$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: kN0olG0CcfXE5TFA7Qfr+ZBQfGW1hGcSIDtRpVRXlp0= Subject key identifier: FF:54:30:22:B9:4E:72:DC:D3:59:80:A0:9B:40:17:F2:8D:02:A2:A8 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: AC Signing time: Wed 29 Jul 2026 08:37:19 +0000 Manifest this update: Wed 29 Jul 2026 08:37:18 +0000 Manifest next update: Wed 05 Aug 2026 08:37:18 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: 5SyW6tbxkFJ5SAqLGXFDDkSqzsyFJCdH+TI/9n26GJ0=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) 4: 995A12922D7911F185835B6B93833773.roa (hash: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 08:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Jul 29 08:37:18 2026 GMT Not After : Aug 5 08:37:18 2026 GMT Subject: CN=6a69bbbf-07fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:98:dc:57:75:ef:95:48:7f:b6:9d:35:1d: 18:59:cf:24:3c:43:9a:84:d2:87:25:df:6b:58:90: 93:6f:a8:27:8f:d3:c0:f0:47:d5:2b:14:4a:e2:06: cb:52:36:da:56:fa:7c:d8:2b:80:a6:c3:92:e6:17: c9:65:31:27:d4:a5:ec:42:2c:a5:9a:8d:32:b7:48: 31:f7:19:96:49:07:28:bc:0c:87:25:b5:f0:0f:50: dd:1e:94:4e:9e:a0:7c:cc:9d:2d:7d:56:20:fd:95: 1d:54:20:0b:bd:36:c5:a8:58:04:4b:fc:0f:a8:26: aa:c4:83:ed:72:e3:3c:67:62:99:00:25:ee:33:93: e3:b4:98:75:c1:72:2d:9b:21:c1:c7:f3:2a:21:5b: a3:a7:00:a3:be:fb:a8:12:2c:e5:32:99:ff:d2:f6: 6a:b9:83:9a:1a:bf:cc:d1:21:e5:fc:48:f2:95:74: 2e:be:b1:76:7e:10:de:50:c8:a8:4e:40:69:c2:ab: 5b:71:33:78:f6:ac:68:b7:2c:61:d7:5b:27:49:f8: 90:48:63:0d:37:7b:74:ae:f2:1f:d2:23:c8:70:61: 28:e2:43:34:48:3d:ed:fc:83:0e:6d:85:b6:07:f9: a7:3d:03:18:d1:8c:37:aa:67:d8:8b:70:12:b0:04: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:30:22:B9:4E:72:DC:D3:59:80:A0:9B:40:17:F2:8D:02:A2:A8 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:54:4e:3b:c4:8e:46:57:a1:92:e6:6b:25:c2:fd:57:66:2b: f2:eb:30:02:24:bf:77:76:4d:30:06:77:19:d0:93:cd:e6:59: 53:20:ca:29:50:65:a4:6f:b6:d4:8a:7a:71:d1:f8:95:d0:dd: 65:73:1d:5b:0f:ac:1c:21:7b:21:2f:66:c6:cd:01:10:44:a1: 4e:97:63:cd:6f:ea:c3:e3:0b:60:ff:83:18:e3:52:fb:42:2b: 47:bc:48:59:17:9b:c2:9b:c1:1f:75:dc:b9:62:dc:38:b8:d1: eb:f6:21:cb:8c:4d:a1:d9:e5:9c:8a:de:dc:45:e3:82:08:31: 37:86:53:a1:02:f4:ab:6c:85:19:d7:67:f6:a0:94:e1:67:01: be:66:6f:e6:bc:0d:22:a5:6b:ac:5c:e9:18:07:fa:57:0e:af: dd:ac:76:58:7a:9c:a3:5a:f5:69:0f:73:e8:14:54:a1:af:f3: d0:68:dd:c9:af:6d:86:55:5a:1f:6f:78:ba:80:4c:f5:c6:5e: 7d:8a:a9:8b:b6:0a:b5:eb:ff:82:1c:8a:21:a9:f0:6f:66:4d: d0:87:b3:09:40:1e:80:63:ee:cf:d6:e7:e9:b4:34:4a:f5:8e: 65:71:31:0b:ef:e9:60:19:46:d8:f2:e7:31:9b:f6:31:36:06: f9:94:dd:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYwNzI5MDgzNzE4WhcNMjYwODA1MDgzNzE4WjAYMRYwFAYD VQQDEw02YTY5YmJiZi0wN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi2GY3Fd175VIf7adNR0YWc8kPEOahNKHJd9rWJCTb6gnj9PA8EfVKxRK4gbL UjbaVvp82CuApsOS5hfJZTEn1KXsQiylmo0yt0gx9xmWSQcovAyHJbXwD1DdHpRO nqB8zJ0tfVYg/ZUdVCALvTbFqFgES/wPqCaqxIPtcuM8Z2KZACXuM5PjtJh1wXIt myHBx/MqIVujpwCjvvuoEizlMpn/0vZquYOaGr/M0SHl/EjylXQuvrF2fhDeUMio TkBpwqtbcTN49qxotyxh11snSfiQSGMNN3t0rvIf0iPIcGEo4kM0SD3t/IMObYW2 B/mnPQMY0Yw3qmfYi3ASsATdEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9UMCK5 TnLc01mAoJtAF/KNAqKoMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArVROO8SORlehkuZrJcL9V2Yr8uswAiS/d3ZNMAZ3GdCTzeZZUyDKKVBlpG+2 1Ip6cdH4ldDdZXMdWw+sHCF7IS9mxs0BEEShTpdjzW/qw+MLYP+DGONS+0IrR7xI WRebwpvBH3XcuWLcOLjR6/Yhy4xNodnlnIre3EXjgggxN4ZToQL0q2yFGddn9qCU 4WcBvmZv5rwNIqVrrFzpGAf6Vw6v3ax2WHqco1r1aQ9z6BRUoa/z0Gjdya9thlVa H294uoBM9cZefYqpi7YKtev/ghyKIanwb2ZN0IezCUAegGPuz9bn6bQ0SvWOZXEx C+/pYBlG2PLnMZv2MTYG+ZTdog== -----END CERTIFICATE-----Generated at Wed Jul 29 10:17:11 2026 by rpki-client