$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: aXMdgXA70OrxJ86OELD/MRO/9fGa5YFAu9wqdE5s9O0= Subject key identifier: FE:B4:83:7F:B8:B8:F4:5D:13:B6:FF:C4:F1:FF:87:AA:70:F9:FD:7E Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0EB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0EAD Signing time: Tue 28 Jul 2026 17:50:05 +0000 Manifest this update: Tue 28 Jul 2026 17:50:04 +0000 Manifest next update: Tue 04 Aug 2026 17:50:04 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: m5ZwfnjQ6IpawhukvVq9voFgCE+OTQg0kBj8tgiJ5Rs=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: NpwlTwI8Xm9ihx5f2AI8RzaFuXlf3KaqQ3R0nM1i1CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3766 (0xeb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Jul 28 17:50:04 2026 GMT Not After : Aug 4 17:50:04 2026 GMT Subject: CN=6a68ebcd-0193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e6:40:6a:14:ee:3a:eb:d5:b4:21:a6:d1:5b: 45:00:17:99:ff:fe:f0:4c:dc:32:42:b8:27:4d:72: a8:1f:6c:f3:ed:d5:4b:63:c1:9a:11:c9:8c:27:f2: e9:eb:2a:cf:80:6b:7f:14:a7:d5:a0:16:79:b2:f4: a7:db:98:ce:44:06:7a:54:39:97:ce:61:a3:38:16: 1d:df:a4:11:da:a9:6b:88:82:3d:52:19:ea:89:d0: d3:ff:8c:5a:74:dd:a1:45:cc:1b:19:0c:79:dc:39: 9f:2d:a4:dd:0c:5e:e6:5a:4f:c6:e3:e9:f3:e0:11: a3:7a:e2:5f:eb:1e:aa:2e:f0:14:9d:3d:ed:bd:ca: 62:e1:47:f8:be:f7:70:2e:02:8f:c2:ef:2a:81:cd: 01:9b:9e:f9:d3:9a:ce:bc:42:9c:af:c3:b2:f5:91: 92:b3:98:c5:64:70:65:e6:b2:cc:04:ac:11:45:ad: c9:ba:71:aa:9b:66:77:8d:db:44:d2:53:78:be:a9: d3:08:69:48:87:dc:ca:a4:fd:e5:bf:6c:ed:77:e6: 18:66:7c:16:44:95:c8:84:f9:94:1a:18:db:b5:22: 90:4c:c0:b8:2c:25:2b:2e:71:76:6b:21:df:59:17: 92:be:cb:5a:3b:32:d7:66:7b:0c:e2:a9:e7:d3:75: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:83:7F:B8:B8:F4:5D:13:B6:FF:C4:F1:FF:87:AA:70:F9:FD:7E X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b4:87:f8:1a:0e:11:cb:9d:a9:f0:99:d6:ff:af:6f:32:c0: b5:86:e7:1e:36:92:96:d8:11:b5:c3:c5:2a:3e:6b:cc:50:63: d9:3e:b7:3d:19:20:84:12:14:da:32:cf:71:8e:3b:59:2c:cf: 3a:74:be:c4:96:3f:37:44:28:b7:5d:c3:23:fb:66:cd:e2:84: 9d:eb:83:48:8a:57:80:43:b7:e5:df:7d:b2:99:ee:1a:44:d9: 86:e8:ab:6a:bb:1a:e6:65:c7:1e:6e:fc:6c:4e:b3:07:0f:60: 94:b8:75:db:f4:0b:50:71:65:15:f6:ee:61:44:16:de:e1:0f: 46:78:00:c0:07:04:22:a0:04:8a:f4:96:ce:59:77:a4:e8:30: 33:62:c1:90:d9:40:9e:35:65:d9:2e:60:82:47:55:f0:cf:5f: ee:15:b2:3f:54:a7:95:d2:b3:2d:10:a6:4e:8c:20:b8:91:49: 07:5c:5a:ce:ce:98:5a:00:f0:f3:d2:ae:b9:19:37:c0:36:0e: e8:4e:fb:78:39:8a:54:2e:0a:e1:59:8a:d4:ab:12:4e:62:a5: 57:0a:47:01:85:2d:9e:b9:0d:d1:d4:75:f8:51:03:6a:b0:f4: 96:0a:27:e1:f6:a4:30:ac:2f:43:7f:ac:58:ab:cd:9a:55:85: ee:f9:81:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjYwNzI4MTc1MDA0WhcNMjYwODA0MTc1MDA0WjAYMRYwFAYD VQQDEw02YTY4ZWJjZC0wMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uZAahTuOuvVtCGm0VtFABeZ//7wTNwyQrgnTXKoH2zz7dVLY8GaEcmMJ/Lp 6yrPgGt/FKfVoBZ5svSn25jORAZ6VDmXzmGjOBYd36QR2qlriII9UhnqidDT/4xa dN2hRcwbGQx53DmfLaTdDF7mWk/G4+nz4BGjeuJf6x6qLvAUnT3tvcpi4Uf4vvdw LgKPwu8qgc0Bm57505rOvEKcr8Oy9ZGSs5jFZHBl5rLMBKwRRa3JunGqm2Z3jdtE 0lN4vqnTCGlIh9zKpP3lv2ztd+YYZnwWRJXIhPmUGhjbtSKQTMC4LCUrLnF2ayHf WReSvstaOzLXZnsM4qnn03WbqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP60g3+4 uPRdE7b/xPH/h6pw+f1+MB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgLSH+BoOEcudqfCZ1v+vbzLAtYbnHjaSltgRtcPFKj5rzFBj2T63PRkghBIU 2jLPcY47WSzPOnS+xJY/N0Qot13DI/tmzeKEneuDSIpXgEO35d99spnuGkTZhuir arsa5mXHHm78bE6zBw9glLh12/QLUHFlFfbuYUQW3uEPRngAwAcEIqAEivSWzll3 pOgwM2LBkNlAnjVl2S5ggkdV8M9f7hWyP1SnldKzLRCmTowguJFJB1xazs6YWgDw 89KuuRk3wDYO6E77eDmKVC4K4VmK1KsSTmKlVwpHAYUtnrkN0dR1+FEDarD0lgon 4fakMKwvQ3+sWKvNmlWF7vmBXg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:50:20 2026 by rpki-client