$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: sBHVgWI+prPw2y/dSYIM6+I+qHjHtGTRoIuSXx0uw+k= Subject key identifier: 80:14:59:00:2A:07:D7:B2:62:76:15:0A:5A:AE:E6:44:38:3C:EF:22 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 09CB Signing time: Wed 22 Jul 2026 20:21:43 +0000 Manifest this update: Wed 22 Jul 2026 20:21:42 +0000 Manifest next update: Wed 29 Jul 2026 20:21:42 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: iLcYFlRR8HLACSPHYdsZpPUMsH61l+yd6PiaGT+h/+o=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jul 22 20:21:42 2026 GMT Not After : Jul 29 20:21:42 2026 GMT Subject: CN=6a612656-6b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:07:08:5d:f7:76:11:68:b8:86:ad:67:b7: 66:ab:6e:6c:39:80:e2:ff:8d:af:69:2b:00:47:98: eb:9b:ae:f1:4b:b9:57:9f:85:d6:21:29:26:41:1f: ae:89:9c:c8:e5:5d:ac:93:bf:42:0c:f3:b1:e5:24: 73:12:a7:0d:0a:cf:c6:22:fd:8d:04:a0:45:17:a2: a9:47:05:00:3f:78:bf:5c:6c:fe:17:8e:2f:90:2c: 99:90:24:f1:64:e8:31:ec:c0:80:21:11:e6:e3:3b: 08:4b:68:03:54:9c:fa:46:d4:6d:01:5b:4c:31:c6: da:3d:5e:c5:1c:84:a4:f0:14:2b:08:76:21:72:b6: 66:0b:b5:de:96:c4:9c:d7:fc:13:1b:ba:ac:a8:05: cd:7d:22:27:62:9f:e1:5b:fe:e6:ba:52:e6:5a:ce: 0a:72:82:cb:48:c6:88:cb:0d:37:87:11:8a:02:09: 57:59:a1:d3:88:86:8a:72:bb:65:e7:b0:33:05:fe: a0:01:8c:3a:7c:64:74:5e:c2:69:42:0a:65:32:3d: 36:96:8c:e3:9f:56:5f:41:34:70:5f:60:09:24:de: 3b:79:33:82:5f:52:95:78:b7:65:95:37:94:f3:8c: bb:0a:5f:5e:d4:77:47:8a:7d:8a:1f:da:cf:63:e3: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:59:00:2A:07:D7:B2:62:76:15:0A:5A:AE:E6:44:38:3C:EF:22 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7a:d0:fb:48:88:7e:fd:89:63:ac:8d:4e:01:47:1d:36:43: 59:c3:ef:61:00:10:1e:cd:49:de:14:f6:ee:49:b7:46:c9:29: 56:c4:a4:a4:a5:51:7b:e3:dc:7e:1c:4f:5b:9a:73:2a:4b:a4: 0e:2f:11:55:e5:12:00:1a:48:60:11:85:b4:10:2c:32:74:71: 8b:73:a6:43:a1:e7:96:1d:b5:25:38:b2:03:46:ef:d9:8a:05: f4:8e:d4:7d:91:6a:b2:cc:14:3f:38:c2:47:cc:0d:a8:51:23: 48:1e:3f:f7:3e:8c:45:2c:1f:99:50:2b:37:e1:de:fa:7d:d2: c4:63:d7:f7:bd:3c:3f:07:18:80:ef:4c:e7:df:b4:bf:ee:ad: 4c:2b:5c:e4:64:cd:c3:14:a8:09:fc:8b:28:5b:1b:e4:65:11: 58:4d:c7:19:2e:cb:09:14:14:e5:5b:8e:9d:70:03:48:e5:99: 7e:ce:3a:0c:f3:79:aa:5e:df:3a:28:a6:dd:f3:77:d0:8a:d8: ed:48:14:cd:52:ac:d2:a3:7f:52:68:9b:35:4d:33:d7:0a:8f: e2:72:42:4f:17:67:39:cd:d6:02:25:b0:d8:18:af:72:cf:b2: 45:d1:b9:ed:81:5d:45:69:09:6f:bd:38:f4:53:bc:db:05:fa: 68:6e:ac:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwNzIyMjAyMTQyWhcNMjYwNzI5MjAyMTQyWjAYMRYwFAYD VQQDEw02YTYxMjY1Ni02YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpwHCF33dhFouIatZ7dmq25sOYDi/42vaSsAR5jrm67xS7lXn4XWISkmQR+u iZzI5V2sk79CDPOx5SRzEqcNCs/GIv2NBKBFF6KpRwUAP3i/XGz+F44vkCyZkCTx ZOgx7MCAIRHm4zsIS2gDVJz6RtRtAVtMMcbaPV7FHISk8BQrCHYhcrZmC7XelsSc 1/wTG7qsqAXNfSInYp/hW/7mulLmWs4KcoLLSMaIyw03hxGKAglXWaHTiIaKcrtl 57AzBf6gAYw6fGR0XsJpQgplMj02lozjn1ZfQTRwX2AJJN47eTOCX1KVeLdllTeU 84y7Cl9e1HdHin2KH9rPY+NuRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAUWQAq B9eyYnYVClqu5kQ4PO8iMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApnrQ+0iIfv2JY6yNTgFHHTZDWcPvYQAQHs1J3hT27km3RskpVsSkpKVRe+Pc fhxPW5pzKkukDi8RVeUSABpIYBGFtBAsMnRxi3OmQ6Hnlh21JTiyA0bv2YoF9I7U fZFqsswUPzjCR8wNqFEjSB4/9z6MRSwfmVArN+He+n3SxGPX9708PwcYgO9M59+0 v+6tTCtc5GTNwxSoCfyLKFsb5GURWE3HGS7LCRQU5VuOnXADSOWZfs46DPN5ql7f Oiim3fN30IrY7UgUzVKs0qN/UmibNU0z1wqP4nJCTxdnOc3WAiWw2Bivcs+yRdG5 7YFdRWkJb7049FO82wX6aG6sLQ== -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:29 2026 by rpki-client