$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: sxrZtys3tX6ryU4yFyS5k6FO5flcriqLL7jwPIMH6So= Subject key identifier: 2C:D9:7B:B5:5C:F0:14:FC:3E:D6:CB:93:D2:F5:67:03:24:9F:A1:3D Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02E5 Signing time: Sat 13 Jun 2026 01:26:40 +0000 Manifest this update: Sat 13 Jun 2026 01:26:40 +0000 Manifest next update: Sat 20 Jun 2026 01:26:40 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: 9edREa1KZ1Vvcv2FU9C+SxL3iVPx3zz4fYdPWZMQLyc=) 2: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 3: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) 4: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 5: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) 6: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) 7: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jun 13 01:26:40 2026 GMT Not After : Jun 20 01:26:40 2026 GMT Subject: CN=6a2cb1d0-f5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:2b:1d:8e:5b:14:6b:0e:13:a5:b9:b5:bf: 76:d8:ce:6b:9c:04:0d:16:62:2c:f5:27:c7:ee:a2: cd:f2:a9:68:39:8f:65:47:86:2d:da:47:0c:a2:d0: 6c:16:4d:ff:cc:a8:30:f5:df:bc:73:22:12:87:e8: ec:33:e3:ca:f0:22:af:fd:bc:6d:23:05:50:7c:2d: 59:0d:94:50:77:b1:40:b0:9a:51:9b:dd:38:a3:89: a6:2c:a4:28:69:a7:a8:ad:d3:db:62:cf:5e:e9:78: 00:b1:a4:87:81:75:e1:4e:6f:16:04:26:32:32:be: 68:5b:52:fb:5f:0e:78:6e:75:eb:fa:62:17:3c:ce: ff:f0:ec:21:cf:59:58:37:ce:67:17:9b:ee:84:f1: 22:74:bf:29:6b:45:55:96:2e:7f:1e:a3:c5:55:37: 9f:4f:01:8d:c3:d0:cd:24:44:ad:70:8a:72:1b:29: 01:0a:a3:1b:b5:37:b5:ae:49:14:19:29:60:3c:75: 8d:56:bf:f1:94:37:da:0d:99:2e:a3:99:4e:32:df: 02:7f:cd:11:0d:eb:8c:b5:ed:30:28:16:ff:59:ff: 0b:1d:18:ec:0e:36:d6:dd:c6:63:90:d6:91:12:ee: 9b:4e:88:27:37:ce:85:6f:7b:5b:91:68:b7:28:7e: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:7B:B5:5C:F0:14:FC:3E:D6:CB:93:D2:F5:67:03:24:9F:A1:3D X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:4b:ca:13:5c:c8:a9:af:18:7e:c5:0f:35:18:02:10:6a: bb:c6:78:3e:45:d6:64:d9:92:98:32:d3:1e:9b:f9:31:8a:1d: 8a:3f:09:4b:75:af:7c:0e:8a:73:5e:c8:b2:24:d2:1c:78:20: a7:59:41:f6:0e:b5:8a:31:da:f5:7a:2c:c5:39:32:40:35:97: 50:6e:69:82:3b:31:42:c1:85:df:62:3b:91:dc:74:fb:ac:1f: 2f:db:41:d0:17:87:95:56:37:6d:e6:b6:43:a9:c8:65:4f:d7: 7e:da:2e:ae:70:57:60:29:b8:2c:69:46:0a:4b:53:6d:b6:03: 35:3d:f6:95:76:aa:d2:5a:c1:dc:cb:d9:56:a8:90:81:38:95: b0:ed:59:17:16:e2:ba:e6:e2:a5:3e:21:95:eb:e5:56:15:62: 5f:ea:9b:6a:e6:3e:b8:c4:e0:12:c1:07:dc:a3:9b:8c:35:ff: 6a:a8:2e:4e:1a:98:cd:56:88:df:9f:7d:dd:52:0c:37:02:52: 5c:17:25:94:60:2a:ed:9a:4e:06:a5:4c:38:38:00:07:5f:55: 94:75:14:60:19:ce:0e:cf:40:f6:32:1d:84:85:ee:0b:e6:85: 5e:65:a9:9a:ff:66:b3:a1:85:50:43:dd:60:d5:ba:3c:b6:a8: 08:6e:18:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNjEzMDEyNjQwWhcNMjYwNjIwMDEyNjQwWjAYMRYwFAYD VQQDEw02YTJjYjFkMC1mNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51QrHY5bFGsOE6W5tb922M5rnAQNFmIs9SfH7qLN8qloOY9lR4Yt2kcMotBs Fk3/zKgw9d+8cyISh+jsM+PK8CKv/bxtIwVQfC1ZDZRQd7FAsJpRm904o4mmLKQo aaeordPbYs9e6XgAsaSHgXXhTm8WBCYyMr5oW1L7Xw54bnXr+mIXPM7/8Owhz1lY N85nF5vuhPEidL8pa0VVli5/HqPFVTefTwGNw9DNJEStcIpyGykBCqMbtTe1rkkU GSlgPHWNVr/xlDfaDZkuo5lOMt8Cf80RDeuMte0wKBb/Wf8LHRjsDjbW3cZjkNaR Eu6bTognN86Fb3tbkWi3KH7NnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzZe7Vc 8BT8PtbLk9L1ZwMkn6E9MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyNLyhNcyKmvGH7FDzUYAhBqu8Z4PkXWZNmSmDLTHpv5MYodij8JS3WvfA6K c17IsiTSHHggp1lB9g61ijHa9XosxTkyQDWXUG5pgjsxQsGF32I7kdx0+6wfL9tB 0BeHlVY3bea2Q6nIZU/XftournBXYCm4LGlGCktTbbYDNT32lXaq0lrB3MvZVqiQ gTiVsO1ZFxbiuubipT4hlevlVhViX+qbauY+uMTgEsEH3KObjDX/aqguThqYzVaI 35993VIMNwJSXBcllGAq7ZpOBqVMODgAB19VlHUUYBnODs9A9jIdhIXuC+aFXmWp mv9ms6GFUEPdYNW6PLaoCG4YKQ== -----END CERTIFICATE-----Generated at Sat Jun 13 13:48:02 2026 by rpki-client