$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: mP4poZw6cfAubcFhQzd++WhUDScAvck8TwBjV3OIecU= Subject key identifier: 16:A4:01:75:5E:19:95:33:8B:4C:06:B1:67:1E:1C:45:A7:4C:EB:D4 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0F09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0EF9 Signing time: Mon 06 Jul 2026 17:58:10 +0000 Manifest this update: Mon 06 Jul 2026 17:58:09 +0000 Manifest next update: Mon 13 Jul 2026 17:58:09 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: qyzQV9YVmus30Fsv106aHeg3mL7y4G40o4XeZDw01VM=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: KpHP3J6wffkQyJYpj3PgvrHuC90SNYDQDGnCB+spAtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 17:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3849 (0xf09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Jul 6 17:58:09 2026 GMT Not After : Jul 13 17:58:09 2026 GMT Subject: CN=6a4becb2-53ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:6a:ec:60:ef:9f:87:08:cc:26:48:7d:be: 0f:6a:45:5c:96:9b:88:f3:4e:59:8b:43:1a:b6:e7: a6:f3:cf:dc:00:34:29:e2:fa:85:41:63:48:b5:ba: 4a:04:31:f5:16:f9:6a:80:02:73:ab:5c:21:96:34: 52:ef:63:b3:21:4d:46:82:c7:a0:80:23:32:80:a9: ce:3d:8b:55:2c:a4:8d:36:3c:7c:bc:3a:5f:41:7a: d2:d6:3c:b3:5c:d9:d0:6a:3c:5d:e2:67:74:17:dc: 5f:5f:1e:51:11:de:d2:86:33:a6:e5:cd:a3:9d:01: 9c:d4:d8:e2:a6:d7:dc:f8:e9:00:b8:ed:b0:0c:ab: af:a7:ed:cd:14:10:2a:d2:d3:1f:49:e9:90:6d:24: 8c:ae:92:44:d5:79:2d:83:4c:7e:bf:7e:b4:37:b8: 6c:24:40:db:fd:2f:16:25:6f:97:d2:2f:05:b7:54: ab:74:51:2f:2f:76:97:a3:0f:3b:4d:16:bb:67:21: f6:3c:2d:5e:57:bd:eb:5e:eb:2d:3d:ab:f9:a5:6f: 67:cb:f4:b9:ea:65:f9:36:87:d9:64:20:64:2a:75: 77:fd:24:8b:2f:46:f5:7b:55:20:98:96:c9:5b:de: 4e:6b:a6:f2:1a:d1:31:19:2f:33:59:a3:1d:7f:2d: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A4:01:75:5E:19:95:33:8B:4C:06:B1:67:1E:1C:45:A7:4C:EB:D4 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cb:1a:1a:e8:11:f6:8d:81:e6:dd:04:15:14:eb:11:2d:d8: 7d:82:0d:48:e2:5c:cf:ff:cd:3a:86:0f:83:90:f0:c1:00:93: 46:83:74:16:43:1c:05:5b:2b:cf:77:d6:58:c3:21:82:04:a3: 96:0d:6d:21:de:5a:7b:71:25:c0:22:f4:4f:92:d6:82:b2:fc: 4b:09:f7:22:da:01:11:e0:d9:0d:68:20:c2:71:cc:2e:a0:63: 69:48:c9:ee:80:e7:fe:16:4b:39:b1:9a:46:f5:dd:3e:70:39: cf:d8:79:b0:04:da:04:ac:58:37:4e:75:20:33:91:56:61:48: 35:f5:9b:28:20:8b:f0:32:84:b0:ff:94:5a:47:75:af:ba:e8: 00:0e:cb:08:6e:34:59:db:e3:52:e7:ee:80:73:85:70:fa:a5: 3a:0e:60:c4:38:04:ee:be:6f:13:b0:9c:32:f3:76:fb:93:0e: 49:aa:6e:b7:23:b5:09:7f:51:a3:a7:e1:7d:b6:95:98:7c:b4: e8:9e:36:8e:4c:09:14:6a:81:d0:33:01:b9:5c:4e:21:a8:ef: 0d:75:c3:3b:42:23:42:5a:8a:3f:c8:b1:54:ba:4b:d3:4b:dc: 3a:ef:8a:93:88:01:33:43:c0:7c:14:0b:e5:85:14:c4:9c:90: 84:9d:98:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjYwNzA2MTc1ODA5WhcNMjYwNzEzMTc1ODA5WjAYMRYwFAYD VQQDEw02YTRiZWNiMi01M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlpq7GDvn4cIzCZIfb4PakVclpuI805Zi0Matuem88/cADQp4vqFQWNItbpK BDH1FvlqgAJzq1whljRS72OzIU1GgseggCMygKnOPYtVLKSNNjx8vDpfQXrS1jyz XNnQajxd4md0F9xfXx5REd7ShjOm5c2jnQGc1Njiptfc+OkAuO2wDKuvp+3NFBAq 0tMfSemQbSSMrpJE1Xktg0x+v360N7hsJEDb/S8WJW+X0i8Ft1SrdFEvL3aXow87 TRa7ZyH2PC1eV73rXustPav5pW9ny/S56mX5NofZZCBkKnV3/SSLL0b1e1UgmJbJ W95Oa6byGtExGS8zWaMdfy1phQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBakAXVe GZUzi0wGsWceHEWnTOvUMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZcsaGugR9o2B5t0EFRTrES3YfYINSOJcz//NOoYPg5DwwQCTRoN0FkMcBVsr z3fWWMMhggSjlg1tId5ae3ElwCL0T5LWgrL8Swn3ItoBEeDZDWggwnHMLqBjaUjJ 7oDn/hZLObGaRvXdPnA5z9h5sATaBKxYN051IDORVmFINfWbKCCL8DKEsP+UWkd1 r7roAA7LCG40WdvjUufugHOFcPqlOg5gxDgE7r5vE7CcMvN2+5MOSaputyO1CX9R o6fhfbaVmHy06J42jkwJFGqB0DMBuVxOIajvDXXDO0IjQlqKP8ixVLpL00vcOu+K k4gBM0PAfBQL5YUUxJyQhJ2YbQ== -----END CERTIFICATE-----Generated at Tue Jul 7 15:47:48 2026 by rpki-client