$ rpki-client -vvf rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft File: Z3baH1fz652mWcNicdGV5tPOXEU.mft (raw, json) Hash identifier: F+vROsJBodNgviEtrzKIg7yQA8UKhO86ZDy0BkC+6cI= Subject key identifier: 38:61:37:EE:52:88:CE:F6:65:24:13:F6:D6:A2:FB:6C:D5:46:43:15 Authority key identifier: 67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45 Certificate issuer: /CN=A9167352/serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft Manifest number: 11 Signing time: Mon 27 Jul 2026 11:27:24 +0000 Manifest this update: Mon 27 Jul 2026 11:27:23 +0000 Manifest next update: Mon 03 Aug 2026 11:27:23 +0000 Files and hashes: 1: Z3baH1fz652mWcNicdGV5tPOXEU.crl (hash: 6su06ahWw7weKl1SIRlYfVTnmisYGiSAz7TlntcUPwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167352, serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45 Validity Not Before: Jul 27 11:27:23 2026 GMT Not After : Aug 3 11:27:23 2026 GMT Subject: CN=6a67409c-4220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:e3:92:b7:ce:8f:4a:8b:4e:f8:89:c8:1c: a1:a8:c7:e1:92:bd:ed:c2:a9:49:63:e8:57:de:44: 57:40:92:6b:57:40:37:5d:53:db:10:61:6e:43:57: 0f:57:30:6c:7b:06:bd:d1:b4:a6:39:9d:d6:90:40: 0a:6c:a4:23:c9:28:b9:c6:d9:4c:7b:c7:13:18:81: e2:cd:93:fe:63:bd:fb:ee:9a:b8:04:66:3f:9e:de: ef:76:2e:e3:ee:0d:3a:a7:18:61:5f:64:c5:df:51: 24:68:25:ab:88:68:71:42:b1:dc:bc:f2:7d:2c:e6: de:35:f7:52:11:11:f3:ac:1d:ba:12:90:47:e7:e3: 18:84:44:65:41:f1:e4:c0:bf:6e:c0:09:0e:e3:f4: 2e:1a:d6:d1:56:1b:43:d8:be:93:04:6f:2e:6b:8f: 60:08:71:48:2d:5d:9e:c8:81:b4:48:c5:34:ad:40: 69:d1:f3:2b:0b:a3:94:18:42:aa:cf:ba:ad:5a:80: c3:bc:55:e8:04:86:a4:06:ae:c7:89:b2:ac:26:72: 28:ed:d0:b2:10:ea:21:f2:63:6e:bc:cb:ae:53:a3: bc:13:2c:dd:20:34:c3:98:b2:e9:6b:c2:93:a7:9a: 0d:7e:33:d1:80:05:19:32:d0:87:ce:57:6f:c4:59: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:37:EE:52:88:CE:F6:65:24:13:F6:D6:A2:FB:6C:D5:46:43:15 X509v3 Authority Key Identifier: keyid:67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8d:8a:ae:d5:49:e2:86:a0:8b:14:c6:19:4a:a5:d7:00:70: 49:a3:1a:ee:e6:5b:e8:65:cb:1c:21:7a:09:da:06:78:f1:40: 13:55:10:c1:43:42:c8:d6:10:1d:b9:4b:7e:68:ca:bb:89:4e: e7:68:cf:e5:16:46:0b:ca:28:ee:50:01:60:84:38:be:78:01: 71:15:dd:78:b4:99:2d:0b:e4:14:aa:e4:ea:f7:c7:8b:ff:dd: a8:6e:51:2c:07:80:7d:25:e9:24:b2:1d:3e:36:10:dc:ab:11: 0b:b8:bf:14:3c:c5:4d:62:9f:64:6a:bf:82:b6:3b:b0:b4:70: e5:48:21:77:6d:f4:a6:35:7c:4a:b2:ef:af:59:1b:dd:69:f6: ba:76:64:01:f3:1b:c9:a5:88:7d:73:34:ee:ec:4b:a5:9d:25: 61:54:c4:10:bd:e0:f5:68:a9:6a:8d:41:d1:4a:99:69:1e:3e: 74:5f:03:a9:1b:9b:6e:fc:4d:72:d9:eb:19:c2:06:0e:cc:ec: fc:b3:44:20:fc:4c:1c:ed:6a:6e:96:4c:29:de:48:54:2f:52: 08:6b:da:0d:90:7c:8e:b9:a6:37:ee:fa:bd:f5:c0:88:16:37: 13:7b:cc:b3:67:0b:7b:52:e0:fa:d8:89:79:aa:cb:ef:e0:19: 57:2b:49:67 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzM1MjExMC8GA1UEBRMoNjc3NkRBMUY1N0YzRUI5REE2NTlDMzYyNzFEMTk1RTZE M0NFNUM0NTAeFw0yNjA3MjcxMTI3MjNaFw0yNjA4MDMxMTI3MjNaMBgxFjAUBgNV BAMTDTZhNjc0MDljLTQyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBfuOSt86PSotO+InIHKGox+GSve3CqUlj6FfeRFdAkmtXQDddU9sQYW5DVw9X MGx7Br3RtKY5ndaQQApspCPJKLnG2Ux7xxMYgeLNk/5jvfvumrgEZj+e3u92LuPu DTqnGGFfZMXfUSRoJauIaHFCsdy88n0s5t4191IREfOsHboSkEfn4xiERGVB8eTA v27ACQ7j9C4a1tFWG0PYvpMEby5rj2AIcUgtXZ7IgbRIxTStQGnR8ysLo5QYQqrP uq1agMO8VegEhqQGrseJsqwmcijt0LIQ6iHyY268y65To7wTLN0gNMOYsulrwpOn mg1+M9GABRky0IfOV2/EWS8VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOGE37lKI zvZlJBP21qL7bNVGQxUwHwYDVR0jBBgwFoAUZ3baH1fz652mWcNicdGV5tPOXEUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MzUyLzhFQjBDMUVDNzA0 QTExRjFCMzUwQUJDMjY4QTMwRkJDL1ozYmFIMWZ6NjUybVdjTmljZEdWNXRQT1hF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjNiYUgxZno2NTJtV2NOaWNkR1Y1dFBPWEVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 MzUyLzhFQjBDMUVDNzA0QTExRjFCMzUwQUJDMjY4QTMwRkJDL1ozYmFIMWZ6NjUy bVdjTmljZEdWNXRQT1hFVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsjYqu1UnihqCLFMYZSqXXAHBJoxru5lvoZcscIXoJ2gZ48UATVRDBQ0LI1hAd uUt+aMq7iU7naM/lFkYLyijuUAFghDi+eAFxFd14tJktC+QUquTq98eL/92oblEs B4B9Jekksh0+NhDcqxELuL8UPMVNYp9kar+CtjuwtHDlSCF3bfSmNXxKsu+vWRvd afa6dmQB8xvJpYh9czTu7EulnSVhVMQQveD1aKlqjUHRSplpHj50XwOpG5tu/E1y 2esZwgYOzOz8s0Qg/Ewc7Wpulkwp3khUL1IIa9oNkHyOuaY37vq99cCIFjcTe8yz Zwt7UuD62Il5qsvv4BlXK0ln -----END CERTIFICATE-----Generated at Tue Jul 28 20:06:23 2026 by rpki-client