad:fe:97:60:f9:c3:e4:c6:6f: 8b:a1:53:61:3e:0c:93:98:f4:27:97:76:24:dd:db:ca:8b:18: eb:16:5b:f4:41:9b:6b:00:c3:ed:3c:54:0e:19:53:bf:42:37: 43:37:12:66:38:6d:ed:c6:20:82:9a:19:7b:68:8d:45:b3:40: 78:7f:53:69:90:4d:06:65:ae:de:ef:19:65:29:2c:e2:34:91: 30:71:8c:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwNzIyMTcxNTUxWhcNMjYwNzI5MTcxNTUxWjAYMRYwFAYD VQQDEw02YTYwZmFjNy1mOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd5ilgVaG7yRDQStuLvyuUT03JF4adJdvuivuPWbb7FDHeeAFd4wQz+ABkI0 nr1i1XDGYNXMW9jRkQ7dUzMWCUPD7nn+D2SmMOheH+LUBlTyqbobQ34Yvhr2JIX5 qSuQeFxNBwvkqteMq0gq8r22lObIRgj34tMTX00Pt8kC8pQTFrV2Ks63exhpFdQN mTrkZ1ZoGhi4tEHand1L9yVp2LbQjJNuyOPm9nsZk7NPFHfyqqmIIZPJAVaNwtZ/ TFecBoQCbNTnyIrD3ODJIkUtLzYU95rAix4hgCmS5fWvgbf0YMsBcoXxj9GmULMX hUYewyK4sExdEucvezHKJi814wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPjNfrf xOiipSA868P7FPe3LqQ1MB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR/E2NCGsCqI036CPb6Q1VtsarE9fx30iqfNnu/tKN7NYDpReM4ML6HshB/Wf LRrplkPom+GSib3v0lBShcZ/fwbDfq8ldEEGEi2hdoBbS4sfhaGtLcKU1F4qbqVN M0Uy7syDOQDoQXwTG4ynWixlP3nfQ+hjfY9ecAixLTlJBwKLaaGccm8bO0FLhYvW BaBvsjtL5l3ngMqyld46DW3Bv9awNwTxMtLn2oYDrf6XYPnD5MZvi6FTYT4Mk5j0 J5d2JN3byosY6xZb9EGbawDD7TxUDhlTv0I3QzcSZjht7cYggpoZe2iNRbNAeH9T aZBNBmWu3u8ZZSks4jSRMHGMvg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:51:13 2026 by rpki-client