$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: yc0SM23zdAEoy8XrWx+H7LU0rw9XogwvpVL9jjxuNSY= Subject key identifier: 9D:66:59:3F:9B:CC:70:67:F4:0F:F8:87:1A:02:EE:7F:B5:B1:93:5B Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 11F1 Signing time: Tue 28 Jul 2026 17:14:56 +0000 Manifest this update: Tue 28 Jul 2026 17:14:55 +0000 Manifest next update: Tue 04 Aug 2026 17:14:55 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: iPGhIq7d92LDidLhHpjAUM1JjLgveXwNjapscJJAMA8=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4604 (0x11fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Jul 28 17:14:55 2026 GMT Not After : Aug 4 17:14:55 2026 GMT Subject: CN=6a68e390-28cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:aa:1b:cc:35:9f:d0:c0:ca:ff:21:4a:3a: 89:75:6b:e0:37:88:9f:b8:db:46:39:04:f6:b9:83: 82:b5:41:df:ae:72:2c:9a:8a:7a:1a:22:a7:44:3b: ff:b8:57:ff:8f:31:29:25:16:73:e5:8f:34:6a:80: c2:ed:d6:68:12:68:ef:cb:33:58:65:50:65:2b:86: 56:b3:1e:cf:16:cc:ce:90:11:73:ef:63:95:18:f9: 4d:f4:c7:af:b0:76:26:82:0c:01:f7:7a:67:10:7b: 6f:59:f9:1a:c2:52:9c:30:d5:90:0c:c4:33:83:5a: 1f:1c:60:4f:50:57:8f:b9:cf:3d:c5:8f:a6:5f:1d: 5a:c3:38:d1:c7:86:3f:2c:d8:08:94:7e:8d:08:83: d7:72:ba:ca:21:c9:86:5f:6d:10:e1:56:4d:cf:5a: 9c:40:04:79:a8:47:34:3b:37:2c:cf:16:0f:3f:65: 38:0c:c5:cd:fa:88:81:4c:de:5f:0c:90:9b:10:2f: 37:77:10:67:6a:d1:08:1d:7f:d9:2a:df:66:44:f2: 4e:e3:5b:d0:dc:f9:14:31:47:28:71:f3:63:f8:0e: 55:0b:5d:cb:ac:7d:ed:53:07:e2:74:79:20:1b:30: 21:ef:e3:b7:7c:7e:32:31:df:17:38:bd:7f:0c:84: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:59:3F:9B:CC:70:67:F4:0F:F8:87:1A:02:EE:7F:B5:B1:93:5B X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:17:2c:a9:c7:7f:b4:d3:21:cd:82:c6:85:7b:75:65:fe:73: 99:95:26:5f:c3:1b:27:4a:c7:d4:fb:0c:1c:58:bb:26:18:e4: 9e:8c:57:53:98:44:3d:54:77:f6:e5:84:20:93:46:b9:98:56: 4a:69:e8:09:9b:b6:13:9b:68:fe:d8:0e:34:84:ff:f5:68:94: b6:64:83:57:cc:b3:c9:40:68:78:d4:a2:9a:8c:a2:fa:8f:d6: 7a:f8:a6:99:14:4e:98:af:80:77:1b:f9:e1:50:ca:7d:49:fa: a8:a8:80:f4:ad:dd:84:63:1e:37:f2:8c:0e:bb:6f:23:1d:e6: 71:06:7b:d9:8c:9a:d2:ab:07:da:39:41:a2:ec:3b:e1:20:dc: 35:c8:9b:b5:d2:dd:fd:c1:6c:49:f5:ad:98:20:64:15:5e:84: 8e:77:f5:fd:45:ae:4c:cb:50:0f:86:67:69:45:ad:5c:fb:3f: 34:34:f0:a2:99:88:cf:a1:a8:76:c2:67:b9:39:7a:cb:ea:42: ab:a5:e2:37:97:97:cb:7e:a1:12:4c:58:33:0d:d4:57:23:b3: 3e:d5:2d:e9:b5:e2:0a:f4:75:0d:a0:bf:78:bb:44:bf:f2:9f: 1a:c6:b1:be:9f:a6:28:68:5f:c4:cf:e0:12:bb:ca:68:be:82: c8:ac:bd:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwNzI4MTcxNDU1WhcNMjYwODA0MTcxNDU1WjAYMRYwFAYD VQQDEw02YTY4ZTM5MC0yOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyGqG8w1n9DAyv8hSjqJdWvgN4ifuNtGOQT2uYOCtUHfrnIsmop6GiKnRDv/ uFf/jzEpJRZz5Y80aoDC7dZoEmjvyzNYZVBlK4ZWsx7PFszOkBFz72OVGPlN9Mev sHYmggwB93pnEHtvWfkawlKcMNWQDMQzg1ofHGBPUFePuc89xY+mXx1awzjRx4Y/ LNgIlH6NCIPXcrrKIcmGX20Q4VZNz1qcQAR5qEc0OzcszxYPP2U4DMXN+oiBTN5f DJCbEC83dxBnatEIHX/ZKt9mRPJO41vQ3PkUMUcocfNj+A5VC13LrH3tUwfidHkg GzAh7+O3fH4yMd8XOL1/DITMoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1mWT+b zHBn9A/4hxoC7n+1sZNbMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixcsqcd/tNMhzYLGhXt1Zf5zmZUmX8MbJ0rH1PsMHFi7JhjknoxXU5hEPVR3 9uWEIJNGuZhWSmnoCZu2E5to/tgONIT/9WiUtmSDV8yzyUBoeNSimoyi+o/Wevim mRROmK+Adxv54VDKfUn6qKiA9K3dhGMeN/KMDrtvIx3mcQZ72Yya0qsH2jlBouw7 4SDcNcibtdLd/cFsSfWtmCBkFV6Ejnf1/UWuTMtQD4ZnaUWtXPs/NDTwopmIz6Go dsJnuTl6y+pCq6XiN5eXy36hEkxYMw3UVyOzPtUt6bXiCvR1DaC/eLtEv/KfGsax vp+mKGhfxM/gErvKaL6CyKy9Rg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:40 2026 by rpki-client