$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: AgJkl/r472bX6+VLUITFTGNfdGa659of7YsjeY2C3uA= Subject key identifier: 15:17:18:58:F6:33:B6:75:9F:0E:8A:CF:55:4C:CA:4D:4F:DE:44:4D Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 025E Signing time: Sat 13 Jun 2026 02:14:25 +0000 Manifest this update: Sat 13 Jun 2026 02:14:24 +0000 Manifest next update: Sat 20 Jun 2026 02:14:24 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: 95tpisgR1ClkQthZGAmZ7jqL70wgN/ssBHAEytfKmpA=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: w0oQeZggvbfthkL7cxUDIxqBwGev5s767WcKvkpmAZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: Jun 13 02:14:24 2026 GMT Not After : Jun 20 02:14:24 2026 GMT Subject: CN=6a2cbd01-249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:07:ae:e8:78:ce:b9:29:13:ed:69:8e:72: 30:ad:0f:18:43:15:5b:37:ed:b4:ec:fa:3c:38:46: d1:b9:82:94:e7:e9:51:ad:7d:f6:f2:0e:60:6d:de: 84:49:73:bc:87:ea:39:eb:03:00:0e:e4:06:09:a7: f9:23:c6:3f:0c:77:76:bb:98:1d:ff:bf:c0:f9:68: f2:fc:85:a5:dc:8d:5c:df:86:42:4a:da:69:c3:ec: e1:cf:76:bf:c0:53:a1:42:92:8c:ac:ab:1e:43:4a: 97:f9:77:52:0a:a5:94:d1:ce:b7:95:b5:62:a0:51: d0:f2:e5:7f:17:0a:fc:09:b5:86:7a:55:da:11:62: 7e:7c:7e:ca:16:da:93:c4:c9:d9:4f:ad:88:c1:3b: 13:75:2b:cb:3d:09:8b:af:4b:84:f4:d4:5b:b0:e0: dd:e8:50:48:42:fa:0f:9b:07:51:77:f6:a0:b7:ae: 65:b6:62:43:19:1a:e3:87:4b:77:82:8e:22:23:67: b4:b4:04:79:9c:8c:b4:fe:8e:07:c0:d1:92:d2:dd: 17:01:da:b1:1b:a8:4b:25:a4:26:35:3e:cf:05:9d: f1:8b:5e:45:a3:b4:96:66:4b:b1:7a:47:a6:9a:9b: 78:e2:b8:ba:fd:24:68:33:07:b7:a5:f8:ba:26:0d: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:18:58:F6:33:B6:75:9F:0E:8A:CF:55:4C:CA:4D:4F:DE:44:4D X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a7:72:29:b6:5f:0a:22:13:d3:4a:42:01:7d:2b:15:f8:72: d3:ec:c1:d4:f9:6c:53:05:68:f1:34:94:ee:14:ff:12:6a:e0: cb:0e:fe:2d:d7:92:f9:61:ee:8a:1a:f4:4d:53:39:48:fb:6a: 6b:71:f5:e1:3e:36:0e:07:94:69:0c:11:18:50:c6:e3:d9:02: 9d:89:fc:f4:e0:5e:ad:25:f6:de:34:41:8b:52:1d:81:a3:99: d8:8b:1c:28:6e:d0:c0:ae:50:3a:ae:22:85:7c:41:c3:0d:0c: 56:91:96:22:f2:22:85:36:68:d4:b4:9e:71:ba:46:39:27:75: b9:b9:f3:1b:d6:92:e3:4f:a2:85:0f:83:03:a6:0a:af:ab:b5: 3a:06:01:eb:3b:09:bf:76:07:fa:a1:ac:2e:ad:5e:ee:79:8e: 87:32:3a:5c:dd:0f:00:6e:9c:2f:d9:ad:09:46:a3:f7:b2:b0: 52:30:ad:ad:af:62:2b:d2:93:26:02:54:06:19:5e:26:bd:16: b9:4b:d9:d8:3a:5a:3e:ac:69:c0:38:d2:34:58:67:fb:90:6c: 19:83:a9:9a:09:60:d7:61:12:cb:df:4d:b9:61:00:5e:f5:53: f0:7b:61:17:1f:64:bf:f5:5e:4d:56:3d:d7:57:fe:63:b8:56: 23:e3:c6:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjYwNjEzMDIxNDI0WhcNMjYwNjIwMDIxNDI0WjAYMRYwFAYD VQQDEw02YTJjYmQwMS0yNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CYHruh4zrkpE+1pjnIwrQ8YQxVbN+207Po8OEbRuYKU5+lRrX328g5gbd6E SXO8h+o56wMADuQGCaf5I8Y/DHd2u5gd/7/A+Wjy/IWl3I1c34ZCStppw+zhz3a/ wFOhQpKMrKseQ0qX+XdSCqWU0c63lbVioFHQ8uV/Fwr8CbWGelXaEWJ+fH7KFtqT xMnZT62IwTsTdSvLPQmLr0uE9NRbsODd6FBIQvoPmwdRd/agt65ltmJDGRrjh0t3 go4iI2e0tAR5nIy0/o4HwNGS0t0XAdqxG6hLJaQmNT7PBZ3xi15Fo7SWZkuxekem mpt44ri6/SRoMwe3pfi6Jg0WKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUXGFj2 M7Z1nw6Kz1VMyk1P3kRNMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiKdyKbZfCiIT00pCAX0rFfhy0+zB1PlsUwVo8TSU7hT/Emrgyw7+LdeS+WHu ihr0TVM5SPtqa3H14T42DgeUaQwRGFDG49kCnYn89OBerSX23jRBi1IdgaOZ2Isc KG7QwK5QOq4ihXxBww0MVpGWIvIihTZo1LSecbpGOSd1ubnzG9aS40+ihQ+DA6YK r6u1OgYB6zsJv3YH+qGsLq1e7nmOhzI6XN0PAG6cL9mtCUaj97KwUjCtra9iK9KT JgJUBhleJr0WuUvZ2DpaPqxpwDjSNFhn+5BsGYOpmglg12ESy99NuWEAXvVT8Hth Fx9kv/VeTVY911f+Y7hWI+PGgQ== -----END CERTIFICATE-----Generated at Sun Jun 14 08:38:33 2026 by rpki-client