$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: lPHtjgXT9AKPoulZ2m/pj1TNpaxrvTk8/MC3eevYrlA= Subject key identifier: 9D:23:E7:46:B2:1F:0B:5F:21:2E:CF:9B:47:BC:1E:12:A2:38:57:60 Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1F24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1EF0 Signing time: Tue 18 Aug 2026 16:08:36 +0000 Manifest this update: Tue 18 Aug 2026 16:08:36 +0000 Manifest next update: Tue 25 Aug 2026 16:08:36 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: xoqyjEqqh8ik5wtcXCIFOzXCn+EXAyorlWWL+9w0+oo=) 2: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=) 3: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=) 4: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=) 5: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=) 6: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7972 (0x1f24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Aug 18 16:08:36 2026 GMT Not After : Aug 25 16:08:36 2026 GMT Subject: CN=6a848384-fd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:f6:de:55:74:e0:8b:8b:e7:88:7e:38:b2: a8:1c:b3:51:ce:0c:b2:bb:e2:5f:95:75:df:2d:75: 98:ca:3b:0b:4c:15:70:f4:11:ab:67:ab:f5:37:06: 2c:db:6d:7b:63:b7:b3:f9:61:06:c4:d3:ea:54:a1: b0:29:88:3b:44:8b:71:7c:a2:31:c8:34:95:49:3e: e9:7a:f7:c6:1b:6d:f6:2b:2a:b1:df:59:8b:2c:8c: f0:a0:a7:d2:60:50:a0:46:74:a5:56:1e:d0:0a:d4: 9b:3d:17:57:c6:1b:ed:1b:30:89:7f:8e:c3:47:c3: f1:9d:8f:b8:2b:0e:17:6a:af:c1:c9:28:fa:01:bb: 8d:7a:04:37:07:14:93:74:ad:0e:cc:ec:12:7b:13: 63:c0:ab:c2:a2:44:41:41:69:3c:74:67:91:32:44: 01:00:fb:63:67:de:2f:fd:0c:fe:87:2f:48:9c:d8: be:04:26:cd:38:2d:57:6f:f0:af:b6:ce:23:c9:a1: 04:16:41:37:1a:ff:b1:a6:20:9d:5a:22:14:14:f3: da:66:2f:c6:1c:e7:d1:1c:a0:43:50:29:1c:c9:f6: cb:26:97:92:54:08:9f:00:02:c5:f9:ca:28:b8:2e: a6:1b:12:1f:a2:9d:f3:cc:43:80:12:10:5a:1a:2c: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:23:E7:46:B2:1F:0B:5F:21:2E:CF:9B:47:BC:1E:12:A2:38:57:60 X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:33:c1:73:68:93:3f:59:6e:13:7d:0a:0f:96:1b:92:91: 13:d6:10:79:dc:17:2e:cf:ef:be:74:97:4c:2a:b8:74:80:6d: 71:d9:b1:5c:28:c1:85:98:0b:87:dd:93:60:6b:4e:bf:37:ab: 07:56:43:90:6b:d7:21:b4:da:c7:81:fe:24:9a:5b:28:4f:43: a1:39:1d:1f:cb:88:cb:0c:da:7b:9b:82:dd:7c:59:08:49:54: 84:6b:37:1b:e7:3c:3b:82:82:80:7f:ee:b5:5f:16:a0:28:c3: f2:df:bc:2d:52:c1:bf:f8:71:d9:5f:94:8d:a7:b4:6b:50:ee: 75:00:0f:dd:b5:9f:58:5c:54:65:af:a2:92:f6:ea:9d:ad:39: 22:62:59:6b:33:4f:cd:f6:cd:b4:86:69:ee:30:b5:36:9b:7b: 76:7c:38:37:d9:0b:e3:a9:34:6f:92:48:1e:66:71:e2:5b:26: b9:28:00:67:7a:9d:5b:6f:16:20:a4:0b:87:09:e6:dc:92:a3: 04:a0:29:f8:1e:98:1e:f7:0c:15:d3:14:a2:f5:23:5e:7c:d0: 0c:6f:53:a4:66:3e:e3:a8:bc:46:5a:5c:4e:3d:04:a6:7d:5d: 46:ac:4a:85:5f:9b:a0:9a:51:7a:41:8e:56:65:05:e9:c5:08: 97:cb:e5:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjYwODE4MTYwODM2WhcNMjYwODI1MTYwODM2WjAYMRYwFAYD VQQDEw02YTg0ODM4NC1mZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmI723lV04IuL54h+OLKoHLNRzgyyu+JflXXfLXWYyjsLTBVw9BGrZ6v1NwYs 2217Y7ez+WEGxNPqVKGwKYg7RItxfKIxyDSVST7pevfGG232Kyqx31mLLIzwoKfS YFCgRnSlVh7QCtSbPRdXxhvtGzCJf47DR8PxnY+4Kw4Xaq/BySj6AbuNegQ3BxST dK0OzOwSexNjwKvCokRBQWk8dGeRMkQBAPtjZ94v/Qz+hy9InNi+BCbNOC1Xb/Cv ts4jyaEEFkE3Gv+xpiCdWiIUFPPaZi/GHOfRHKBDUCkcyfbLJpeSVAifAALF+coo uC6mGxIfop3zzEOAEhBaGixVuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0j50ay HwtfIS7Pm0e8HhKiOFdgMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK6EzwXNokz9ZbhN9Cg+WG5KRE9YQedwXLs/vvnSXTCq4dIBtcdmxXCjBhZgL h92TYGtOvzerB1ZDkGvXIbTax4H+JJpbKE9DoTkdH8uIywzae5uC3XxZCElUhGs3 G+c8O4KCgH/utV8WoCjD8t+8LVLBv/hx2V+Ujae0a1DudQAP3bWfWFxUZa+ikvbq na05ImJZazNPzfbNtIZp7jC1Npt7dnw4N9kL46k0b5JIHmZx4lsmuSgAZ3qdW28W IKQLhwnm3JKjBKAp+B6YHvcMFdMUovUjXnzQDG9TpGY+46i8RlpcTj0Epn1dRqxK hV+boJpRekGOVmUF6cUIl8vlJg== -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:18 2026 by rpki-client