$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: ywrwzejxafV9nAscuTI7hfxjP0Qr724MxzZORK5E5A8= Subject key identifier: 85:2D:01:47:78:F0:30:EE:F6:D1:14:50:C5:9E:47:15:00:96:24:34 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 023B Signing time: Sat 13 Jun 2026 02:33:24 +0000 Manifest this update: Sat 13 Jun 2026 02:33:24 +0000 Manifest next update: Sat 20 Jun 2026 02:33:24 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: EsN6dHRvKgVacLVlfK2Bx7jyGnFSfbDKi4F6+obCnYU=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) 3: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Jun 13 02:33:24 2026 GMT Not After : Jun 20 02:33:24 2026 GMT Subject: CN=6a2cc174-d192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:65:fb:3c:f6:9b:54:08:37:78:32:a9:c4: 58:fc:8e:c2:b3:e6:90:8c:fe:07:4c:87:78:bb:5f: ac:a8:a6:bf:4e:b4:cd:19:73:13:31:89:54:7d:12: b2:b7:53:dc:fd:41:45:f4:6f:2c:45:d6:e8:d3:58: 98:40:14:98:df:95:2a:d3:28:0d:c6:90:d8:d3:37: 73:3e:ac:15:10:21:1d:26:4e:fe:7b:8e:b4:aa:00: 92:ca:67:74:bf:9e:d9:9b:f7:5c:7c:ab:20:70:e1: 49:1a:7e:0a:bd:f4:26:b1:8c:90:ee:20:ce:29:2e: 1a:1b:00:c4:f1:72:d8:ce:31:ff:f4:b7:3c:74:37: 7e:b1:ac:cc:a4:1d:c3:79:00:c7:c2:df:e4:20:71: c2:ca:8b:14:6c:68:b3:6f:56:5d:92:10:e4:04:f5: 16:70:f7:43:93:60:ca:89:3f:29:76:d5:e4:a4:e5: a9:07:12:39:84:8e:38:10:29:07:b3:80:27:99:43: e1:a7:8a:08:9d:d8:81:1a:ce:ea:d6:91:8f:71:42: a7:98:50:3f:4e:95:b4:2a:ea:76:c5:1c:24:04:cc: d9:8a:31:b8:31:5f:41:ff:9c:a0:38:be:a7:b2:4c: d3:86:56:3e:be:42:b3:14:fe:5d:0b:9b:19:bd:1f: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:01:47:78:F0:30:EE:F6:D1:14:50:C5:9E:47:15:00:96:24:34 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ec:f1:9e:89:b4:f0:16:ac:ae:dd:b3:9a:e6:c0:c0:c6:22: 12:76:8e:ee:df:4d:b5:38:85:4b:62:b2:47:4a:d1:db:6d:fc: ff:ca:7d:e3:36:eb:ce:f9:22:c5:3c:41:00:81:a2:d3:20:d0: 1a:0c:ee:6d:a0:d3:cb:00:21:ce:dc:a4:89:77:6c:39:8a:e1: 60:8f:24:e2:96:e8:57:b4:b4:b5:35:d0:dd:3e:ff:db:0d:61: d2:f4:77:34:2a:ac:0a:e5:4b:c7:a3:a5:c9:58:a4:fe:3d:76: a2:fb:e6:46:9a:a7:b4:a9:80:06:92:96:01:21:1a:b9:35:16: 13:b4:54:e5:bc:99:b9:49:03:62:8d:93:c9:44:ce:29:25:24: d3:17:c1:42:d2:e7:a7:36:82:fd:59:da:ae:6f:48:6b:e5:33: a8:d6:bc:ee:c8:59:1e:39:64:12:f4:e3:d3:33:3a:ad:c6:a7: 03:1d:1b:b8:fc:7f:c5:c9:a6:e1:ce:dd:3a:a9:5f:db:63:e0: e1:84:ed:48:a9:39:5b:b5:b6:ed:ec:3a:cb:aa:e6:4c:27:0d: 18:3c:a1:6b:f4:c3:70:3b:73:ef:2a:c5:a6:51:fc:42:98:3e: 97:7f:4c:c0:1e:de:e8:fb:95:d4:44:56:1f:2c:c9:d7:6a:0c: 4f:1c:46:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYwNjEzMDIzMzI0WhcNMjYwNjIwMDIzMzI0WjAYMRYwFAYD VQQDEw02YTJjYzE3NC1kMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRFl+zz2m1QIN3gyqcRY/I7Cs+aQjP4HTId4u1+sqKa/TrTNGXMTMYlUfRKy t1Pc/UFF9G8sRdbo01iYQBSY35Uq0ygNxpDY0zdzPqwVECEdJk7+e460qgCSymd0 v57Zm/dcfKsgcOFJGn4KvfQmsYyQ7iDOKS4aGwDE8XLYzjH/9Lc8dDd+sazMpB3D eQDHwt/kIHHCyosUbGizb1ZdkhDkBPUWcPdDk2DKiT8pdtXkpOWpBxI5hI44ECkH s4AnmUPhp4oIndiBGs7q1pGPcUKnmFA/TpW0Kup2xRwkBMzZijG4MV9B/5ygOL6n skzThlY+vkKzFP5dC5sZvR8NOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUtAUd4 8DDu9tEUUMWeRxUAliQ0MB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtuzxnom08Basrt2zmubAwMYiEnaO7t9NtTiFS2KyR0rR2238/8p94zbrzvki xTxBAIGi0yDQGgzubaDTywAhztykiXdsOYrhYI8k4pboV7S0tTXQ3T7/2w1h0vR3 NCqsCuVLx6OlyVik/j12ovvmRpqntKmABpKWASEauTUWE7RU5byZuUkDYo2TyUTO KSUk0xfBQtLnpzaC/Vnarm9Ia+UzqNa87shZHjlkEvTj0zM6rcanAx0buPx/xcmm 4c7dOqlf22Pg4YTtSKk5W7W27ew6y6rmTCcNGDyha/TDcDtz7yrFplH8Qpg+l39M wB7e6PuV1ERWHyzJ12oMTxxGQw== -----END CERTIFICATE-----Generated at Sat Jun 13 23:41:49 2026 by rpki-client