$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft File: Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json) Hash identifier: K6HQ/xXH1ugIzx0ZDMFMgymZ2w27DPyS/INF7W8buIo= Subject key identifier: 34:25:80:BD:CC:44:30:9C:02:41:64:0A:07:D5:9F:07:B6:36:86:84 Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 Certificate issuer: /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft Manifest number: 30 Signing time: Mon 27 Jul 2026 11:00:58 +0000 Manifest this update: Mon 27 Jul 2026 11:00:57 +0000 Manifest next update: Mon 03 Aug 2026 11:00:57 +0000 Files and hashes: 1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: SMBg3D3ldbmznB3icXOX1P1ODlUL4VGgzKwExiY61fU=) 2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Validity Not Before: Jul 27 11:00:57 2026 GMT Not After : Aug 3 11:00:57 2026 GMT Subject: CN=6a673a69-538a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:38:55:d4:b3:0f:d9:68:47:3c:ae:01:4d: 97:8c:7c:fa:49:12:63:49:17:71:38:cb:e3:9b:37: 75:a2:91:38:6e:1d:de:06:98:df:a9:e6:a0:f2:a5: e7:dd:7a:53:1c:07:89:78:83:30:cf:62:b5:e3:5d: 02:4d:1e:1f:13:52:8d:68:ce:44:07:04:6e:c1:89: 46:a2:9e:c8:c3:04:ac:7f:3f:8e:5e:45:f1:90:84: dd:d7:ac:a9:68:1e:34:d2:80:be:4f:81:a6:9a:fe: b3:f7:5a:19:73:84:d5:e0:0f:60:8c:1b:7a:19:32: af:5a:e9:b1:d6:5b:6c:70:a8:03:f8:c6:f3:9e:f5: 9c:22:8f:78:cf:86:fc:41:b3:0b:43:e5:00:a1:d2: 37:51:59:9f:22:66:73:cd:7b:59:70:15:dc:da:ca: 2c:2f:7c:68:63:7d:2e:74:f7:94:7b:ee:0e:39:62: eb:68:48:d5:f1:c0:af:cf:58:97:8d:ba:e5:05:29: 5d:fe:8a:6c:76:0c:10:df:00:b3:d8:0d:0b:ed:58: fc:b5:d6:96:f1:bf:e9:cd:e5:bd:a3:82:cc:ce:3e: aa:59:85:87:d2:d7:43:61:a8:8f:60:21:6c:a3:8c: d0:74:3e:2f:ea:2a:04:57:18:23:a8:5d:a1:37:50: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:25:80:BD:CC:44:30:9C:02:41:64:0A:07:D5:9F:07:B6:36:86:84 X509v3 Authority Key Identifier: keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8b:94:52:58:b7:17:1e:9e:e9:f1:d3:e1:34:29:f4:3e:cf: 87:6b:94:4a:74:a4:fa:32:3a:22:b9:a3:28:a1:46:e2:86:93: 75:b0:1d:60:e6:5d:67:18:e5:b3:0e:d7:d2:5d:75:81:de:ff: f1:db:69:28:e2:b7:4b:4e:3a:86:9a:75:52:9b:17:94:a7:34: 42:31:ab:42:86:d4:37:2e:a0:c0:e6:61:9a:64:bb:7c:a7:e1: e2:ae:18:e3:28:2b:ac:ad:9e:bf:4b:73:64:7d:bb:68:7e:27: b5:2f:9f:c5:5b:82:6c:09:d3:24:ee:3a:18:8b:f7:16:72:8f: 35:6a:2c:87:c8:9c:9c:ec:98:ac:6c:ab:10:e3:00:d1:36:75: 00:c5:e6:ec:12:02:fb:60:fb:10:7b:c5:37:ee:f0:28:2b:21: 08:2e:0f:9c:12:21:f0:76:d6:a2:0a:1c:59:25:ba:3e:f0:97: f0:f2:6f:10:2f:c1:e0:20:d1:12:4e:83:18:4f:ff:2e:35:c9: 64:68:00:9e:e6:22:f8:44:ea:4f:40:0e:76:34:bd:cc:44:b7: 8c:8e:d4:9c:9f:9d:0f:d3:47:33:33:4a:84:ad:c3:d0:69:bf: fe:74:49:f9:5f:95:d8:f1:fe:7d:8b:69:28:f5:24:05:99:de: 57:a2:14:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU3MjExMC8GA1UEBRMoNjdDQjExNDVBODlDRDhCNjdBRUQ5RTRFNTI4NzAzRjU1 QzE1MjFCMzAeFw0yNjA3MjcxMTAwNTdaFw0yNjA4MDMxMTAwNTdaMBgxFjAUBgNV BAMTDTZhNjczYTY5LTUzOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0YDhV1LMP2WhHPK4BTZeMfPpJEmNJF3E4y+ObN3WikThuHd4GmN+p5qDypefd elMcB4l4gzDPYrXjXQJNHh8TUo1ozkQHBG7BiUainsjDBKx/P45eRfGQhN3XrKlo HjTSgL5Pgaaa/rP3WhlzhNXgD2CMG3oZMq9a6bHWW2xwqAP4xvOe9Zwij3jPhvxB swtD5QCh0jdRWZ8iZnPNe1lwFdzayiwvfGhjfS5095R77g45YutoSNXxwK/PWJeN uuUFKV3+imx2DBDfALPYDQvtWPy11pbxv+nN5b2jgszOPqpZhYfS10NhqI9gIWyj jNB0Pi/qKgRXGCOoXaE3UKG7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNCWAvcxE MJwCQWQKB9WfB7Y2hoQwHwYDVR0jBBgwFoAUZ8sRRaic2LZ67Z5OUocD9VwVIbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTcyLzA3MkZBODg2M0VD ODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxaNjdaNU9Vb2NEOVZ3Vkli TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjhzUlJhaWMyTFo2N1o1T1VvY0Q5VndWSWJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTcyLzA3MkZBODg2M0VDODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxa NjdaNU9Vb2NEOVZ3VkliTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC5i5RSWLcXHp7p8dPhNCn0Ps+Ha5RKdKT6MjoiuaMooUbihpN1sB1g5l1nGOWz DtfSXXWB3v/x22ko4rdLTjqGmnVSmxeUpzRCMatChtQ3LqDA5mGaZLt8p+Hirhjj KCusrZ6/S3Nkfbtofie1L5/FW4JsCdMk7joYi/cWco81aiyHyJyc7JisbKsQ4wDR NnUAxebsEgL7YPsQe8U37vAoKyEILg+cEiHwdtaiChxZJbo+8Jfw8m8QL8HgINES ToMYT/8uNclkaACe5iL4ROpPQA52NL3MRLeMjtScn50P00czM0qErcPQab/+dEn5 X5XY8f59i2ko9SQFmd5XohSg -----END CERTIFICATE-----Generated at Tue Jul 28 20:06:15 2026 by rpki-client