$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: RE6yXlCRRrX2XdfLoldeWDBaewB8YyVrzcDvk6x9F50= Subject key identifier: 39:7F:4A:A0:A9:45:07:F4:D5:DD:E2:A4:D3:D3:4E:7C:72:08:ED:E9 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1248 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 120D Signing time: Thu 06 Aug 2026 17:05:01 +0000 Manifest this update: Thu 06 Aug 2026 17:05:01 +0000 Manifest next update: Thu 13 Aug 2026 17:05:01 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: FZyedSifoNtBsPkedPoVDP+kudp4jpJUKybUzixsom0=) 2: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) 3: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: 8sR59Lp6fQc79JgAgqC1t1+yUKy4/xiWteMrpfGnLFs=) 4: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=) 5: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 17:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Aug 6 17:05:01 2026 GMT Not After : Aug 13 17:05:01 2026 GMT Subject: CN=6a74bebd-3fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:46:99:4f:c5:47:c2:d7:f6:6e:48:98:67:e1: 5b:f3:bd:d7:43:16:22:78:83:40:d1:23:ac:12:8b: 79:b0:eb:37:75:22:49:39:4c:ee:62:c2:95:23:33: 08:7e:37:15:2f:fd:cd:28:6f:4a:f5:39:2e:57:d6: 31:92:83:c4:ae:bc:ea:df:9e:b5:59:e4:75:85:94: b6:bc:33:15:ec:d7:c9:9d:38:12:db:cc:f8:c9:fe: 59:c2:39:44:ae:05:b0:b8:0b:dc:3a:ae:83:a1:30: 97:1c:78:f1:92:ab:51:ae:94:00:6d:cb:f7:3c:b2: 7b:ae:92:45:cd:a0:1b:1b:de:83:f1:8a:7a:06:09: 38:3f:b5:25:9e:5d:e8:e0:c0:7e:02:5f:e0:bd:eb: 54:cc:f7:6f:ff:81:03:e8:64:78:c2:99:9b:ef:b1: 5e:a0:15:f1:ab:3d:dc:0d:0d:f0:d0:ae:ba:49:ae: 4e:12:62:06:12:b7:dd:ea:58:b2:4f:2d:9d:93:2a: 16:f2:cd:93:4b:ae:f8:36:89:bb:b9:ae:85:82:0a: b3:54:d9:44:2e:58:3b:e3:ae:8c:a6:b8:e9:34:af: d2:2c:08:e3:a5:90:19:af:96:37:4d:3c:1e:91:c6: f4:33:56:23:0e:58:85:f8:1c:57:23:17:dc:92:bf: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7F:4A:A0:A9:45:07:F4:D5:DD:E2:A4:D3:D3:4E:7C:72:08:ED:E9 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:1a:ad:11:75:27:46:7a:d4:cb:e3:ed:2d:37:c9:1d:6f:20: e1:a7:a1:99:9e:b7:5d:24:8a:ab:43:e7:8a:1e:0b:85:99:95: 34:dd:bd:90:0a:bd:70:f1:54:22:6d:ac:79:21:1c:ed:8d:cc: da:5b:7c:27:b1:1e:c0:fe:df:4f:14:25:c8:3b:5a:e5:f6:e4: 41:58:fe:46:1f:23:d6:60:18:3f:94:14:7c:26:72:d4:41:fd: be:bc:90:55:2a:b7:d7:94:c8:fa:55:f4:f6:da:2b:e7:57:51: e6:b0:37:17:52:e5:dc:51:ac:b2:2a:05:da:e9:05:94:25:1f: fa:bf:d1:b9:f5:0c:49:91:88:c9:24:ed:96:17:dd:c2:46:6c: cf:68:df:76:7a:46:e2:99:dc:84:5c:4e:57:11:34:08:16:f3: 7f:47:4d:d4:46:78:71:8b:5a:92:78:08:9d:94:d2:9b:54:b5: f7:a5:a7:b4:64:38:74:93:25:ed:c7:51:f5:ba:0a:fe:10:30: 6b:25:f8:aa:9c:b6:48:4a:d2:39:68:21:2b:35:71:cb:3c:87: 53:b9:1d:97:89:c4:d2:68:4d:1d:f7:de:66:e9:57:5b:2a:cb: 77:44:da:c3:ed:97:3d:55:0d:43:f8:f9:4d:bd:b6:84:20:84: fb:92:4f:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwODA2MTcwNTAxWhcNMjYwODEzMTcwNTAxWjAYMRYwFAYD VQQDEw02YTc0YmViZC0zZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50aZT8VHwtf2bkiYZ+Fb873XQxYieINA0SOsEot5sOs3dSJJOUzuYsKVIzMI fjcVL/3NKG9K9TkuV9YxkoPErrzq3561WeR1hZS2vDMV7NfJnTgS28z4yf5ZwjlE rgWwuAvcOq6DoTCXHHjxkqtRrpQAbcv3PLJ7rpJFzaAbG96D8Yp6Bgk4P7Ulnl3o 4MB+Al/gvetUzPdv/4ED6GR4wpmb77FeoBXxqz3cDQ3w0K66Sa5OEmIGErfd6liy Ty2dkyoW8s2TS674Nom7ua6FggqzVNlELlg7466MprjpNK/SLAjjpZAZr5Y3TTwe kcb0M1YjDliF+BxXIxfckr/5dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl/SqCp RQf01d3ipNPTTnxyCO3pMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARBqtEXUnRnrUy+PtLTfJHW8g4aehmZ63XSSKq0Pnih4LhZmVNN29kAq9cPFU Im2seSEc7Y3M2lt8J7EewP7fTxQlyDta5fbkQVj+Rh8j1mAYP5QUfCZy1EH9vryQ VSq315TI+lX09tor51dR5rA3F1Ll3FGssioF2ukFlCUf+r/RufUMSZGIySTtlhfd wkZsz2jfdnpG4pnchFxOVxE0CBbzf0dN1EZ4cYtakngInZTSm1S196WntGQ4dJMl 7cdR9boK/hAwayX4qpy2SErSOWghKzVxyzyHU7kdl4nE0mhNHffeZulXWyrLd0Ta w+2XPVUNQ/j5Tb22hCCE+5JPAQ== -----END CERTIFICATE-----Generated at Fri Aug 7 16:06:52 2026 by rpki-client