$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: 4yUQ1XzNjxbwbA16UT2H2v0wIgsbdzINka0J7IUO3j8= Subject key identifier: 3C:5F:A8:66:73:B8:3E:BD:31:91:06:F7:34:C1:8A:2E:AA:9D:26:86 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D5F Signing time: Tue 28 Jul 2026 18:11:59 +0000 Manifest this update: Tue 28 Jul 2026 18:11:59 +0000 Manifest next update: Tue 04 Aug 2026 18:11:59 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: JDU2UubtmM0eml2Px3ehLYhOvjI4ulLm/gzSJ2dxG7s=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Jul 28 18:11:59 2026 GMT Not After : Aug 4 18:11:59 2026 GMT Subject: CN=6a68f0ef-7074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:f6:d8:0a:de:45:26:a6:b1:ae:0f:ce:2f: de:53:59:a4:56:c5:1c:d1:4c:fb:b6:be:cf:2a:01: ea:ba:2c:c7:c8:42:c9:26:11:d9:00:27:0e:f5:c6: fc:d6:e4:9f:cb:fb:0f:f9:6c:9e:e0:52:fa:37:30: 5b:d0:d0:f1:e7:5f:37:71:37:6f:bf:1c:d9:1b:28: 7b:54:91:8a:94:31:d4:ec:75:34:bd:25:cd:3f:3a: a0:24:c8:52:18:62:0b:45:13:5a:c5:e7:07:47:3d: 8e:76:44:23:d7:d7:a4:c7:15:4e:3d:4f:48:15:51: 4b:00:08:b7:01:2b:a7:29:08:66:63:84:2c:c5:50: 3b:20:e7:3c:22:ae:f6:2f:49:5a:db:8a:15:69:e0: 6e:16:e3:c8:b8:5b:73:4b:b7:61:c8:d5:92:4d:07: 3e:3e:a6:97:c0:8d:6e:72:a4:64:80:d8:43:c5:e2: 02:8e:58:aa:8a:28:eb:31:5f:b7:4b:11:7e:fe:b5: 6b:e0:e3:e1:b2:7a:c9:92:ee:a3:d4:f4:ab:a0:5d: 56:a5:56:d2:f3:b7:fb:66:6f:13:31:fd:57:02:cc: af:9e:38:a0:fd:b2:ac:1f:cd:d5:02:7c:16:f0:4a: bc:5f:66:3a:c1:65:51:d1:13:13:5c:95:bc:c1:3b: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:A8:66:73:B8:3E:BD:31:91:06:F7:34:C1:8A:2E:AA:9D:26:86 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:a2:25:93:83:b8:36:5a:9e:7c:80:58:c5:3c:97:f5:bb: 0b:ff:91:4a:f3:e3:66:5d:02:65:59:e9:9c:42:2d:35:a8:39: 0f:c7:66:80:e1:67:b9:1f:c6:9d:23:d8:b1:1d:4c:2d:9f:4e: 71:69:63:a6:fb:c0:e7:c4:90:f9:31:09:5d:75:13:a9:6f:e4: 2a:d2:ab:5f:22:f9:37:ec:9b:8b:ab:37:57:bc:a7:6b:92:0a: c3:be:8e:35:c9:b4:39:d3:49:99:84:5f:5b:18:cd:3e:2b:57: ef:c6:dc:89:ca:6c:88:a5:2e:4e:89:2f:48:ec:ff:0f:54:78: cb:e1:db:0b:a9:ad:7a:95:c7:f4:78:55:75:d1:54:26:1b:cd: 72:14:76:ef:83:23:c7:1a:fa:5e:7e:a7:03:d8:6f:6b:f2:4d: ea:14:24:75:a9:cd:05:19:56:53:5c:a0:7d:06:11:ad:19:9c: 68:38:d0:27:e4:f0:dd:ea:59:2e:c4:7d:9b:de:19:4a:b0:4e: bb:6b:50:19:21:a4:5f:c1:ce:14:fa:ab:20:f3:a7:8e:be:a4: 35:3d:ca:cb:a3:f8:30:c4:86:8d:b5:e5:a9:48:09:fb:17:26: 39:9f:41:c2:ff:b9:2e:2e:25:a1:d4:4c:5b:5d:5d:65:c0:31: 38:05:32:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwNzI4MTgxMTU5WhcNMjYwODA0MTgxMTU5WjAYMRYwFAYD VQQDEw02YTY4ZjBlZi03MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0b22AreRSamsa4Pzi/eU1mkVsUc0Uz7tr7PKgHquizHyELJJhHZACcO9cb8 1uSfy/sP+Wye4FL6NzBb0NDx5183cTdvvxzZGyh7VJGKlDHU7HU0vSXNPzqgJMhS GGILRRNaxecHRz2OdkQj19ekxxVOPU9IFVFLAAi3ASunKQhmY4QsxVA7IOc8Iq72 L0la24oVaeBuFuPIuFtzS7dhyNWSTQc+PqaXwI1ucqRkgNhDxeICjliqiijrMV+3 SxF+/rVr4OPhsnrJku6j1PSroF1WpVbS87f7Zm8TMf1XAsyvnjig/bKsH83VAnwW 8Eq8X2Y6wWVR0RMTXJW8wTs/rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxfqGZz uD69MZEG9zTBii6qnSaGMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlKiJZODuDZannyAWMU8l/W7C/+RSvPjZl0CZVnpnEItNag5D8dmgOFnuR/G nSPYsR1MLZ9OcWljpvvA58SQ+TEJXXUTqW/kKtKrXyL5N+ybi6s3V7yna5IKw76O Ncm0OdNJmYRfWxjNPitX78bcicpsiKUuTokvSOz/D1R4y+HbC6mtepXH9HhVddFU JhvNchR274Mjxxr6Xn6nA9hva/JN6hQkdanNBRlWU1ygfQYRrRmcaDjQJ+Tw3epZ LsR9m94ZSrBOu2tQGSGkX8HOFPqrIPOnjr6kNT3Ky6P4MMSGjbXlqUgJ+xcmOZ9B wv+5Li4lodRMW11dZcAxOAUyAg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:52:29 2026 by rpki-client