$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: Gst3hQkfmTS3W8DXLiBipaJNcN0jruLj4S3WbPMNlTw= Subject key identifier: 25:5B:F3:F2:D6:62:DC:D6:31:B5:FF:6F:DE:14:43:A7:29:40:1D:74 Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: A3 Signing time: Mon 27 Jul 2026 09:23:57 +0000 Manifest this update: Mon 27 Jul 2026 09:23:56 +0000 Manifest next update: Mon 03 Aug 2026 09:23:56 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: sR0Qg4AkWCtJ6kFAxnxzuBkEHhpWFg6tOSBYAw57kvc=) 2: 0C4B4A28892811F1A62CD15C5611F970.roa (hash: QmtANBl3xbqi6d33sHeUXu4Ac01FQws4OrK79nYT1zU=) 3: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Jul 27 09:23:56 2026 GMT Not After : Aug 3 09:23:56 2026 GMT Subject: CN=6a6723ad-10ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d9:99:7a:5b:38:18:60:23:b9:38:c0:db:07: c7:39:d7:b3:25:ab:20:2c:42:01:b0:5f:29:76:1b: 71:1f:21:4c:1e:71:55:9c:1c:25:34:1a:b4:0d:c6: 36:e5:09:e7:3f:4b:f6:8b:5c:e5:51:a0:e3:6f:86: d4:47:87:2a:d4:15:46:9c:26:92:18:34:3c:e0:06: c9:b4:19:40:44:31:ab:4c:61:f4:2d:fd:84:04:e3: 42:58:03:b0:76:50:05:3c:71:8c:87:ef:8e:c2:b2: 24:cd:0f:f2:5a:3e:c9:14:a0:af:07:e0:94:c0:af: b9:f5:80:46:52:7c:a9:ec:b4:32:7f:5b:67:07:73: fb:9c:3d:04:d5:dc:a0:ac:6c:6f:ec:1e:e7:98:5e: d7:f1:c1:ba:72:10:97:f6:ec:32:0b:d4:5d:6a:e6: 2a:84:bf:f5:b5:24:a4:5a:82:ab:f0:0c:58:fa:4b: 90:db:b1:0c:81:69:83:f6:60:b0:97:17:c3:10:22: b9:90:8e:6a:c9:ab:e8:14:1d:6c:2e:f2:26:77:94: 1a:ae:10:db:4d:7c:d6:7b:4c:04:1f:ad:12:a4:ed: 10:4c:18:0e:e4:7c:7e:22:e4:b2:b3:50:29:14:f8: 54:46:52:ca:c3:e8:f1:b0:64:03:4a:c5:68:c5:0d: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:F3:F2:D6:62:DC:D6:31:B5:FF:6F:DE:14:43:A7:29:40:1D:74 X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d9:83:3d:3a:25:0a:40:0c:ba:44:53:c2:9c:48:85:f5:65: b2:ac:fe:dd:f1:55:c4:48:78:9d:7b:b4:15:b4:c9:b4:f7:4e: 5d:69:7b:ae:ba:c6:e6:bf:36:9c:8b:48:35:e2:8a:e6:f6:b1: 35:e3:12:2d:bc:80:5e:9f:f9:fc:b6:5a:7a:d0:ef:4b:b7:a0: 6f:b9:34:3d:f4:15:c9:d5:71:86:b6:bc:b5:90:11:f9:f2:59: 90:10:33:3f:20:2c:ff:3d:5c:a3:a2:2c:1f:e3:07:5b:a4:28: 7b:12:88:a4:5c:d0:2b:56:b5:7a:3c:bf:65:10:35:f3:81:e6: 37:6d:26:bf:dd:f5:c2:1f:38:dc:fe:b1:b1:40:b2:a5:9c:ed: da:a9:11:bf:b4:bb:5b:dd:38:09:a6:e4:7c:48:e9:f3:55:12: a6:f2:14:cf:b8:f1:4d:76:16:fd:0d:69:0a:a3:59:1a:bd:04: 5b:74:5f:50:27:7d:e0:68:04:a4:c6:e0:26:ce:f8:fa:9f:b5: 04:37:c7:aa:6c:4f:3e:bb:c7:5c:11:21:3d:d8:9f:ec:db:69: 0d:0b:13:83:f2:9b:82:6c:b9:a1:b1:12:9a:1f:5d:ca:57:e0: f8:79:d8:e2:ca:a0:8b:95:11:70:89:57:01:9f:92:30:ec:fd: b8:84:d4:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy RDg2RDgyQUUwHhcNMjYwNzI3MDkyMzU2WhcNMjYwODAzMDkyMzU2WjAYMRYwFAYD VQQDEw02YTY3MjNhZC0xMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tmZels4GGAjuTjA2wfHOdezJasgLEIBsF8pdhtxHyFMHnFVnBwlNBq0DcY2 5QnnP0v2i1zlUaDjb4bUR4cq1BVGnCaSGDQ84AbJtBlARDGrTGH0Lf2EBONCWAOw dlAFPHGMh++OwrIkzQ/yWj7JFKCvB+CUwK+59YBGUnyp7LQyf1tnB3P7nD0E1dyg rGxv7B7nmF7X8cG6chCX9uwyC9RdauYqhL/1tSSkWoKr8AxY+kuQ27EMgWmD9mCw lxfDECK5kI5qyavoFB1sLvImd5QarhDbTXzWe0wEH60SpO0QTBgO5Hx+IuSys1Ap FPhURlLKw+jxsGQDSsVoxQ1uoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVb8/LW YtzWMbX/b94UQ6cpQB10MB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0IwNy9EODg1NDQ5MjhGRDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1k Q1lYajh0YmpIbXN0aHRncTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJNmDPTolCkAMukRTwpxIhfVlsqz+3fFVxEh4nXu0FbTJtPdOXWl7rrrG5r82 nItINeKK5vaxNeMSLbyAXp/5/LZaetDvS7egb7k0PfQVydVxhra8tZAR+fJZkBAz PyAs/z1co6IsH+MHW6QoexKIpFzQK1a1ejy/ZRA184HmN20mv931wh843P6xsUCy pZzt2qkRv7S7W904CabkfEjp81USpvIUz7jxTXYW/Q1pCqNZGr0EW3RfUCd94GgE pMbgJs74+p+1BDfHqmxPPrvHXBEhPdif7NtpDQsTg/Kbgmy5obESmh9dylfg+HnY 4sqgi5URcIlXAZ+SMOz9uITUUQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:35:55 2026 by rpki-client