$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: +ZI0On+PKvKaxwzDagf2YIY7jHJw4jQ2PieSSWS0xMI= Subject key identifier: DA:8B:91:0E:86:0F:D6:3E:C4:D1:D6:4F:E0:68:90:A5:E3:B1:79:F0 Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 318C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 3171 Signing time: Tue 28 Jul 2026 15:30:34 +0000 Manifest this update: Tue 28 Jul 2026 15:30:33 +0000 Manifest next update: Tue 04 Aug 2026 15:30:33 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: oebQuDXBSM0HySSZJC+zprMjK0h/eDW554LlmBqwKtI=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: QVg7IcJ6NSx06X4qAnqppvTi4+Hmlx/WcbnAXz16lOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12684 (0x318c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Validity Not Before: Jul 28 15:30:33 2026 GMT Not After : Aug 4 15:30:33 2026 GMT Subject: CN=6a68cb19-0cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:e7:52:bb:1b:0b:55:c6:14:2d:76:4e:a9: 2f:58:15:29:b4:89:ae:6b:e9:5c:11:66:48:82:9d: 68:f4:cc:6c:2a:17:be:a2:3c:60:51:21:8a:d4:b1: da:cd:25:c2:c7:47:54:00:67:fb:84:e0:1b:98:cc: 46:ed:ae:a1:00:ff:7a:f8:9c:ef:37:81:42:98:3f: 21:e0:b2:9a:b3:b5:69:8b:d7:28:bd:fe:42:c9:27: 90:f6:d4:f9:67:c3:54:ab:87:c4:3d:88:2e:09:72: cc:df:8e:1c:a5:b6:6b:d7:92:d6:e8:a9:69:9c:ef: d0:1e:b8:70:e9:cd:59:33:1b:a9:47:f8:84:cf:6d: 1e:c9:2a:4e:57:1f:e7:9b:4f:48:b5:68:1e:cb:80: a5:fc:8b:1f:e8:98:33:cf:c3:2b:f1:c1:5b:2e:69: 16:d3:e1:f5:7a:66:4b:77:0d:07:a0:2b:4e:04:29: 9e:4d:f0:ca:25:0e:af:a1:22:0e:e1:5d:23:92:ae: 71:b2:7c:71:21:2a:8d:ff:e9:ac:c5:74:b5:26:70: e4:ec:ae:f7:c5:89:bf:c8:de:06:7d:b9:8e:a5:71: 06:f3:c5:6a:c4:3d:1d:da:48:94:bf:d0:9b:d3:d7: 5c:d0:57:2f:1a:3c:41:c1:8d:85:d7:11:de:9d:4f: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:91:0E:86:0F:D6:3E:C4:D1:D6:4F:E0:68:90:A5:E3:B1:79:F0 X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6a:8d:13:11:79:b1:26:52:1f:49:cf:ea:ce:e9:6a:d3:54: 3a:44:5c:f1:cf:00:88:31:c9:18:25:63:bf:af:fc:bb:f7:b4: b5:23:e5:2a:64:25:f4:b1:bc:34:12:68:94:46:47:64:6d:bf: e7:10:d7:fd:27:6e:6d:48:68:dd:2f:3e:08:7e:bc:73:c4:a8: 05:3d:27:b2:db:32:4d:27:1e:5f:d9:d6:ae:04:a9:54:bd:70: c9:88:b6:99:c9:31:c8:db:cc:b6:bc:79:76:0b:b2:07:49:e7: c5:a1:fc:7f:3d:d7:c2:46:fc:21:b8:61:db:48:be:98:f5:5b: 3d:d0:97:5f:05:39:03:aa:b8:f4:a4:8d:a8:3d:0d:1f:5e:19: a8:3b:3c:8a:0e:83:95:e3:86:94:69:9a:e9:b8:fc:99:57:84: f2:b0:36:5b:da:7d:4d:40:97:f2:6c:7b:d7:b9:60:3b:27:00: 5a:4a:3a:a5:b2:1c:5c:30:c0:eb:35:a6:eb:c4:5b:af:56:5e: 52:5e:a3:b5:d3:a5:e5:84:86:48:e0:44:4b:11:2c:b8:8e:bd: 7e:5d:6a:7d:35:f0:b8:0a:ee:ab:03:22:ff:7d:70:93:8d:e6: e2:2c:fd:48:3f:81:35:f5:41:2c:ad:42:aa:f7:84:d6:12:e7: 67:81:cb:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjYwNzI4MTUzMDMzWhcNMjYwODA0MTUzMDMzWjAYMRYwFAYD VQQDEw02YTY4Y2IxOS0wY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAfnUrsbC1XGFC12TqkvWBUptImua+lcEWZIgp1o9MxsKhe+ojxgUSGK1LHa zSXCx0dUAGf7hOAbmMxG7a6hAP96+JzvN4FCmD8h4LKas7Vpi9covf5CySeQ9tT5 Z8NUq4fEPYguCXLM344cpbZr15LW6KlpnO/QHrhw6c1ZMxupR/iEz20eySpOVx/n m09ItWgey4Cl/Isf6Jgzz8Mr8cFbLmkW0+H1emZLdw0HoCtOBCmeTfDKJQ6voSIO 4V0jkq5xsnxxISqN/+msxXS1JnDk7K73xYm/yN4GfbmOpXEG88VqxD0d2kiUv9Cb 09dc0FcvGjxBwY2F1xHenU8C2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqLkQ6G D9Y+xNHWT+BokKXjsXnwMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPmqNExF5sSZSH0nP6s7patNUOkRc8c8AiDHJGCVjv6/8u/e0tSPlKmQl9LG8 NBJolEZHZG2/5xDX/SdubUho3S8+CH68c8SoBT0nstsyTSceX9nWrgSpVL1wyYi2 mckxyNvMtrx5dguyB0nnxaH8fz3Xwkb8Ibhh20i+mPVbPdCXXwU5A6q49KSNqD0N H14ZqDs8ig6DleOGlGma6bj8mVeE8rA2W9p9TUCX8mx717lgOycAWko6pbIcXDDA 6zWm68Rbr1ZeUl6jtdOl5YSGSOBESxEsuI69fl1qfTXwuAruqwMi/31wk43m4iz9 SD+BNfVBLK1CqveE1hLnZ4HLzw== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:04 2026 by rpki-client