$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json) Hash identifier: QJpruC8bzxZysz043iSckVpslAF8E48+XBuPpX3j1Dw= Subject key identifier: D9:7C:34:45:03:14:79:60:3F:16:3D:E1:89:3C:1A:EC:6F:C7:16:30 Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft Manifest number: 7B Signing time: Tue 23 Jun 2026 08:00:00 +0000 Manifest this update: Tue 23 Jun 2026 07:59:59 +0000 Manifest next update: Tue 30 Jun 2026 07:59:59 +0000 Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: iEMg0W2fbMOXo7DKUpl34IlSsmf5O/kE16Dm1v8R9uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 07:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Validity Not Before: Jun 23 07:59:59 2026 GMT Not After : Jun 30 07:59:59 2026 GMT Subject: CN=6a3a3d00-5411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:e3:e4:93:a5:9e:97:1d:a4:4d:34:40:35: 8f:ad:d2:e5:3b:05:75:14:86:8b:c3:e6:f1:27:af: 28:dc:50:7b:5b:2f:c5:d7:00:a0:fb:23:4b:35:20: e6:5d:7f:3f:25:64:6b:c7:28:2e:71:f6:a2:e4:73: 4f:48:63:0d:36:4d:53:fd:74:65:03:1a:e6:a9:aa: 27:43:b8:a3:f5:09:e0:71:04:b7:e8:83:b6:4c:d5: 26:75:5b:68:f3:52:3a:f9:0b:54:fb:7b:01:b4:51: ba:eb:17:b5:87:d2:81:ee:e8:72:ed:ab:95:d3:4a: e2:5d:7b:66:84:d5:b2:55:58:32:3b:17:aa:74:68: 41:3e:d6:ec:00:9f:2c:d7:1c:64:16:59:76:38:82: 91:fd:5f:ef:47:41:bf:b6:f7:7f:e1:54:7b:3d:f9: 60:45:43:4d:68:ff:32:ab:c5:f0:82:68:58:f8:f5: 95:f1:4a:12:37:89:29:f3:5a:6a:bd:4a:7c:b3:d9: 16:7c:75:6c:21:23:a2:b0:0e:28:7a:32:ee:e6:1c: 17:50:47:dd:4a:ef:93:b5:1c:d3:4d:87:b6:7e:20: 5a:f8:1f:d9:ba:32:76:48:2f:99:41:53:63:bd:ce: c0:86:d8:39:98:66:dd:d5:bb:88:00:1b:6f:c6:4a: ae:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7C:34:45:03:14:79:60:3F:16:3D:E1:89:3C:1A:EC:6F:C7:16:30 X509v3 Authority Key Identifier: keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f0:c5:0a:b1:ca:1a:1c:b4:4c:d1:39:82:7e:36:b7:8a:9a: 04:82:74:ea:d4:6c:28:b2:58:b1:ad:55:32:d5:4b:2b:de:e5: 4e:03:59:4b:c7:4a:b3:ef:cb:e4:2c:92:e7:2c:2c:c8:36:b8: b8:91:14:b1:52:9e:ec:74:eb:02:e2:22:46:18:b9:6d:d5:e7: b3:2a:fd:97:14:be:d5:e7:cb:55:a6:5d:e5:0b:e3:51:54:d6: fc:14:99:26:b8:77:98:9d:57:0f:31:34:35:c8:4e:da:9d:ac: 20:08:6b:78:6f:4e:8a:a9:83:33:c7:51:48:8c:0e:16:cd:55: 0c:95:78:1d:a2:74:51:40:7a:dd:c6:76:1a:41:93:01:13:ee: 56:72:ab:f4:5b:4c:ec:81:83:93:75:a5:28:b7:de:33:dd:5e: 9d:9c:26:f3:78:26:b1:74:a7:ee:ce:75:20:01:e7:ae:6b:b6: bc:50:05:17:6d:a8:2b:67:57:38:9b:1e:90:82:f4:8f:9a:22: 91:5e:e5:a7:ba:db:e7:24:1f:c2:af:c6:8d:fb:ac:36:52:3a: b5:82:4a:14:29:21:40:24:a7:3f:d1:c0:c3:b0:09:23:28:a3: 1b:5d:9d:06:f1:59:eb:50:53:49:2c:5e:5d:dd:d6:4b:7b:48: f8:64:91:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTg1MzExMC8GA1UEBRMoRkQ5MTQ3QUVGNkEzMzBEMThERDRDOUNGRDg2NDJGMEVE QUE3QjkwNzAeFw0yNjA2MjMwNzU5NTlaFw0yNjA2MzAwNzU5NTlaMBgxFjAUBgNV BAMTDTZhM2EzZDAwLTU0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4X+Pkk6Welx2kTTRANY+t0uU7BXUUhovD5vEnryjcUHtbL8XXAKD7I0s1IOZd fz8lZGvHKC5x9qLkc09IYw02TVP9dGUDGuapqidDuKP1CeBxBLfog7ZM1SZ1W2jz Ujr5C1T7ewG0UbrrF7WH0oHu6HLtq5XTSuJde2aE1bJVWDI7F6p0aEE+1uwAnyzX HGQWWXY4gpH9X+9HQb+293/hVHs9+WBFQ01o/zKrxfCCaFj49ZXxShI3iSnzWmq9 Snyz2RZ8dWwhI6KwDih6Mu7mHBdQR91K75O1HNNNh7Z+IFr4H9m6MnZIL5lBU2O9 zsCG2DmYZt3Vu4gAG2/GSq4pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2Xw0RQMU eWA/Fj3hiTwa7G/HFjAwHwYDVR0jBBgwFoAU/ZFHrvajMNGN1MnP2GQvDtqnuQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODUzLzFBQjE1QjhDQkRC MDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1pGSHJ2YWpNTkdOMU1uUDJHUXZEdHFudVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx ODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5H TjFNblAyR1F2RHRxbnVRYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCm8MUKscoaHLRM0TmCfja3ipoEgnTq1GwoslixrVUy1Usr3uVOA1lLx0qz78vk LJLnLCzINri4kRSxUp7sdOsC4iJGGLlt1eezKv2XFL7V58tVpl3lC+NRVNb8FJkm uHeYnVcPMTQ1yE7anawgCGt4b06KqYMzx1FIjA4WzVUMlXgdonRRQHrdxnYaQZMB E+5Wcqv0W0zsgYOTdaUot94z3V6dnCbzeCaxdKfuznUgAeeua7a8UAUXbagrZ1c4 mx6QgvSPmiKRXuWnutvnJB/Cr8aN+6w2Ujq1gkoUKSFAJKc/0cDDsAkjKKMbXZ0G 8VnrUFNJLF5d3dZLe0j4ZJGw -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:33 2026 by rpki-client