$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: quiDqRgMzNiIqxsmstPONnpmcGedNhE01QLwgyjGX3A= Subject key identifier: EA:DE:72:00:65:6B:67:CB:81:93:DC:A4:5D:60:A6:6A:2C:DA:56:9A Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 0772 Signing time: Tue 12 May 2026 22:06:30 +0000 Manifest this update: Tue 12 May 2026 22:06:29 +0000 Manifest next update: Tue 19 May 2026 22:06:29 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: b9k4wu0rkXXnvfXU6X5MasvIZR+vDuK5v1vcZ89Jsvg=) 2: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=) 4: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=) 5: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: a9anV1wkhAhqukLm8HrqODKS0piPOQEQ02jiRXV3Ak4=) 6: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=) 7: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: May 12 22:06:29 2026 GMT Not After : May 19 22:06:29 2026 GMT Subject: CN=6a03a466-109c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:2b:61:f5:71:cd:8e:9c:ab:0e:39:42:7d: 1c:6c:37:ac:f1:8e:d9:31:ff:3a:4d:15:a3:76:4a: 83:00:12:7d:25:31:52:a6:19:21:8b:3d:bc:93:a8: 92:bb:8b:e4:02:18:fd:f8:a0:00:df:35:e3:fe:c0: 11:0f:ac:f3:64:bd:cc:e8:57:9f:74:7e:34:cd:d0: c8:14:5f:8d:a8:a1:91:24:e6:fd:8d:e9:1e:d1:04: 68:2a:eb:5c:3b:f9:af:33:24:a7:ca:0b:dd:98:bc: 95:a4:7d:ef:6b:c7:82:26:74:4f:cb:39:ed:f5:8c: 3a:1b:b2:c1:fa:99:9c:01:d9:40:bc:3f:f2:0c:c1: b4:34:67:04:25:15:00:81:16:a5:1a:09:05:88:cb: 7c:48:96:af:00:96:32:d5:c8:47:25:3c:bd:b2:a9: 9b:c4:89:cf:a4:c3:16:28:07:71:5c:9f:f6:0f:ee: 24:dc:74:0c:e5:dc:04:5c:58:f2:79:a2:25:ca:92: 02:e0:10:01:39:de:d5:af:50:d9:0c:a9:0f:20:68: 8b:ca:ca:8a:e1:34:af:1f:24:8f:65:b0:57:cc:49: da:66:6f:a7:92:18:b5:fe:87:d2:b1:c4:16:aa:74: d8:b1:5f:38:53:ea:40:7e:89:16:69:4d:1e:17:58: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DE:72:00:65:6B:67:CB:81:93:DC:A4:5D:60:A6:6A:2C:DA:56:9A X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:68:88:ab:ec:72:8a:cf:11:50:3f:46:72:00:ca:7e:b7:50: 2b:45:ee:8c:c7:dd:81:33:be:8a:f4:47:a8:a6:b1:24:b4:bb: 9e:ed:f1:ad:40:c2:c7:da:a4:42:d9:9d:ea:b8:41:cc:0f:44: 1a:5a:50:08:1a:b0:13:77:93:35:27:6f:6f:32:eb:5a:6f:47: c7:c0:44:4c:29:28:8f:d0:00:2d:82:96:02:d0:56:f2:5f:d9: cd:c3:1a:03:e7:a7:97:5a:d1:ee:98:cb:b0:8b:a5:a9:af:b9: 45:5f:44:50:89:4f:7a:c0:eb:3b:2c:d0:28:12:65:07:fa:97: 43:73:a6:6c:94:1a:5d:ca:ce:b6:53:c7:e7:a8:c4:08:1f:b8: be:37:da:b1:4a:2e:bc:8b:7d:62:57:b7:14:28:05:b9:3a:78: 07:95:45:d6:ef:4a:53:63:e2:44:f1:03:46:c3:fc:d1:97:d6: e4:40:01:9d:b2:50:11:7c:f5:3c:3a:5d:e1:40:fa:42:2d:7a: 9b:bc:d8:8a:37:bf:0e:98:2e:ea:d4:3b:4f:96:df:b1:f4:15: a8:e6:0f:b4:06:95:2e:33:3d:e9:da:8c:2a:e4:fd:68:0e:f4: 26:26:a6:fc:d7:a6:df:1c:9d:b2:b4:df:cd:fc:d0:53:f2:ac: dd:6e:a2:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwNTEyMjIwNjI5WhcNMjYwNTE5MjIwNjI5WjAYMRYwFAYD VQQDEw02YTAzYTQ2Ni0xMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppQrYfVxzY6cqw45Qn0cbDes8Y7ZMf86TRWjdkqDABJ9JTFSphkhiz28k6iS u4vkAhj9+KAA3zXj/sARD6zzZL3M6FefdH40zdDIFF+NqKGRJOb9jeke0QRoKutc O/mvMySnygvdmLyVpH3va8eCJnRPyznt9Yw6G7LB+pmcAdlAvD/yDMG0NGcEJRUA gRalGgkFiMt8SJavAJYy1chHJTy9sqmbxInPpMMWKAdxXJ/2D+4k3HQM5dwEXFjy eaIlypIC4BABOd7Vr1DZDKkPIGiLysqK4TSvHySPZbBXzEnaZm+nkhi1/ofSscQW qnTYsV84U+pAfokWaU0eF1i+BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrecgBl a2fLgZPcpF1gpmos2laaMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuWiIq+xyis8RUD9GcgDKfrdQK0XujMfdgTO+ivRHqKaxJLS7nu3xrUDCx9qk Qtmd6rhBzA9EGlpQCBqwE3eTNSdvbzLrWm9Hx8BETCkoj9AALYKWAtBW8l/ZzcMa A+enl1rR7pjLsIulqa+5RV9EUIlPesDrOyzQKBJlB/qXQ3OmbJQaXcrOtlPH56jE CB+4vjfasUouvIt9Yle3FCgFuTp4B5VF1u9KU2PiRPEDRsP80ZfW5EABnbJQEXz1 PDpd4UD6Qi16m7zYije/Dpgu6tQ7T5bfsfQVqOYPtAaVLjM96dqMKuT9aA70Jiam /Nem3xydsrTfzfzQU/Ks3W6iag== -----END CERTIFICATE-----Generated at Wed May 13 12:20:07 2026 by rpki-client