$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json) Hash identifier: DIbHACSJmn7zCXOeKgP9VSfnj4lnULAxHnh9NsNKKtw= Subject key identifier: E1:C5:44:9F:6A:2F:F4:BF:1C:E1:87:84:4B:B6:2B:19:D8:2E:33:1B Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft Manifest number: 0140 Signing time: Wed 19 Aug 2026 06:04:50 +0000 Manifest this update: Wed 19 Aug 2026 06:04:50 +0000 Manifest next update: Wed 26 Aug 2026 06:04:50 +0000 Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: BSsLYgZPnQcskqL6tGzS0NWYAFfZFdWWPMtWDA10HMc=) 2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5 Validity Not Before: Aug 19 06:04:50 2026 GMT Not After : Aug 26 06:04:50 2026 GMT Subject: CN=6a854782-0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:a5:80:19:90:6e:22:92:b9:29:8b:3a:17: aa:88:01:00:eb:74:48:e1:9d:91:ff:0a:97:3a:ca: 7e:47:81:2a:45:fb:66:4c:50:d7:1e:2c:bf:60:87: 0a:f3:54:5b:7d:6c:fc:7f:c4:df:b3:4b:7f:fb:ba: 59:cc:07:31:8f:3a:c1:b1:fb:1e:b1:68:01:9c:0e: 7d:79:94:b4:14:4e:1e:21:ef:5f:c4:b0:79:87:61: ce:4c:05:df:c3:7f:e5:d7:c9:74:83:8a:35:10:8f: 0f:58:26:6d:ee:94:c3:8d:d6:40:9f:e6:0e:0b:6c: 04:0d:fc:92:76:21:3e:55:6e:c5:8f:08:df:c3:0f: 83:ea:c1:b6:f4:9c:ba:d3:d0:7f:1f:94:06:a9:80: 45:6a:f0:41:0c:53:d6:c8:a3:c9:71:6b:dd:05:08: 82:f6:de:cc:c8:36:e7:5c:ee:72:59:53:69:17:93: 72:b6:75:d6:d0:ec:39:9c:9c:09:00:e6:0a:64:cd: da:fc:22:a0:ef:51:9f:df:bd:25:84:1f:71:db:5d: 1f:2f:6a:26:f9:86:7f:03:8f:f7:de:f8:89:14:1c: 12:f7:4e:0e:4a:83:5e:db:0c:d7:d4:c6:3b:2a:3a: 8c:85:3f:1c:77:68:9f:84:b1:b9:63:f6:56:71:79: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C5:44:9F:6A:2F:F4:BF:1C:E1:87:84:4B:B6:2B:19:D8:2E:33:1B X509v3 Authority Key Identifier: keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4a:41:23:a0:0e:72:c2:59:61:db:14:e5:36:2c:ea:b8:f0: ba:34:a7:b2:b7:ee:cf:f6:d1:ad:8a:d4:4c:3b:c0:5a:31:17: 1e:9d:27:56:d8:d1:97:da:1a:13:a2:44:e9:18:cc:6a:b9:8c: 89:7b:c8:3b:51:41:e0:1a:93:92:26:8d:a8:76:0e:46:d2:2c: ae:67:1a:f1:c0:50:14:cb:a0:de:58:b2:9c:1c:90:8e:44:eb: fa:5a:52:62:d1:21:17:26:ed:d3:41:f2:76:ce:1e:3d:4b:5a: 47:6f:65:ea:4d:cf:50:96:16:df:9d:7a:7a:52:b6:44:88:be: 33:a5:1d:aa:78:6a:71:3f:10:39:ea:fd:22:1a:93:4b:9e:a4: 30:9c:6a:6a:89:44:bf:3c:e8:01:d0:5e:9a:72:56:c9:6b:b5: 2e:a0:17:97:0a:13:65:1b:13:37:40:bd:be:a2:5d:38:f0:ef: 90:35:35:4e:f8:47:36:b1:d3:19:45:1e:9e:55:74:57:c5:49: 0b:cf:0c:2d:d5:21:ea:fa:e5:23:3f:78:7c:e1:e8:b5:26:8e: 1e:93:b4:21:85:e4:cb:7a:01:dd:4e:33:fe:01:b4:05:b1:e9: ce:90:73:65:17:b9:05:de:a6:fb:61:94:f8:af:c3:d5:9d:f7: 5c:7e:76:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx N0QwMjExQjUwHhcNMjYwODE5MDYwNDUwWhcNMjYwODI2MDYwNDUwWjAYMRYwFAYD VQQDEw02YTg1NDc4Mi0wZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQalgBmQbiKSuSmLOheqiAEA63RI4Z2R/wqXOsp+R4EqRftmTFDXHiy/YIcK 81RbfWz8f8Tfs0t/+7pZzAcxjzrBsfsesWgBnA59eZS0FE4eIe9fxLB5h2HOTAXf w3/l18l0g4o1EI8PWCZt7pTDjdZAn+YOC2wEDfySdiE+VW7Fjwjfww+D6sG29Jy6 09B/H5QGqYBFavBBDFPWyKPJcWvdBQiC9t7MyDbnXO5yWVNpF5NytnXW0Ow5nJwJ AOYKZM3a/CKg71Gf370lhB9x210fL2om+YZ/A4/33viJFBwS904OSoNe2wzX1MY7 KjqMhT8cd2ifhLG5Y/ZWcXlKgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHFRJ9q L/S/HOGHhEu2KxnYLjMbMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq ZFFockxQams0R2tYMENFYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbEpBI6AOcsJZYdsU5TYs6rjwujSnsrfuz/bRrYrUTDvAWjEXHp0nVtjRl9oa E6JE6RjMarmMiXvIO1FB4BqTkiaNqHYORtIsrmca8cBQFMug3liynByQjkTr+lpS YtEhFybt00Hyds4ePUtaR29l6k3PUJYW3516elK2RIi+M6UdqnhqcT8QOer9IhqT S56kMJxqaolEvzzoAdBemnJWyWu1LqAXlwoTZRsTN0C9vqJdOPDvkDU1TvhHNrHT GUUenlV0V8VJC88MLdUh6vrlIz94fOHotSaOHpO0IYXky3oB3U4z/gG0BbHpzpBz ZRe5Bd6m+2GU+K/D1Z33XH52hQ== -----END CERTIFICATE-----Generated at Wed Aug 19 14:28:23 2026 by rpki-client