$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: TYp6SlaOMkRtnZNv2YodXOObgIjoVO9Rg/7WcKkFffc= Subject key identifier: 43:FA:54:6D:2B:1C:0B:48:AB:C4:17:EB:E1:92:F2:B2:16:0C:B8:25 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02FF Signing time: Mon 27 Jul 2026 02:31:16 +0000 Manifest this update: Mon 27 Jul 2026 02:31:16 +0000 Manifest next update: Mon 03 Aug 2026 02:31:16 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: roG7LUFrTE0W3cVH3qprjI9LTeiqu3Qr+Y20typuDbw=) 2: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: ZEuPiUQckZniRx9NOhZ6gYYx61mX4enZZWyGpfGF2y0=) 3: F84FF96A493911ED805EB686C4F9AE02.roa (hash: w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: kcXC8wBP+o9JuaOs9TbOrSDUWgSogQuiEdXCi6dydEA=) 5: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: 3ocK4Bfl3SbnaTMCj/lDw0pUXGryAmwBhjWzwEoz6ug=) 6: 2D554D1875B911F19160F3B762A30FBC.roa (hash: awvfykrSz6QoQMrBSUpkmUV2t8VsWMbwM0JMYPHRNiE=) 7: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 2sdmpYEclOMLpBPBQMRyf2bR5K+Znn8UXPaVbPG6E8g=) 8: D21111C2190011F187AE9EA5203D8C67.roa (hash: QBY/KlIfl7r0REBMASrW8pgiV36TJqXHiWnzxZNFLi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jul 27 02:31:16 2026 GMT Not After : Aug 3 02:31:16 2026 GMT Subject: CN=6a66c2f4-278f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:17:19:be:18:0c:11:af:41:10:22:84:4c: 51:75:f8:44:b1:dc:73:01:c7:61:e9:96:da:e2:a5: 24:93:b5:d2:83:8c:05:5b:3e:98:89:37:aa:d7:7f: 60:90:4f:7a:27:a2:01:4d:3b:d8:a4:0a:36:85:ec: 8f:3e:fa:50:9f:7b:20:07:2b:d8:03:04:93:48:bc: 92:15:82:98:79:50:4d:d3:69:f5:bd:01:2d:21:41: 9d:ee:95:22:d1:eb:6b:12:31:de:2d:c3:0b:54:c0: 59:bf:9d:7e:42:c2:f2:05:1a:c9:8a:97:be:77:45: 26:db:b8:fb:ee:fc:74:6c:f8:20:70:c1:30:b7:16: cd:5b:18:1b:2d:63:66:7d:7c:05:2d:92:87:38:8e: 89:f3:d6:2e:5c:55:82:f6:a5:e9:36:ec:58:24:eb: b2:5d:3f:a2:03:09:70:a6:04:bd:eb:c8:7a:18:e2: 46:da:2c:29:3d:f2:b5:0c:c3:a6:bf:f6:4b:b2:51: fc:dc:ee:37:26:67:9c:89:9c:4f:3f:89:8c:b1:29: 71:dd:15:38:98:ad:63:ff:bd:ed:68:d1:86:5b:8a: 1d:64:5b:91:9c:ce:8d:76:4c:f7:2b:2c:dd:01:f6: c0:70:be:bb:ea:8a:1b:f1:05:6b:c5:17:a8:f8:82: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:54:6D:2B:1C:0B:48:AB:C4:17:EB:E1:92:F2:B2:16:0C:B8:25 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b5:d5:14:0b:38:d4:e9:03:48:3f:52:8c:d2:3c:86:16:c3: 6e:2e:93:7b:68:6f:ba:d9:5d:f5:97:84:5a:9d:e5:68:5a:e3: 11:ba:25:48:a7:47:f3:36:95:88:55:ab:f8:be:62:4c:80:96: a0:6f:b9:9a:e8:de:56:ce:05:d8:9d:84:81:22:73:f1:f2:2c: 90:11:1c:15:1f:13:b8:76:fa:f5:7e:7b:92:28:ae:bf:7d:3c: 4d:29:1c:02:80:62:94:7d:65:c0:42:35:04:34:12:aa:8f:b0: 13:70:8f:b1:c7:c9:24:31:c0:93:72:5b:5d:aa:37:d6:78:af: 81:4c:ca:e5:83:a9:ad:bc:01:99:26:f8:66:10:d6:b2:c5:f9: 7d:ce:9f:1e:00:83:95:0d:30:48:ff:b6:a0:9f:91:62:4c:eb: a5:d0:80:7d:7e:9e:8f:bb:95:f6:16:37:25:58:cb:8b:5a:b6: 18:20:66:ca:a0:2d:ba:d0:79:29:f4:63:60:5c:f1:ab:8d:54: 3e:86:c9:d9:4c:bf:bc:39:22:b3:91:41:9d:9d:5d:a2:82:f3: 72:aa:08:37:24:86:7c:b1:1e:2b:e3:c8:07:df:ee:cb:3e:55: df:55:dc:c4:0b:c8:24:f4:6c:98:5e:91:3f:31:de:5e:c7:19: 63:2d:f2:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNzI3MDIzMTE2WhcNMjYwODAzMDIzMTE2WjAYMRYwFAYD VQQDEw02YTY2YzJmNC0yNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlX8XGb4YDBGvQRAihExRdfhEsdxzAcdh6Zba4qUkk7XSg4wFWz6YiTeq139g kE96J6IBTTvYpAo2heyPPvpQn3sgByvYAwSTSLySFYKYeVBN02n1vQEtIUGd7pUi 0etrEjHeLcMLVMBZv51+QsLyBRrJipe+d0Um27j77vx0bPggcMEwtxbNWxgbLWNm fXwFLZKHOI6J89YuXFWC9qXpNuxYJOuyXT+iAwlwpgS968h6GOJG2iwpPfK1DMOm v/ZLslH83O43JmeciZxPP4mMsSlx3RU4mK1j/73taNGGW4odZFuRnM6Ndkz3Kyzd AfbAcL676oob8QVrxReo+IKPCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP6VG0r HAtIq8QX6+GS8rIWDLglMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAELXVFAs41OkDSD9SjNI8hhbDbi6Te2hvutld9ZeEWp3laFrjEbolSKdH8zaV iFWr+L5iTICWoG+5mujeVs4F2J2EgSJz8fIskBEcFR8TuHb69X57kiiuv308TSkc AoBilH1lwEI1BDQSqo+wE3CPscfJJDHAk3JbXao31nivgUzK5YOprbwBmSb4ZhDW ssX5fc6fHgCDlQ0wSP+2oJ+RYkzrpdCAfX6ej7uV9hY3JVjLi1q2GCBmyqAtutB5 KfRjYFzxq41UPobJ2Uy/vDkis5FBnZ1dooLzcqoINySGfLEeK+PIB9/uyz5V31Xc xAvIJPRsmF6RPzHeXscZYy3yoA== -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:07 2026 by rpki-client