$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: TPKMmbe6nliZ89+RVZQjn13pCaExsOJbJilbU40gS7E= Subject key identifier: E3:FA:11:A7:37:78:60:85:D5:63:2C:78:ED:07:AD:D5:65:78:68:C1 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 025D Signing time: Wed 19 Aug 2026 02:45:40 +0000 Manifest this update: Wed 19 Aug 2026 02:45:40 +0000 Manifest next update: Wed 26 Aug 2026 02:45:40 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: I5GtZmJ4+0me+5jSZugqfMDFzhxy9d4BXUVBRN+h57I=) 2: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=) 3: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=) 4: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Aug 19 02:45:40 2026 GMT Not After : Aug 26 02:45:40 2026 GMT Subject: CN=6a8518d4-954c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:f1:68:20:f0:af:c3:8e:90:ff:91:41:42: fa:4a:57:03:4b:74:5b:7b:72:3d:82:07:e7:b7:02: 60:c8:e7:d0:8c:50:cd:1a:06:3b:be:c4:59:23:18: af:11:5a:bc:8b:32:75:65:29:0a:74:b7:9e:73:f1: b6:c2:62:d9:66:e9:c3:50:59:e3:a3:7a:7f:27:6d: 7f:e5:59:f4:9d:66:d4:5e:d7:c6:e3:51:32:9e:24: 95:98:a7:3f:27:9d:c1:dc:a0:9b:71:df:71:87:d2: 78:8d:1f:ce:f3:de:fa:48:ad:07:8e:61:04:13:37: fd:3d:b6:61:1b:43:26:46:87:9d:96:8a:fd:33:13: 54:20:91:c0:dc:c9:0e:be:49:80:3d:52:84:da:f0: d5:c4:d3:31:c5:34:7e:fd:d2:60:91:05:f4:1e:d2: 52:c1:31:6a:70:2d:e7:50:12:79:62:d7:2b:04:52: af:27:ca:0d:ce:86:fa:bc:42:e4:a0:77:49:14:e4: 49:f8:e9:0a:95:a5:5a:d8:dc:17:76:60:fc:0b:9a: 6a:4e:1b:c7:b5:2e:ae:27:0c:b1:57:20:5d:0e:50: a6:65:ce:f1:46:53:97:4e:67:a8:09:0c:39:8f:a7: 86:4c:90:21:e0:d9:44:e3:c8:40:61:cc:32:ea:ab: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FA:11:A7:37:78:60:85:D5:63:2C:78:ED:07:AD:D5:65:78:68:C1 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a6:e0:c1:96:66:e8:50:85:3f:f1:28:fb:3e:ff:20:1f:7d: 87:93:3d:00:67:0f:47:bd:f3:16:fd:5c:f3:cc:f7:15:99:7f: d8:12:ee:ac:7e:7b:88:69:ee:50:b2:0f:f6:65:8d:39:ac:24: 88:95:34:81:4c:16:c8:5e:29:38:62:fc:b0:44:c4:0f:59:44: 67:3f:87:f1:73:a7:7c:33:dd:2c:fb:cb:87:b6:15:e1:88:8d: c0:5e:4a:bf:1e:4e:45:06:7b:74:5d:5f:87:a8:1b:f1:b1:e5: 78:4f:f8:97:8d:08:76:3b:8d:c2:88:f3:f1:3b:4d:33:f1:f3: 53:1e:3d:5e:1e:4a:8c:75:9e:06:e4:c5:a1:de:82:67:7d:be: ae:ce:3f:6b:c7:a2:aa:ae:4f:5b:95:bd:8e:3b:d4:34:be:b4: 43:22:75:b1:ff:76:64:fe:0c:7b:0d:ad:99:cf:37:af:6c:55: 90:19:94:e6:24:3d:e7:f2:bc:77:9a:fd:56:34:a9:ee:3e:63: aa:bf:2f:49:f8:24:41:a2:73:8a:28:69:09:3b:94:82:0f:c8: cc:05:ad:62:74:14:52:e8:af:a1:50:61:4f:75:c9:75:ad:b1: eb:46:f0:8e:21:1a:69:f1:e2:b3:8a:5c:2a:99:05:8f:96:0e: 42:82:e6:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjYwODE5MDI0NTQwWhcNMjYwODI2MDI0NTQwWjAYMRYwFAYD VQQDEw02YTg1MThkNC05NTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0jxaCDwr8OOkP+RQUL6SlcDS3Rbe3I9ggfntwJgyOfQjFDNGgY7vsRZIxiv EVq8izJ1ZSkKdLeec/G2wmLZZunDUFnjo3p/J21/5Vn0nWbUXtfG41EyniSVmKc/ J53B3KCbcd9xh9J4jR/O8976SK0HjmEEEzf9PbZhG0MmRoedlor9MxNUIJHA3MkO vkmAPVKE2vDVxNMxxTR+/dJgkQX0HtJSwTFqcC3nUBJ5YtcrBFKvJ8oNzob6vELk oHdJFORJ+OkKlaVa2NwXdmD8C5pqThvHtS6uJwyxVyBdDlCmZc7xRlOXTmeoCQw5 j6eGTJAh4NlE48hAYcwy6qs6sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP6Eac3 eGCF1WMseO0HrdVleGjBMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABabgwZZm6FCFP/Eo+z7/IB99h5M9AGcPR73zFv1c88z3FZl/2BLurH57iGnu ULIP9mWNOawkiJU0gUwWyF4pOGL8sETED1lEZz+H8XOnfDPdLPvLh7YV4YiNwF5K vx5ORQZ7dF1fh6gb8bHleE/4l40IdjuNwojz8TtNM/HzUx49Xh5KjHWeBuTFod6C Z32+rs4/a8eiqq5PW5W9jjvUNL60QyJ1sf92ZP4Mew2tmc83r2xVkBmU5iQ95/K8 d5r9VjSp7j5jqr8vSfgkQaJziihpCTuUgg/IzAWtYnQUUuivoVBhT3XJda2x60bw jiEaafHis4pcKpkFj5YOQoLmvw== -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:39 2026 by rpki-client