$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: 0mHDfw5ACwfcjRTZDjXkTVvey159I+DLBvs1kgV8iRI= Subject key identifier: BA:C7:0F:F0:1F:3C:BE:7B:ED:CB:C2:08:1D:2F:BC:7A:C0:F2:15:98 Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 0589 Signing time: Mon 27 Jul 2026 00:12:24 +0000 Manifest this update: Mon 27 Jul 2026 00:12:23 +0000 Manifest next update: Mon 03 Aug 2026 00:12:23 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: w0fnsFJxckjnuERxIrvcuX7iuvVzjP++2dXdC2mAqEA=) 2: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=) 3: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Jul 27 00:12:23 2026 GMT Not After : Aug 3 00:12:23 2026 GMT Subject: CN=6a66a268-ce08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:5c:c8:62:78:cb:7a:5b:fb:8b:b5:dc:e5: b9:a3:8b:74:df:15:a0:a6:b7:48:fc:e4:fe:a8:93: a0:93:c3:12:f0:a1:f2:13:d2:13:fa:75:93:af:f4: 06:88:41:d5:03:ee:5d:fa:85:23:c0:ee:dd:89:d7: 1c:42:3a:59:40:4e:4c:73:ec:9e:85:a6:fd:f7:01: d7:6b:d5:99:2a:77:82:a9:a5:63:aa:89:f8:a2:70: ee:9b:66:c8:08:5e:4f:b7:59:3b:4a:86:95:33:cd: db:60:ef:61:8a:3b:98:58:fa:f6:95:26:bf:4b:61: 9e:b3:7d:d9:79:8d:06:23:19:85:ec:0f:f8:6d:6c: ef:da:20:de:dc:36:bf:79:92:cf:12:78:6b:99:e6: d9:bb:26:ba:02:97:8d:40:5e:78:90:e2:f2:16:28: e0:7f:53:a1:d5:e2:6b:41:07:1f:33:f6:f8:63:d5: 7e:1f:8e:00:20:0a:54:df:7f:2e:ae:fb:f6:bf:22: 62:8e:98:2a:0f:70:43:0d:01:14:66:30:6d:f3:b2: 72:0c:9d:99:b4:ca:ac:a1:eb:9b:04:0c:3b:42:2c: 6f:ab:38:ed:1e:b4:df:1a:b0:98:7f:2e:ee:22:d8: f5:c4:18:b0:cd:c5:25:60:0d:f3:5c:21:a3:c8:ba: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:0F:F0:1F:3C:BE:7B:ED:CB:C2:08:1D:2F:BC:7A:C0:F2:15:98 X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:36:81:c5:65:72:fc:d5:12:f5:a5:70:ac:25:3b:ef:cd: ce:69:6b:51:f9:25:df:15:0d:fd:e6:ae:74:d0:42:43:d2:3e: 69:7f:c1:bb:be:00:88:db:c3:8a:44:00:1c:a7:46:54:73:ba: 43:45:2f:e7:95:1a:bf:14:0e:e2:0c:00:9a:3c:0f:dc:61:d8: 0e:f1:fa:3e:0c:34:7f:4b:ab:01:de:f1:f7:10:8b:21:eb:b7: 79:4c:f9:8b:bb:22:56:d5:8f:83:cc:45:0d:5f:47:d3:d7:8e: 8b:a5:35:fc:d2:9b:ea:12:a0:ac:fd:14:e1:9d:f3:22:f4:e9: 41:1f:cb:8e:e7:44:e5:34:c3:5f:8e:40:a0:c7:38:c5:9c:31: 79:0a:26:34:dd:88:18:60:b6:eb:eb:a8:cf:40:52:71:b3:af: 96:e9:51:88:e6:66:e5:b0:6b:1b:e3:2b:e8:3b:f8:85:7a:f9: 86:92:8f:55:ea:de:a3:06:90:b1:f7:ad:3a:4f:88:e7:c2:2d: 83:1d:7d:6e:0e:ae:e4:5d:a6:ac:10:65:fa:6e:78:94:43:74: d8:fe:b4:80:17:c7:7f:d3:28:d0:ee:a7:fb:fe:3b:30:3f:f8: 54:f7:ed:57:cf:bb:95:66:9e:53:f4:50:5a:59:e5:10:bb:44: 24:b8:51:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjYwNzI3MDAxMjIzWhcNMjYwODAzMDAxMjIzWjAYMRYwFAYD VQQDEw02YTY2YTI2OC1jZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJBcyGJ4y3pb+4u13OW5o4t03xWgprdI/OT+qJOgk8MS8KHyE9IT+nWTr/QG iEHVA+5d+oUjwO7didccQjpZQE5Mc+yehab99wHXa9WZKneCqaVjqon4onDum2bI CF5Pt1k7SoaVM83bYO9hijuYWPr2lSa/S2Ges33ZeY0GIxmF7A/4bWzv2iDe3Da/ eZLPEnhrmebZuya6ApeNQF54kOLyFijgf1Oh1eJrQQcfM/b4Y9V+H44AIApU338u rvv2vyJijpgqD3BDDQEUZjBt87JyDJ2ZtMqsoeubBAw7QixvqzjtHrTfGrCYfy7u Itj1xBiwzcUlYA3zXCGjyLrhrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrHD/Af PL577cvCCB0vvHrA8hWYMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPoQ2gcVlcvzVEvWlcKwlO+/NzmlrUfkl3xUN/eaudNBCQ9I+aX/Bu74AiNvD ikQAHKdGVHO6Q0Uv55UavxQO4gwAmjwP3GHYDvH6Pgw0f0urAd7x9xCLIeu3eUz5 i7siVtWPg8xFDV9H09eOi6U1/NKb6hKgrP0U4Z3zIvTpQR/LjudE5TTDX45AoMc4 xZwxeQomNN2IGGC26+uoz0BScbOvlulRiOZm5bBrG+Mr6Dv4hXr5hpKPVereowaQ sfetOk+I58Itgx19bg6u5F2mrBBl+m54lEN02P60gBfHf9Mo0O6n+/47MD/4VPft V8+7lWaeU/RQWlnlELtEJLhRUg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:33 2026 by rpki-client