$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: YDsfWv2tcws/NGP8mEPTZyHjltn8QxPR17P3EarhkcE= Subject key identifier: 41:00:53:B3:1A:9D:09:05:BE:69:03:14:E1:58:FF:8C:AC:BB:7A:3C Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A2B2 Signing time: Tue 28 Jul 2026 14:31:08 +0000 Manifest this update: Tue 28 Jul 2026 14:31:07 +0000 Manifest next update: Tue 04 Aug 2026 14:31:07 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: t2vj0U5ui3xybPSiA9LDowR3BOVgWaNy9bTnENAd1Ao=) 2: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 3: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) 4: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) 5: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 6: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 7: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) 8: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 9: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 10: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 11: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 12: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 13: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7128 (0x1bd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Jul 28 14:31:07 2026 GMT Not After : Aug 4 14:31:07 2026 GMT Subject: CN=6a68bd2c-e70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:e7:ce:6a:e0:15:7d:76:85:0b:ab:52:57: 5c:5e:76:f6:75:79:ef:7b:63:f4:b6:e0:04:e7:12: a6:a3:d6:8d:a1:83:88:16:ee:32:70:3e:0c:04:cd: 6b:c7:60:fc:ca:a0:da:ec:81:20:fd:af:ea:20:5b: 98:1c:44:11:20:e7:a4:fa:3c:d3:82:f0:56:9f:e1: e7:8b:85:96:34:d3:b0:4b:7a:50:21:c6:46:b8:a1: d4:67:5a:30:0f:aa:c0:00:18:58:85:c3:08:db:2d: 56:d2:32:0f:a2:52:ea:a1:8b:c8:62:8b:28:e9:c0: 21:9c:18:23:75:83:54:3a:a9:7f:ea:62:48:90:82: 5e:ec:88:a6:95:ba:cf:6a:64:d6:a2:0c:e2:2c:b8: cd:18:3d:ad:79:b0:64:6f:05:70:54:0f:95:92:72: 25:1e:79:dd:7d:0b:79:e9:6c:e0:a6:9a:a6:6f:fb: 91:c9:17:86:cf:0a:0d:c1:22:3c:13:7b:58:2a:fa: b9:d5:c2:34:6e:1b:54:3c:c2:43:d4:a5:89:10:29: 9c:59:3f:a7:7e:62:9b:4d:93:d5:63:3b:5a:d7:55: e6:93:7e:06:e2:6d:04:76:10:3b:7b:81:e5:17:74: 39:8f:e1:58:46:de:fe:74:2f:10:d0:d1:96:f3:56: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:00:53:B3:1A:9D:09:05:BE:69:03:14:E1:58:FF:8C:AC:BB:7A:3C X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8c:fb:f5:70:30:74:63:8a:8e:87:84:a7:03:0c:0a:42:71: 84:44:a3:f9:58:5e:e5:f8:13:69:ed:ef:cd:9f:81:a9:30:a9: f5:fa:ea:32:bb:4f:e9:ec:76:7b:0e:2f:5b:a2:f6:50:6d:d5: 9a:b3:22:15:99:64:b8:e0:70:b8:6a:e8:6d:88:fe:ad:51:dd: 4c:2a:b9:20:51:2b:0a:a9:90:43:ed:bd:e0:a2:14:7e:db:95: c6:c7:ff:52:d1:67:2f:92:33:a5:dd:2f:d0:6d:ca:80:54:38: de:d5:e4:78:d3:7d:7c:00:3c:a8:2d:4a:bb:0f:4f:9c:1d:20: 63:7f:2a:7e:8f:bb:ba:2b:85:34:fd:9e:1d:b0:9a:91:01:6c: cd:d4:f3:84:70:9d:5b:02:78:6c:40:10:6a:dc:d4:12:cf:24: 0b:ab:bf:c5:7e:e4:24:0d:84:fc:ff:da:76:77:b2:74:79:bc: 41:41:36:87:57:42:9b:40:57:89:ca:5d:1e:fd:68:74:33:97: 2f:c9:91:68:8c:bb:8f:a1:91:38:32:a9:3e:8a:ee:c6:81:8c: 77:a6:2e:41:b5:b9:e9:e3:49:a6:5a:2d:15:1d:ea:26:99:7b: 14:b0:13:d8:a7:c9:eb:20:f7:55:33:16:d0:16:2a:35:2d:3a: f5:bb:42:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwNzI4MTQzMTA3WhcNMjYwODA0MTQzMTA3WjAYMRYwFAYD VQQDEw02YTY4YmQyYy1lNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK3nzmrgFX12hQurUldcXnb2dXnve2P0tuAE5xKmo9aNoYOIFu4ycD4MBM1r x2D8yqDa7IEg/a/qIFuYHEQRIOek+jzTgvBWn+Hni4WWNNOwS3pQIcZGuKHUZ1ow D6rAABhYhcMI2y1W0jIPolLqoYvIYoso6cAhnBgjdYNUOql/6mJIkIJe7IimlbrP amTWogziLLjNGD2tebBkbwVwVA+VknIlHnndfQt56Wzgppqmb/uRyReGzwoNwSI8 E3tYKvq51cI0bhtUPMJD1KWJECmcWT+nfmKbTZPVYzta11Xmk34G4m0EdhA7e4Hl F3Q5j+FYRt7+dC8Q0NGW81apxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEAU7Ma nQkFvmkDFOFY/4ysu3o8MB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkoz79XAwdGOKjoeEpwMMCkJxhESj+Vhe5fgTae3vzZ+BqTCp9frqMrtP6ex2 ew4vW6L2UG3VmrMiFZlkuOBwuGrobYj+rVHdTCq5IFErCqmQQ+294KIUftuVxsf/ UtFnL5Izpd0v0G3KgFQ43tXkeNN9fAA8qC1Kuw9PnB0gY38qfo+7uiuFNP2eHbCa kQFszdTzhHCdWwJ4bEAQatzUEs8kC6u/xX7kJA2E/P/adneydHm8QUE2h1dCm0BX icpdHv1odDOXL8mRaIy7j6GRODKpPoruxoGMd6YuQbW56eNJplotFR3qJpl7FLAT 2KfJ6yD3VTMW0BYqNS069btC8Q== -----END CERTIFICATE-----Generated at Wed Jul 29 08:51:47 2026 by rpki-client