$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: J703aYkJenfOEU94ek9yDi7GWYt34j44dljMJWIYROA= Subject key identifier: EC:B1:36:77:6D:62:82:AB:3E:D8:F8:30:00:84:2B:6C:F4:50:EA:FC Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 15A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1578 Signing time: Tue 28 Jul 2026 16:52:29 +0000 Manifest this update: Tue 28 Jul 2026 16:52:29 +0000 Manifest next update: Tue 04 Aug 2026 16:52:29 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: VoB5bgQV6zYbXbiAQAUjDlXy30UuLSmU941ve4QyBB8=) 2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=) 3: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=) 4: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5538 (0x15a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Jul 28 16:52:29 2026 GMT Not After : Aug 4 16:52:29 2026 GMT Subject: CN=6a68de4d-b152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:42:d7:b8:59:ba:6a:d7:4e:23:68:e5:8d: a0:ef:5a:40:98:c0:9e:a3:fe:97:02:ca:0e:8a:04: 5e:1b:e8:e0:ff:34:fc:b2:b2:ff:44:c4:97:0d:7d: 5d:8f:d7:52:d2:42:cb:b2:c8:fd:6d:28:12:0f:ab: 3a:7b:ae:03:b2:8d:39:3f:44:d5:8a:dd:8e:94:56: 07:fe:0c:33:81:9d:4f:50:a3:d6:1e:09:a1:b3:15: dd:16:32:90:d2:47:2b:d3:ec:d2:9f:dc:69:1e:6a: 2d:02:7f:49:3b:ab:eb:08:05:4b:7d:44:d7:aa:86: 4e:97:95:8d:2f:f1:b4:cc:68:c0:cf:dc:36:42:df: fe:02:a0:be:c6:ae:9a:f4:55:c3:04:5e:81:ea:4b: 62:38:c8:e6:06:5b:ed:3e:c5:43:10:d0:a0:62:94: 6e:b2:3c:a8:68:59:69:b9:52:d5:70:30:3c:f4:4b: cc:47:f0:02:16:54:c1:e8:70:db:9c:c4:28:22:28: d9:58:25:b2:4a:63:c6:02:b3:f1:84:67:6e:c2:c5: 4c:90:88:9d:32:6e:38:cf:3c:7a:e6:e2:82:c6:6f: 5c:38:4a:d6:b0:c7:58:6b:36:60:bf:23:90:20:3f: e0:59:5d:d8:c5:b7:76:07:c2:7b:66:df:51:12:c3: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:36:77:6D:62:82:AB:3E:D8:F8:30:00:84:2B:6C:F4:50:EA:FC X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:80:81:36:f7:c6:a2:32:34:13:34:04:3c:3c:5e:53:c3:ca: 4c:37:cb:77:47:1e:98:af:6b:d8:26:e4:dd:97:2a:4a:d9:ad: 6f:8d:e1:21:92:0c:29:23:a5:a2:07:0e:73:80:5d:49:47:8e: 1c:7a:ca:9c:0f:7e:1d:fe:7a:33:5a:da:56:72:6b:74:25:c1: 32:f5:40:77:c9:77:b5:42:3c:bd:24:d5:e2:0d:8c:5b:f3:3d: 68:ba:cc:ca:80:5c:b6:c7:16:35:08:26:55:d7:ea:35:8d:6f: e9:18:3f:84:31:ce:1b:9b:ac:09:de:4a:47:c7:a8:c4:20:da: 4c:f9:f6:10:90:84:2f:0a:f4:33:06:90:a2:11:e9:1c:c9:1a: f2:bd:41:83:85:2f:7c:d1:f4:a8:27:5e:a6:24:41:a4:34:13: db:0a:1f:c0:f7:c2:f0:a6:5b:1f:95:e2:f4:68:c3:13:ff:33: 30:fe:69:30:bb:ec:7b:c3:32:bb:d8:99:02:7e:37:f5:13:11: 94:87:5a:2c:9a:76:d8:5b:23:91:06:10:dd:af:69:f2:c7:12: 10:d8:d2:50:6d:da:be:ef:71:53:f2:f3:7c:c9:49:18:b3:cf: d3:1b:9e:7e:74:31:9c:28:68:ae:a2:2f:f4:ea:29:5d:36:58: 18:08:f8:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYwNzI4MTY1MjI5WhcNMjYwODA0MTY1MjI5WjAYMRYwFAYD VQQDEw02YTY4ZGU0ZC1iMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i1C17hZumrXTiNo5Y2g71pAmMCeo/6XAsoOigReG+jg/zT8srL/RMSXDX1d j9dS0kLLssj9bSgSD6s6e64Dso05P0TVit2OlFYH/gwzgZ1PUKPWHgmhsxXdFjKQ 0kcr0+zSn9xpHmotAn9JO6vrCAVLfUTXqoZOl5WNL/G0zGjAz9w2Qt/+AqC+xq6a 9FXDBF6B6ktiOMjmBlvtPsVDENCgYpRusjyoaFlpuVLVcDA89EvMR/ACFlTB6HDb nMQoIijZWCWySmPGArPxhGduwsVMkIidMm44zzx65uKCxm9cOErWsMdYazZgvyOQ ID/gWV3Yxbd2B8J7Zt9REsM7JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyxNndt YoKrPtj4MACEK2z0UOr8MB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXoCBNvfGojI0EzQEPDxeU8PKTDfLd0cemK9r2Cbk3ZcqStmtb43hIZIMKSOl ogcOc4BdSUeOHHrKnA9+Hf56M1raVnJrdCXBMvVAd8l3tUI8vSTV4g2MW/M9aLrM yoBctscWNQgmVdfqNY1v6Rg/hDHOG5usCd5KR8eoxCDaTPn2EJCELwr0MwaQohHp HMka8r1Bg4UvfNH0qCdepiRBpDQT2wofwPfC8KZbH5Xi9GjDE/8zMP5pMLvse8My u9iZAn439RMRlIdaLJp22FsjkQYQ3a9p8scSENjSUG3avu9xU/LzfMlJGLPP0xue fnQxnChorqIv9OopXTZYGAj4mw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:47 2026 by rpki-client