$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: HqSbNdWM+1Okc1AF2UoVyopxFaaYDtUzX8JZztsKFPk= Subject key identifier: 40:8C:CF:C7:27:D8:BF:23:7E:1C:36:E6:3B:D3:9D:50:3C:F4:5A:E7 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 35BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 3597 Signing time: Tue 18 Aug 2026 14:46:48 +0000 Manifest this update: Tue 18 Aug 2026 14:46:47 +0000 Manifest next update: Tue 25 Aug 2026 14:46:47 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: w0UeRCHqQ1VEbg4MEAmn1WTfH5PJ4jNkgBUhVPR2w1Q=) 2: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho=) 3: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13757 (0x35bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Aug 18 14:46:47 2026 GMT Not After : Aug 25 14:46:47 2026 GMT Subject: CN=6a847058-c359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:5e:a4:2a:dc:41:67:ff:7c:59:6d:4e:ee: ac:82:9a:cd:79:32:d1:7c:ca:b9:31:69:dd:e0:9d: fa:bb:30:8e:8a:49:47:ea:7f:96:8f:c3:0f:8f:e6: 8e:86:ab:1e:10:86:6b:e6:71:c6:fc:4f:7b:78:ac: 67:aa:e8:17:bc:30:6e:38:10:5a:40:af:bb:c8:28: b0:a5:40:2a:b7:79:05:9b:53:a0:b3:2c:c2:c9:05: 69:20:d6:aa:5b:8a:20:9a:cc:50:7a:88:8b:0a:1d: 2f:19:5e:27:65:a0:25:a5:8f:59:03:ab:74:f4:b6: 00:5e:16:68:e7:14:7d:d7:02:01:6e:cb:44:38:8f: 1f:c7:28:2d:3c:ab:2f:e6:b8:46:00:1d:0a:e1:f4: e2:18:64:87:ce:17:92:dc:29:50:17:30:95:75:ce: d7:22:6e:b3:1c:1d:ca:46:ba:23:7c:74:bc:46:de: dc:22:79:e7:de:61:2a:0e:08:8d:25:b4:48:e0:71: e5:df:33:42:7d:61:37:9f:f2:fc:e6:d6:0f:1e:24: 44:81:3f:8f:62:39:df:ce:f2:b1:75:e4:ff:4b:be: 9a:06:8a:8d:9d:6c:0a:66:03:43:4a:49:d9:65:85: 87:61:c8:88:3f:b3:e1:28:0d:4c:bf:a0:7a:2b:69: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8C:CF:C7:27:D8:BF:23:7E:1C:36:E6:3B:D3:9D:50:3C:F4:5A:E7 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:19:01:ee:ce:2b:b3:96:8e:da:89:ca:3b:92:e5:c9:55:b2: f1:bf:fa:7f:a3:46:55:72:66:f4:0d:7f:6a:b1:cc:d8:92:45: b4:c0:59:6c:1a:94:32:c6:df:a1:66:8d:42:ac:17:59:c3:f1: c3:1b:a4:b7:13:8b:aa:12:d0:bc:9d:4e:cb:a1:88:ca:94:7e: a6:18:70:55:01:a0:24:d9:51:7d:aa:ba:3e:1e:cc:e1:62:ed: 60:08:65:a4:05:23:b5:8c:78:56:e0:75:65:a2:9f:a7:ea:36: 84:1a:98:f6:ac:79:d9:9b:e3:ce:22:bc:89:78:de:1f:a9:46: f5:d8:39:0e:a9:fb:47:8c:c5:58:20:b7:03:3b:61:3f:6f:20: 77:9c:b8:da:05:27:77:3f:48:35:a5:69:2b:2e:67:78:15:42: 36:4d:3f:11:ff:ea:8c:25:92:9e:c9:d8:f9:d9:92:26:31:d4: ea:88:2a:fa:a0:27:62:35:19:0a:47:78:c1:a3:0b:3f:0d:7c: 44:0c:7a:78:a0:8b:60:06:6e:1d:43:f2:4c:76:b7:ca:13:35: 85:ba:04:70:24:9e:fa:8c:18:94:c2:e2:e2:32:14:a1:7f:48: e0:33:79:79:a5:ff:07:e7:09:21:18:7f:b1:e7:c4:75:8c:d5: f9:22:00:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjYwODE4MTQ0NjQ3WhcNMjYwODI1MTQ0NjQ3WjAYMRYwFAYD VQQDEw02YTg0NzA1OC1jMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuItepCrcQWf/fFltTu6sgprNeTLRfMq5MWnd4J36uzCOiklH6n+Wj8MPj+aO hqseEIZr5nHG/E97eKxnqugXvDBuOBBaQK+7yCiwpUAqt3kFm1OgsyzCyQVpINaq W4ogmsxQeoiLCh0vGV4nZaAlpY9ZA6t09LYAXhZo5xR91wIBbstEOI8fxygtPKsv 5rhGAB0K4fTiGGSHzheS3ClQFzCVdc7XIm6zHB3KRrojfHS8Rt7cInnn3mEqDgiN JbRI4HHl3zNCfWE3n/L85tYPHiREgT+PYjnfzvKxdeT/S76aBoqNnWwKZgNDSknZ ZYWHYciIP7PhKA1Mv6B6K2nauQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECMz8cn 2L8jfhw25jvTnVA89FrnMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqhkB7s4rs5aO2onKO5LlyVWy8b/6f6NGVXJm9A1/arHM2JJFtMBZbBqUMsbf oWaNQqwXWcPxwxuktxOLqhLQvJ1Oy6GIypR+phhwVQGgJNlRfaq6Ph7M4WLtYAhl pAUjtYx4VuB1ZaKfp+o2hBqY9qx52ZvjziK8iXjeH6lG9dg5Dqn7R4zFWCC3Azth P28gd5y42gUndz9INaVpKy5neBVCNk0/Ef/qjCWSnsnY+dmSJjHU6ogq+qAnYjUZ Ckd4waMLPw18RAx6eKCLYAZuHUPyTHa3yhM1hboEcCSe+owYlMLi4jIUoX9I4DN5 eaX/B+cJIRh/sefEdYzV+SIA4g== -----END CERTIFICATE-----Generated at Wed Aug 19 13:39:08 2026 by rpki-client