$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: DCeHqfan3Hl0NPyzgYffIXYNyk+zc7cdKaqpKPJ4YNw= Subject key identifier: 88:66:13:33:46:B9:B8:38:6F:97:7A:AE:40:BF:AB:0E:60:62:48:81 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0F10 Signing time: Thu 20 Aug 2026 17:35:10 +0000 Manifest this update: Thu 20 Aug 2026 17:35:09 +0000 Manifest next update: Thu 27 Aug 2026 17:35:09 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: S7zbSyh03una45a3EChDQP5UFQtf+GWtoI8F7qppMhc=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: KpHP3J6wffkQyJYpj3PgvrHuC90SNYDQDGnCB+spAtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Aug 20 17:35:09 2026 GMT Not After : Aug 27 17:35:09 2026 GMT Subject: CN=6a873acd-79e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:b6:d7:36:d9:3b:46:0c:40:63:7c:26:c3: 07:f0:1f:a2:18:63:0b:b2:45:83:65:b5:d9:45:c9: 85:0f:d2:82:7b:f2:e2:5a:1c:97:6c:5a:36:2f:4f: 4a:a2:bf:fa:3c:2e:62:c5:9c:ba:f8:42:07:8e:5a: 96:30:d8:8f:a5:36:d6:08:00:fd:43:cc:74:f2:89: da:46:e5:7a:ed:e3:88:f1:18:fd:ec:cd:5f:18:55: de:72:b6:ba:44:21:3d:8e:0f:19:f9:4b:f4:90:b6: 95:54:cc:5d:72:b2:c5:4a:51:bf:19:37:da:d9:2b: b0:10:e3:89:45:bd:13:b3:34:18:69:db:0a:32:99: 5c:68:7b:bc:8a:75:5c:31:f1:29:40:fd:69:d7:5e: f1:63:47:ae:cb:91:83:69:b2:65:02:3b:27:75:14: 55:4b:b1:1a:26:bf:25:75:01:86:1c:1c:f2:dd:54: 65:b0:b7:f1:7b:3c:74:8e:93:c5:4a:50:8b:d6:08: ca:78:54:d4:a6:c3:47:4e:01:7e:7a:b8:2a:cd:7a: c7:6c:45:78:29:7d:c9:53:c3:f6:8a:20:92:d2:be: d7:63:21:24:28:28:74:7f:72:2f:78:59:fc:4e:66: 04:99:9b:c3:28:9b:b8:12:e9:26:a8:e4:66:ec:bb: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:13:33:46:B9:B8:38:6F:97:7A:AE:40:BF:AB:0E:60:62:48:81 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d4:8b:24:b0:8e:42:22:5f:35:0c:04:d8:1a:77:9a:2d:ba: a8:99:ec:6d:91:9c:b0:83:54:65:dc:6b:ba:d0:75:27:ff:22: 81:c3:68:4b:43:c7:50:22:67:36:7c:ec:d4:cb:a7:a3:e0:b3: ba:99:2d:57:a4:3e:13:aa:f0:f3:4f:bf:66:b1:73:f7:ce:8a: d6:a6:90:48:22:98:2f:03:ab:5a:22:40:4f:99:c2:b3:14:ef: 53:20:f6:0d:24:9c:b7:51:e8:77:c0:99:4c:fa:40:a2:cc:3b: e5:dc:18:96:2c:f3:27:88:ae:fc:6d:e1:9c:1b:0a:f6:75:ef: fd:52:d9:57:97:f8:2b:ec:22:68:18:71:24:ce:48:7b:25:11: 5b:f4:11:b6:ab:22:a0:32:2e:40:65:10:a5:c2:b9:ba:e8:00: 5d:e1:e4:30:03:36:2d:b7:42:cf:33:23:8f:3b:36:a8:d9:4a: 6a:79:cd:b0:a6:69:a6:96:e9:04:65:65:31:a9:ab:fa:94:c7: 18:ea:33:f5:d0:9c:c2:35:3f:e4:eb:f1:3c:fd:59:51:f9:7c: 87:65:b2:a0:3c:5f:01:16:95:3e:59:5f:6c:a1:57:f6:56:22: fc:7a:37:54:3a:06:e6:f5:52:ec:16:4f:cc:f8:e3:56:c2:b7: 2f:f2:ec:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjYwODIwMTczNTA5WhcNMjYwODI3MTczNTA5WjAYMRYwFAYD VQQDEw02YTg3M2FjZC03OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyG21zbZO0YMQGN8JsMH8B+iGGMLskWDZbXZRcmFD9KCe/LiWhyXbFo2L09K or/6PC5ixZy6+EIHjlqWMNiPpTbWCAD9Q8x08onaRuV67eOI8Rj97M1fGFXecra6 RCE9jg8Z+Uv0kLaVVMxdcrLFSlG/GTfa2SuwEOOJRb0TszQYadsKMplcaHu8inVc MfEpQP1p117xY0euy5GDabJlAjsndRRVS7EaJr8ldQGGHBzy3VRlsLfxezx0jpPF SlCL1gjKeFTUpsNHTgF+ergqzXrHbEV4KX3JU8P2iiCS0r7XYyEkKCh0f3IveFn8 TmYEmZvDKJu4EukmqORm7LtAywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhmEzNG ubg4b5d6rkC/qw5gYkiBMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANNSLJLCOQiJfNQwE2Bp3mi26qJnsbZGcsINUZdxrutB1J/8igcNoS0PHUCJn Nnzs1Muno+CzupktV6Q+E6rw80+/ZrFz986K1qaQSCKYLwOrWiJAT5nCsxTvUyD2 DSSct1Hod8CZTPpAosw75dwYlizzJ4iu/G3hnBsK9nXv/VLZV5f4K+wiaBhxJM5I eyURW/QRtqsioDIuQGUQpcK5uugAXeHkMAM2LbdCzzMjjzs2qNlKannNsKZpppbp BGVlMamr+pTHGOoz9dCcwjU/5OvxPP1ZUfl8h2WyoDxfARaVPllfbKFX9lYi/Ho3 VDoG5vVS7BZPzPjjVsK3L/LsgQ== -----END CERTIFICATE-----Generated at Sat Aug 22 14:35:33 2026 by rpki-client