$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: PEeHXqHStp89nQeX5aSjc/uyO3yqFFloAIlyz+8iGjI= Subject key identifier: B8:08:BE:00:3B:BF:29:96:BA:D1:2C:FD:DD:7E:C9:7B:65:1D:C7:D6 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1243 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1208 Signing time: Tue 28 Jul 2026 17:14:14 +0000 Manifest this update: Tue 28 Jul 2026 17:14:13 +0000 Manifest next update: Tue 04 Aug 2026 17:14:13 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: dT2YveRiV9RJsArL5WFX13jcbLX1ABLiEVcqq+rInM8=) 2: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=) 3: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: 8sR59Lp6fQc79JgAgqC1t1+yUKy4/xiWteMrpfGnLFs=) 4: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) 5: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4675 (0x1243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Jul 28 17:14:13 2026 GMT Not After : Aug 4 17:14:13 2026 GMT Subject: CN=6a68e366-b8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:36:02:73:ea:b3:82:7e:7f:fc:0b:4e:1c: 20:98:a7:b3:82:81:c0:75:e7:96:ba:e7:f7:7a:42: 9a:7f:e8:6a:27:94:d5:74:07:4e:07:84:6c:bd:e8: a5:4d:5e:bd:dd:99:fe:ec:0d:55:9d:7c:3c:b0:43: 2d:13:32:a0:91:d2:3a:7f:4b:3c:1f:6e:fc:81:e2: 86:2b:a0:cd:2f:e5:12:4a:00:23:8c:d0:79:13:3b: 91:f4:e8:e1:0d:94:ec:e7:5f:c4:61:71:d4:42:90: b6:36:f0:1a:53:8b:e2:ea:13:f9:46:d2:2f:5e:aa: cf:50:be:b6:1e:fe:c7:d6:c6:bc:4d:91:eb:2b:85: 15:79:11:b6:83:4b:d4:ab:f5:5c:02:54:e0:4d:4c: 06:fb:12:b3:82:89:d1:1b:34:5f:ed:8e:20:3a:f4: d7:0c:d6:fa:65:89:c1:09:c1:37:d9:1d:52:fd:1c: ec:ff:47:e7:70:07:44:94:5c:35:47:f3:fe:2b:cf: 84:26:1d:1c:02:ed:9e:c4:38:9d:63:e6:b7:56:79: 23:cf:7b:70:4d:11:f8:65:04:ec:20:65:f2:1a:08: 36:dd:7e:b0:df:6c:a3:5c:1c:8b:a6:2e:b6:91:cd: 77:7a:92:ea:42:a2:71:bf:a9:7b:4e:0a:f5:5b:d7: 19:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:08:BE:00:3B:BF:29:96:BA:D1:2C:FD:DD:7E:C9:7B:65:1D:C7:D6 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:6f:9b:db:b6:53:d9:09:df:33:1d:7a:0a:19:bf:4b:09:61: 5b:56:40:4b:47:b9:3d:11:85:ca:cd:21:bd:c2:65:cd:73:4f: d1:99:e5:88:00:a0:62:8a:18:ca:96:51:a0:dc:d7:af:28:01: 27:90:6d:52:0d:e9:e3:ff:4e:76:2c:52:4b:bd:8a:c8:b7:b7: 5f:d9:8b:5c:6b:dd:7a:4b:de:02:b7:dd:5a:86:07:2b:d4:d9: 4e:7d:48:28:ec:28:34:ab:c4:c4:36:de:d0:ec:1c:bf:0d:79: 38:cc:84:3f:f5:86:78:d5:4d:aa:5e:33:d8:ba:05:2e:52:5b: 6d:6c:5d:f9:71:36:68:7d:31:46:d3:50:62:a6:89:8a:3e:1c: 12:50:76:01:7d:86:38:6c:73:26:7a:26:b8:f7:5a:c7:bb:94: d1:92:c6:3e:95:53:b0:7d:3b:aa:80:0a:65:c2:c9:f8:b2:42: f2:52:49:74:c4:86:63:4c:18:fe:a8:af:77:45:e4:18:40:03: fe:77:62:de:93:1a:a3:b4:a6:e9:15:14:a2:d3:2e:dd:d7:9a: 32:0d:fb:ab:08:8c:d2:1c:37:3c:58:82:ce:c1:7d:6d:cd:99: af:9e:b5:af:59:9e:87:86:36:23:bf:30:53:0f:1a:a9:e1:1a: bf:13:ee:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwNzI4MTcxNDEzWhcNMjYwODA0MTcxNDEzWjAYMRYwFAYD VQQDEw02YTY4ZTM2Ni1iOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRs2AnPqs4J+f/wLThwgmKezgoHAdeeWuuf3ekKaf+hqJ5TVdAdOB4Rsveil TV693Zn+7A1VnXw8sEMtEzKgkdI6f0s8H278geKGK6DNL+USSgAjjNB5EzuR9Ojh DZTs51/EYXHUQpC2NvAaU4vi6hP5RtIvXqrPUL62Hv7H1sa8TZHrK4UVeRG2g0vU q/VcAlTgTUwG+xKzgonRGzRf7Y4gOvTXDNb6ZYnBCcE32R1S/Rzs/0fncAdElFw1 R/P+K8+EJh0cAu2exDidY+a3Vnkjz3twTRH4ZQTsIGXyGgg23X6w32yjXByLpi62 kc13epLqQqJxv6l7Tgr1W9cZZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgIvgA7 vymWutEs/d1+yXtlHcfWMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIG+b27ZT2QnfMx16Chm/SwlhW1ZAS0e5PRGFys0hvcJlzXNP0ZnliACgYooY ypZRoNzXrygBJ5BtUg3p4/9OdixSS72KyLe3X9mLXGvdekveArfdWoYHK9TZTn1I KOwoNKvExDbe0Owcvw15OMyEP/WGeNVNql4z2LoFLlJbbWxd+XE2aH0xRtNQYqaJ ij4cElB2AX2GOGxzJnomuPdax7uU0ZLGPpVTsH07qoAKZcLJ+LJC8lJJdMSGY0wY /qivd0XkGEAD/ndi3pMao7Sm6RUUotMu3deaMg37qwiM0hw3PFiCzsF9bc2Zr561 r1meh4Y2I78wUw8aqeEavxPu7g== -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:07 2026 by rpki-client