$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: GNKZ6waBoYDu7BNejSN2XV3jgsaiQwO0RP9f6NXuZOU= Subject key identifier: 7C:9F:B7:9C:4B:91:46:02:2A:18:47:C8:AF:00:6D:34:C9:3E:36:A8 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 9F Signing time: Fri 03 Jul 2026 08:10:18 +0000 Manifest this update: Fri 03 Jul 2026 08:10:17 +0000 Manifest next update: Fri 10 Jul 2026 08:10:17 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: sxxam33Ki4i/1gu+Z4BVK+X5Kxil1SeQVMcQ6N62kts=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: 995A12922D7911F185835B6B93833773.roa (hash: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=) 4: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 08:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Jul 3 08:10:17 2026 GMT Not After : Jul 10 08:10:17 2026 GMT Subject: CN=6a476e6a-5e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:63:7c:47:40:00:77:1a:4f:93:f1:76:e6: d8:f7:f4:2e:2e:86:65:6d:33:1e:40:fc:45:0a:62: 3c:96:74:34:f2:26:f7:29:80:93:f9:9c:08:da:de: eb:2d:db:73:ff:57:44:9e:f1:91:04:5b:5b:46:c2: 21:ef:15:05:44:53:e9:0e:c8:b9:74:b3:33:d8:de: 89:ac:01:2e:78:b2:44:69:95:f3:5e:5e:c7:c3:80: 75:5b:f8:61:d1:81:6a:82:9b:41:47:fd:ba:cf:46: d2:83:8f:28:dc:3e:07:46:4a:9f:b6:4d:14:5e:b6: 7c:63:42:54:f8:bd:cd:c6:33:d7:bd:a0:05:2f:61: cb:63:bb:52:c9:de:63:c4:16:cf:68:2b:76:2f:52: 42:6f:82:ae:d4:10:35:75:e8:13:90:ac:7c:7d:d3: bd:ce:a7:7a:b3:c8:17:a4:59:5e:1d:5d:06:60:ba: 5a:a0:2a:61:6b:66:fb:49:ad:f7:85:c7:12:98:c3: 5c:df:b8:5a:12:f8:e2:6a:89:da:92:e1:a5:d5:8c: ae:10:d3:a4:b6:94:28:99:29:9f:97:aa:ca:52:37: 0d:aa:f3:13:43:d5:94:dd:44:fd:2a:1b:7c:fb:6d: 31:55:d7:cb:ae:b1:a9:c9:13:61:3c:76:8a:32:00: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9F:B7:9C:4B:91:46:02:2A:18:47:C8:AF:00:6D:34:C9:3E:36:A8 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:12:ee:d8:9c:d3:a4:52:02:65:6f:84:3d:4a:fd:36:f0:72: 48:65:56:52:97:67:8a:f2:fc:34:f9:97:c9:b0:90:41:84:3e: 84:41:eb:9a:c9:7a:e5:29:77:37:81:33:e6:76:79:87:b2:16: 7d:0d:2b:87:2f:aa:25:24:14:ac:c3:e7:20:a5:78:dd:02:82: 34:f8:18:a3:b3:f6:a1:8f:cc:a4:11:0d:95:b2:40:fc:bb:e8: d2:92:8a:1b:ab:ff:c3:32:7b:99:32:cf:75:06:7a:85:c5:e8: d5:49:a3:c4:62:ae:13:05:96:4e:95:08:e1:8e:0c:6e:0a:3c: ee:92:f5:33:71:49:60:c7:a9:93:21:d9:cd:77:88:a9:88:e2: 65:99:40:0d:00:f6:69:c6:53:39:01:3f:93:54:b5:e5:7f:54: 69:39:b9:49:cc:b1:a4:05:ff:eb:b2:01:14:ff:d0:8f:68:32: 42:55:18:96:fb:f8:3d:93:f9:24:18:d6:8d:d4:4a:f5:d0:93: 0f:87:d1:92:9d:89:29:ab:13:76:a0:78:4d:cf:a6:b7:cd:a5: f2:02:3d:c9:53:cd:a9:f5:15:aa:d1:cc:6f:67:8b:c2:4d:c7: ff:51:8a:20:68:af:f7:a1:73:07:aa:5b:de:55:7e:43:57:52: f6:d2:45:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwMEIxMTAvBgNVBAUTKENERTkzOTFFQTgxMzlFNDAyQjQ2RDFEODg0M0U0MEFC MUQyMkQyRjMwHhcNMjYwNzAzMDgxMDE3WhcNMjYwNzEwMDgxMDE3WjAYMRYwFAYD VQQDEw02YTQ3NmU2YS01ZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UxjfEdAAHcaT5PxdubY9/QuLoZlbTMeQPxFCmI8lnQ08ib3KYCT+ZwI2t7r Ldtz/1dEnvGRBFtbRsIh7xUFRFPpDsi5dLMz2N6JrAEueLJEaZXzXl7Hw4B1W/hh 0YFqgptBR/26z0bSg48o3D4HRkqftk0UXrZ8Y0JU+L3NxjPXvaAFL2HLY7tSyd5j xBbPaCt2L1JCb4Ku1BA1degTkKx8fdO9zqd6s8gXpFleHV0GYLpaoCpha2b7Sa33 hccSmMNc37haEvjiaonakuGl1YyuENOktpQomSmfl6rKUjcNqvMTQ9WU3UT9Kht8 +20xVdfLrrGpyRNhPHaKMgAvJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyft5xL kUYCKhhHyK8AbTTJPjaoMB8GA1UdIwQYMBaAFM3pOR6oE55AK0bR2IQ+QKsdItLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzAwQi9BNUFDNUVEQThD NkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5rQXJSdEhZaEQ1QXF4MGkw dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzAwQi9BNUFDNUVEQThDNkUxMUYwQkI0M0JGMjdDNEY5QUUwMi96ZWs1SHFnVG5r QXJSdEhZaEQ1QXF4MGkwdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJBLu2JzTpFICZW+EPUr9NvBySGVWUpdnivL8NPmXybCQQYQ+hEHrmsl65Sl3 N4Ez5nZ5h7IWfQ0rhy+qJSQUrMPnIKV43QKCNPgYo7P2oY/MpBENlbJA/Lvo0pKK G6v/wzJ7mTLPdQZ6hcXo1UmjxGKuEwWWTpUI4Y4Mbgo87pL1M3FJYMepkyHZzXeI qYjiZZlADQD2acZTOQE/k1S15X9UaTm5ScyxpAX/67IBFP/Qj2gyQlUYlvv4PZP5 JBjWjdRK9dCTD4fRkp2JKasTdqB4Tc+mt82l8gI9yVPNqfUVqtHMb2eLwk3H/1GK IGiv96FzB6pb3lV+Q1dS9tJFbQ== -----END CERTIFICATE-----Generated at Sat Jul 4 02:33:43 2026 by rpki-client