$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft File: zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json) Hash identifier: t1llyFaKX3oSuDCJHozw9bALWpC+3BA/evxmU6dazF8= Subject key identifier: 10:8B:28:C3:89:CE:CF:BD:45:34:A8:F1:47:18:D5:66:89:1B:04:34 Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 Certificate issuer: /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft Manifest number: 0280 Signing time: Wed 19 Aug 2026 02:27:06 +0000 Manifest this update: Wed 19 Aug 2026 02:27:06 +0000 Manifest next update: Wed 26 Aug 2026 02:27:06 +0000 Files and hashes: 1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: DkqZwq/KJpas7J8/5lyytuo7ZXy7P7yIWSXYxXSYCIo=) 2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: w0oQeZggvbfthkL7cxUDIxqBwGev5s767WcKvkpmAZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71 Validity Not Before: Aug 19 02:27:06 2026 GMT Not After : Aug 26 02:27:06 2026 GMT Subject: CN=6a85147a-49f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:01:b5:a4:12:8e:2c:e7:b4:f0:8d:f5:85: fa:51:95:dd:af:a1:32:68:c3:58:ef:4d:a4:57:b5: 48:70:6f:e5:78:08:40:37:f4:4b:ea:f6:fa:b3:6d: 37:a0:aa:da:7a:b8:02:3e:c5:14:8c:19:f5:fb:ba: 4d:77:e4:26:ad:e2:a2:d4:6e:70:f8:e9:b7:f1:24: 9a:0e:ca:77:aa:8f:50:b9:dd:dc:b6:ea:bf:60:ee: 32:27:a7:1d:15:5f:7b:d6:81:22:42:b4:92:69:c2: 07:91:3b:bc:86:4f:9b:f6:e9:bd:a7:64:d9:c9:ba: f8:7c:64:01:c3:fc:5b:7a:99:45:34:54:c8:7f:84: 03:33:a1:26:97:c9:cc:a2:11:d8:fe:15:89:3b:ec: 21:5b:1b:bf:fe:a7:3e:0d:10:29:f9:53:de:6b:8a: a0:33:d9:95:f4:7c:6a:9e:94:65:0c:ff:e1:da:04: fb:d0:ef:22:3e:b1:52:cc:c5:cd:c8:72:41:49:1b: e3:29:ce:85:04:98:a4:31:3a:7a:99:75:fe:04:0a: 1a:51:cc:8d:68:bf:17:ef:71:dd:0f:10:c7:80:66: 44:74:87:8e:22:73:6f:c3:df:20:bd:f4:0f:42:64: 96:e0:2f:e5:ba:25:53:2f:4c:3d:8a:30:b3:4b:e8: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:28:C3:89:CE:CF:BD:45:34:A8:F1:47:18:D5:66:89:1B:04:34 X509v3 Authority Key Identifier: keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:39:91:a8:55:bb:9f:02:09:b7:23:62:9c:57:6a:33:1b:e2: 2e:cc:cb:86:6d:19:22:fd:b7:59:fa:9e:73:ab:93:8c:c2:37: b5:a5:ef:ed:d1:34:24:be:89:ec:45:9c:5b:e7:d7:df:9a:2e: 57:07:9e:79:b8:68:7a:3f:0d:c5:7d:06:c3:4f:3d:e9:48:d7: fd:91:68:72:1b:16:e8:98:08:9b:d4:08:8c:48:2c:c1:cd:97: 6b:7f:df:58:4d:e9:34:07:2c:bf:8f:45:ef:07:ad:0b:3f:53: 12:26:6b:00:a2:5a:19:a8:ad:0a:33:4f:79:be:a9:c5:c0:77: ec:56:d3:61:60:05:a6:e2:56:4b:f0:66:fa:cd:72:84:e5:ad: fa:b0:69:75:83:2e:a1:81:6d:f7:de:d6:06:75:70:ee:c4:6d: 64:ab:c3:3c:44:ea:e8:34:69:a4:d5:1e:ba:b2:4c:19:da:14: 24:4d:fd:ff:b2:c6:e8:17:75:b5:17:67:16:90:c5:93:12:e4: 49:3b:bd:69:4f:61:eb:82:55:b2:f7:0b:fe:3d:53:62:1f:41: 88:f3:31:95:25:3f:fa:c8:8f:ff:e6:52:3a:1b:d5:0f:3e:22: 9e:70:6b:90:a0:b8:e0:a8:fc:1f:39:70:f2:7b:6d:57:39:5d: 5d:57:dc:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0 ODRCRUVFNzEwHhcNMjYwODE5MDIyNzA2WhcNMjYwODI2MDIyNzA2WjAYMRYwFAYD VQQDEw02YTg1MTQ3YS00OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujwBtaQSjizntPCN9YX6UZXdr6EyaMNY702kV7VIcG/leAhAN/RL6vb6s203 oKraergCPsUUjBn1+7pNd+QmreKi1G5w+Om38SSaDsp3qo9Qud3ctuq/YO4yJ6cd FV971oEiQrSSacIHkTu8hk+b9um9p2TZybr4fGQBw/xbeplFNFTIf4QDM6Eml8nM ohHY/hWJO+whWxu//qc+DRAp+VPea4qgM9mV9HxqnpRlDP/h2gT70O8iPrFSzMXN yHJBSRvjKc6FBJikMTp6mXX+BAoaUcyNaL8X73HdDxDHgGZEdIeOInNvw98gvfQP QmSW4C/luiVTL0w9ijCzS+iELwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCLKMOJ zs+9RTSo8UcY1WaJGwQ0MB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03 bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfjmRqFW7nwIJtyNinFdqMxviLszLhm0ZIv23Wfqec6uTjMI3taXv7dE0JL6J 7EWcW+fX35ouVweeebhoej8NxX0Gw0896UjX/ZFochsW6JgIm9QIjEgswc2Xa3/f WE3pNAcsv49F7wetCz9TEiZrAKJaGaitCjNPeb6pxcB37FbTYWAFpuJWS/Bm+s1y hOWt+rBpdYMuoYFt997WBnVw7sRtZKvDPETq6DRppNUeurJMGdoUJE39/7LG6Bd1 tRdnFpDFkxLkSTu9aU9h64JVsvcL/j1TYh9BiPMxlSU/+siP/+ZSOhvVDz4innBr kKC44Kj8Hzlw8nttVzldXVfckw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:32:35 2026 by rpki-client