$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: jth0M1OXKjRchSSnZoU/DZbMwAJ5zrsQa/9GbaOXXuM= Subject key identifier: 36:5D:C3:33:18:36:15:4D:CD:FE:0B:62:06:B2:02:EB:7F:0C:40:67 Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 07A6 Signing time: Thu 20 Aug 2026 21:47:59 +0000 Manifest this update: Thu 20 Aug 2026 21:47:58 +0000 Manifest next update: Thu 27 Aug 2026 21:47:58 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: QhKneLpEmPzkq0Js0n7bBkqs4DsFCr0jt5ZRdh4qNV8=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: Ro74anOTti8QG6vyjwS8aXc9bfV+QmfdwMUJorqRPP8=) 3: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: H5yiTmZmqNzfgLkNUSshTejgEC9QW5DzJpuCaDVZPHo=) 4: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: jdZ9eU0HcGePAnaPpQJ/8+6uq872C01hZ+qnBvUiNlQ=) 5: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: 6CI5SC55Jio94/KfoS9G/a4W782wVeKHBLf24nIGCPM=) 6: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: td9+M54k5hj2c/thTOFATgj6CforEojuE42TknTzpYk=) 7: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: x07pQS6pEgJZLrxI+4SzaUGa4YwQ96qN1jF+DrtdcJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Aug 20 21:47:58 2026 GMT Not After : Aug 27 21:47:58 2026 GMT Subject: CN=6a87760f-5c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:a9:e2:24:14:06:41:94:b7:16:9f:67:9e: 37:e1:92:11:93:91:52:48:43:d4:b1:51:7d:07:da: b8:8c:c4:89:8f:b5:7a:13:ee:35:7b:09:20:a5:64: a9:d0:40:33:7d:70:30:22:f5:32:9f:03:36:76:1d: 3e:2a:55:a0:79:19:39:13:1d:82:b7:fc:99:23:5d: 44:f7:82:8f:fd:0b:96:38:af:5c:69:fb:95:82:0f: 7c:bc:d2:bf:c9:ef:93:65:8f:75:64:b3:26:16:3e: 94:b7:44:50:ad:a6:32:8d:24:a7:17:9e:50:d4:23: 61:c8:6f:db:b5:5e:73:dd:b5:d6:f5:f9:6e:ef:01: 6f:15:da:b1:66:18:50:19:00:f1:05:04:71:7a:ad: e3:65:b7:70:71:40:b4:03:d0:ef:78:6c:4c:6e:d9: 18:0e:06:6a:28:d9:22:1d:85:c7:2e:e9:bd:7a:46: a7:25:90:ef:90:d9:94:31:3d:d0:b4:68:f0:fd:5f: 61:f4:86:a7:22:97:7b:aa:64:6d:a0:fe:46:46:f2: d0:26:bb:f1:79:22:0b:9e:31:98:c0:bb:ee:0a:4c: 82:4d:fd:18:1b:94:76:9d:ca:1e:f8:d5:8d:e5:35: 6b:b1:69:b6:dd:76:f2:2f:de:4e:7c:bb:20:a0:62: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5D:C3:33:18:36:15:4D:CD:FE:0B:62:06:B2:02:EB:7F:0C:40:67 X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:cf:1f:06:9f:0b:a2:dc:56:55:12:17:5c:ca:90:c3:a1:c8: f3:89:cc:5b:9b:e3:1d:57:1d:d1:09:d6:57:b5:31:58:e0:3f: dc:69:47:98:bb:3c:16:34:31:7d:33:01:59:a9:f7:b4:47:f4: 53:87:03:e6:80:de:4f:ba:24:04:04:ee:fc:e2:05:dd:24:9e: 0d:3d:ab:37:6d:56:94:cb:96:07:76:a5:7b:0d:c4:dd:a4:ba: 13:3a:0a:83:a3:04:63:7e:2c:50:f6:97:02:7b:26:a6:71:3b: 92:51:f5:54:60:eb:90:ae:76:72:37:b1:ad:1d:f3:39:94:40: 69:f1:e8:ba:d3:52:68:a1:91:fc:a0:0d:3c:4d:d0:49:07:c0: df:f0:96:ba:22:84:d5:d0:36:d5:0b:99:6e:da:4f:02:42:b0: d9:22:cd:cb:2c:41:9b:bc:8c:06:ef:60:61:99:d7:22:91:bc: 3e:c7:f1:88:59:ac:15:d1:3e:fb:a6:38:74:d5:7f:ab:ff:37: f3:20:c9:e7:ca:1c:5d:7c:fe:63:a2:3c:71:6a:8c:1c:36:be: e4:24:49:4f:e2:bd:1e:b0:ff:36:ca:0c:7d:ba:b0:72:81:16: 37:c7:ae:53:c6:ca:0b:72:98:ea:02:b1:66:51:c9:11:27:cc: eb:cb:04:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjYwODIwMjE0NzU4WhcNMjYwODI3MjE0NzU4WjAYMRYwFAYD VQQDEw02YTg3NzYwZi01YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUqp4iQUBkGUtxafZ5434ZIRk5FSSEPUsVF9B9q4jMSJj7V6E+41ewkgpWSp 0EAzfXAwIvUynwM2dh0+KlWgeRk5Ex2Ct/yZI11E94KP/QuWOK9cafuVgg98vNK/ ye+TZY91ZLMmFj6Ut0RQraYyjSSnF55Q1CNhyG/btV5z3bXW9flu7wFvFdqxZhhQ GQDxBQRxeq3jZbdwcUC0A9DveGxMbtkYDgZqKNkiHYXHLum9ekanJZDvkNmUMT3Q tGjw/V9h9IanIpd7qmRtoP5GRvLQJrvxeSILnjGYwLvuCkyCTf0YG5R2ncoe+NWN 5TVrsWm23XbyL95OfLsgoGKYRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZdwzMY NhVNzf4LYgayAut/DEBnMB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqM8fBp8LotxWVRIXXMqQw6HI84nMW5vjHVcd0QnWV7UxWOA/3GlHmLs8FjQx fTMBWan3tEf0U4cD5oDeT7okBATu/OIF3SSeDT2rN21WlMuWB3alew3E3aS6EzoK g6MEY34sUPaXAnsmpnE7klH1VGDrkK52cjexrR3zOZRAafHoutNSaKGR/KANPE3Q SQfA3/CWuiKE1dA21QuZbtpPAkKw2SLNyyxBm7yMBu9gYZnXIpG8PsfxiFmsFdE+ +6Y4dNV/q/838yDJ58ocXXz+Y6I8cWqMHDa+5CRJT+K9HrD/NsoMfbqwcoEWN8eu U8bKC3KY6gKxZlHJESfM68sEbA== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:26 2026 by rpki-client