$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft File: zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json) Hash identifier: NW8Ngbu4IOXKgxX3anOAzwlGnsC161JgEp6rZFRxf/s= Subject key identifier: 0D:CB:B5:73:BA:E5:30:59:8B:9A:63:42:DC:98:63:F2:47:C2:7A:E5 Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 Certificate issuer: /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft Manifest number: 0857 Signing time: Sun 26 Jul 2026 21:32:59 +0000 Manifest this update: Sun 26 Jul 2026 21:32:58 +0000 Manifest next update: Sun 02 Aug 2026 21:32:58 +0000 Files and hashes: 1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: QVWZq3YC5EXmo9CKTFVmLuhI9gdkHxsygKi0uExMCB4=) 2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QLTfJIXHekXFtibNVc4Q+2innR3VNQ5N9hMeUx/Akls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8 Validity Not Before: Jul 26 21:32:58 2026 GMT Not After : Aug 2 21:32:58 2026 GMT Subject: CN=6a667d0b-1c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:40:5f:fa:55:52:7a:b8:6f:b9:62:05:50: 5e:92:88:61:f9:53:5b:26:70:6a:c6:29:b8:99:9f: 95:4c:61:96:96:3d:f1:3b:9f:a3:7c:02:d1:71:59: 85:ab:36:33:68:f4:60:6d:09:9b:34:68:8b:95:83: 13:0e:e1:27:ab:1e:cd:cd:07:a8:ed:30:64:04:08: 59:a9:0c:08:00:a1:d1:22:be:f1:14:fc:66:6d:2d: 09:d9:79:fb:98:7b:bd:91:41:07:12:22:6a:d0:12: c9:38:54:94:04:cb:29:1c:94:2a:ea:87:6c:88:e9: aa:50:24:a8:af:b9:4f:58:d7:fd:d4:5e:53:e5:4d: 0c:47:51:2d:09:a0:f1:e5:6f:03:3f:e1:2d:ce:ae: b2:be:c8:2d:42:dc:19:1f:96:0c:50:27:63:c9:d2: 88:c5:ee:94:35:ca:de:c0:e0:35:dc:3a:ac:23:2c: bd:44:d0:89:c3:d0:ce:0e:66:57:ca:d8:2b:57:35: d3:9e:0f:07:79:71:f2:51:03:8f:ea:0a:b8:83:65: a9:fb:2f:f5:1c:61:53:b8:1f:14:24:87:2f:23:d4: 29:52:37:4b:6a:45:63:44:db:67:a6:b9:8e:52:c7: e1:72:6a:13:cf:d1:dc:a5:48:82:5a:3a:82:c6:66: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CB:B5:73:BA:E5:30:59:8B:9A:63:42:DC:98:63:F2:47:C2:7A:E5 X509v3 Authority Key Identifier: keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:79:fa:bd:de:a2:df:b0:46:91:0a:79:33:51:bb:d3:be:b7: 91:3a:89:d2:73:37:ee:3e:93:2d:c6:c3:90:89:8b:b3:a4:e8: 93:37:a7:92:f2:9a:7c:2b:7d:2b:c7:c2:2f:4c:67:1e:66:44: 3e:eb:3c:36:6e:96:09:35:b3:2f:3f:ba:ad:46:92:a2:07:ba: 3d:f8:b9:68:60:75:33:75:25:ec:0b:d5:7f:65:dc:67:96:e7: 4e:17:2a:19:3a:15:44:76:bc:b9:6b:be:a4:42:0c:9a:cd:1b: cc:95:a3:3f:d2:f3:fa:f5:cc:9a:96:8a:80:99:c3:0b:65:b2: ab:11:00:a6:30:e7:7d:79:4a:7c:43:7d:72:37:0b:48:98:0a: 27:1e:c8:38:96:a5:3e:27:43:1d:f0:36:69:af:98:30:e3:a7: 5d:74:a8:32:dc:4b:8b:db:30:ea:74:60:f3:ac:61:bc:44:34: 87:72:20:9b:9b:32:5a:2e:a7:75:51:2e:69:97:9e:33:f5:cb: 9e:09:9b:9e:5d:b0:ee:b8:f1:e9:1a:08:f0:16:a8:d3:10:84: 9d:e6:46:11:ce:eb:24:a2:d7:46:ee:fa:19:39:b9:fd:fd:d5: 1e:1a:0b:d8:06:e0:15:4d:c6:c1:65:52:fe:23:21:7f:99:d0: ae:09:a3:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5 N0NBRDM3QjgwHhcNMjYwNzI2MjEzMjU4WhcNMjYwODAyMjEzMjU4WjAYMRYwFAYD VQQDEw02YTY2N2QwYi0xYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn9AX/pVUnq4b7liBVBekohh+VNbJnBqxim4mZ+VTGGWlj3xO5+jfALRcVmF qzYzaPRgbQmbNGiLlYMTDuEnqx7NzQeo7TBkBAhZqQwIAKHRIr7xFPxmbS0J2Xn7 mHu9kUEHEiJq0BLJOFSUBMspHJQq6odsiOmqUCSor7lPWNf91F5T5U0MR1EtCaDx 5W8DP+Etzq6yvsgtQtwZH5YMUCdjydKIxe6UNcrewOA13DqsIyy9RNCJw9DODmZX ytgrVzXTng8HeXHyUQOP6gq4g2Wp+y/1HGFTuB8UJIcvI9QpUjdLakVjRNtnprmO UsfhcmoTz9HcpUiCWjqCxmZFPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3LtXO6 5TBZi5pjQtyYY/JHwnrlMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq bjdkY0NoMEtSQm1YeXRON2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALnn6vd6i37BGkQp5M1G70763kTqJ0nM37j6TLcbDkImLs6TokzenkvKafCt9 K8fCL0xnHmZEPus8Nm6WCTWzLz+6rUaSoge6Pfi5aGB1M3Ul7AvVf2XcZ5bnThcq GToVRHa8uWu+pEIMms0bzJWjP9Lz+vXMmpaKgJnDC2WyqxEApjDnfXlKfEN9cjcL SJgKJx7IOJalPidDHfA2aa+YMOOnXXSoMtxLi9sw6nRg86xhvEQ0h3Igm5syWi6n dVEuaZeeM/XLngmbnl2w7rjx6RoI8Bao0xCEneZGEc7rJKLXRu76GTm5/f3VHhoL 2AbgFU3GwWVS/iMhf5nQrgmj9Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:36 2026 by rpki-client