$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: A0R6FvTrMdrWXwXttY80uQG9JH0gDiC58rMPHEOrPwo= Subject key identifier: BF:1B:6D:38:41:63:C9:E9:99:07:70:1C:CB:20:23:3A:FC:6F:ED:04 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: A2AE Signing time: Sun 26 Jul 2026 14:31:41 +0000 Manifest this update: Sun 26 Jul 2026 14:31:40 +0000 Manifest next update: Sun 02 Aug 2026 14:31:40 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: CzC6lrb7FLnA32TYoWEcl9icklBYnuOM9iGLDgXXfSM=) 2: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: H0mHu5foM/0Hr0y7LJoGoqxfCYM8HtP6k45eEW8ACTA=) 3: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: noBHpHcIG4F8PCP16+JaDrGG+bfZLo/xyhvvRrrAwbc=) 4: 191363A69DD911EC99D91668C4F9AE02.roa (hash: 9ywt3YgdGMPifjHDU8GOY5yDR3rcKL5WS/6sXlZSwSk=) 5: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=) 6: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: YKfVc/1kWhtiSN/JgbbvpApeCbmTeJDdHpPmRnKp0f8=) 7: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=) 8: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: gxt7j0/qgDHDY4eOy9nTFq4yiN1wN4Azb/F6N/jLPQo=) 9: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzmw6JQnHsEPxWEaFvMAvmSNfBwkvf6++ngi0TT5BK0=) 10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: lhNS+ojnip3W9c6D2+vK5Jj0fFUXb3jMTgYthGAVWGE=) 11: E38D6798533911F18A27312FCB833773.roa (hash: gk5/uS+O/CM+N18jIFqFxpCeyO2gku+HcapU0YVTG5c=) 12: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: IDu51NoCXLX0fGSXN0JfKGuNOGTw6RNrNximD3D412U=) 13: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: OXGvG47egb4PF/onwPC9e0QERfLfAY+ZqPCLmsNj8TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 14:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7127 (0x1bd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Jul 26 14:31:40 2026 GMT Not After : Aug 2 14:31:40 2026 GMT Subject: CN=6a661a4d-4d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:9d:df:a8:81:f9:e8:59:b5:69:c3:c6:f8: 4e:da:96:0f:37:8f:7f:57:a2:65:b4:ae:7f:0e:23: 67:b1:d8:af:62:4a:d5:f8:95:0c:f6:37:6c:a5:88: 91:d2:de:ea:9a:8c:52:35:cd:5d:b9:6f:51:80:bf: d2:03:3a:1c:1f:40:c6:ee:7f:fe:16:f1:d9:f8:be: 07:35:d7:7d:17:bf:5c:3b:8c:c6:3c:20:2b:64:31: 13:20:dd:93:07:78:c8:1a:70:1e:c0:ed:d6:e8:11: 98:dc:c4:0e:b6:41:19:99:51:3a:a1:55:69:3c:78: 3c:4e:df:73:4c:c5:b5:d3:49:3e:a4:87:5f:1b:84: da:da:52:28:ac:20:6c:f4:1e:22:46:3d:20:ed:8d: 53:e4:c1:6b:05:86:f0:15:46:4b:af:b2:0c:08:2b: cd:8b:80:06:1f:4f:4c:f8:1b:7f:8b:cd:9a:03:86: b0:93:14:6f:5c:37:74:4a:ea:fa:65:b0:d5:e4:2c: 48:07:45:61:17:39:07:50:07:82:31:21:c3:81:80: fb:1c:64:65:b4:11:32:35:b1:45:6b:81:73:24:a4: 21:3b:1b:08:bc:4a:a7:3b:95:f6:ac:04:fb:22:48: 4b:4c:bf:3c:5c:46:e2:72:ee:ab:3b:3b:64:40:eb: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:6D:38:41:63:C9:E9:99:07:70:1C:CB:20:23:3A:FC:6F:ED:04 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:69:49:8e:2d:dc:04:4a:e4:69:6b:c8:98:d5:f5:e4:3d:73: a8:ee:d8:11:42:95:20:ed:09:29:66:c7:89:88:b4:37:02:87: f9:43:f4:61:0d:07:16:6e:08:47:16:7d:6a:e1:c8:0b:55:f3: d5:b5:34:58:2f:08:d8:11:97:06:31:3a:fb:21:58:fb:4f:74: 51:78:d5:2e:6e:83:83:00:90:33:ae:ae:41:17:7c:52:1f:5d: 22:c8:79:fc:b0:68:b5:2d:e2:2c:d7:24:ad:55:b5:f6:e5:e4: f4:d2:d9:6b:12:7a:95:89:2a:3b:1b:59:0b:f6:f2:cf:56:e4: b3:e9:1a:e6:6f:21:ed:89:ce:6d:24:89:51:eb:bf:52:c2:14: 19:cf:46:a0:f5:77:d9:4b:e2:14:ae:b6:f8:98:9b:b9:dd:a6: 66:45:9f:a5:bc:93:c6:6a:a6:b4:3e:d4:08:85:57:fc:a6:3e: 83:b6:cd:68:3c:d7:1d:f5:7f:f7:54:ec:53:66:56:c4:fa:bf: 4b:2b:88:3c:a9:47:d4:0d:d0:21:e0:13:f0:f4:37:fe:5d:d2: 2a:c7:e4:74:87:05:dc:94:05:e7:14:c9:4a:04:1c:a2:3b:98: e1:ce:7d:b4:0a:6b:25:6e:98:4b:18:33:bd:99:ae:ff:4d:1d: 9e:e2:ca:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjYwNzI2MTQzMTQwWhcNMjYwODAyMTQzMTQwWjAYMRYwFAYD VQQDEw02YTY2MWE0ZC00ZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRSd36iB+ehZtWnDxvhO2pYPN49/V6JltK5/DiNnsdivYkrV+JUM9jdspYiR 0t7qmoxSNc1duW9RgL/SAzocH0DG7n/+FvHZ+L4HNdd9F79cO4zGPCArZDETIN2T B3jIGnAewO3W6BGY3MQOtkEZmVE6oVVpPHg8Tt9zTMW100k+pIdfG4Ta2lIorCBs 9B4iRj0g7Y1T5MFrBYbwFUZLr7IMCCvNi4AGH09M+Bt/i82aA4awkxRvXDd0Sur6 ZbDV5CxIB0VhFzkHUAeCMSHDgYD7HGRltBEyNbFFa4FzJKQhOxsIvEqnO5X2rAT7 IkhLTL88XEbicu6rOztkQOv2mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8bbThB Y8npmQdwHMsgIzr8b+0EMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGlJji3cBErkaWvImNX15D1zqO7YEUKVIO0JKWbHiYi0NwKH+UP0YQ0HFm4I RxZ9auHIC1Xz1bU0WC8I2BGXBjE6+yFY+090UXjVLm6DgwCQM66uQRd8Uh9dIsh5 /LBotS3iLNckrVW19uXk9NLZaxJ6lYkqOxtZC/byz1bks+ka5m8h7YnObSSJUeu/ UsIUGc9GoPV32UviFK62+Jibud2mZkWfpbyTxmqmtD7UCIVX/KY+g7bNaDzXHfV/ 91TsU2ZWxPq/SyuIPKlH1A3QIeAT8PQ3/l3SKsfkdIcF3JQF5xTJSgQcojuY4c59 tAprJW6YSxgzvZmu/00dnuLK1Q== -----END CERTIFICATE-----Generated at Mon Jul 27 00:09:46 2026 by rpki-client