$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: A44BaOAKJF/+nZRLAFffhfvnIjPpe03Cw3eJl+DAXf0= Subject key identifier: 79:5A:B3:3A:BE:D3:0F:C6:CF:6B:AC:8D:ED:3F:C0:85:64:D0:D4:BA Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0254 Signing time: Wed 29 Jul 2026 03:24:06 +0000 Manifest this update: Wed 29 Jul 2026 03:24:06 +0000 Manifest next update: Wed 05 Aug 2026 03:24:06 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: s71FVDjOYvofVKXlD+Y5Oj1vCkKMHbtwML/l2IgMJHE=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jul 29 03:24:06 2026 GMT Not After : Aug 5 03:24:06 2026 GMT Subject: CN=6a697256-33b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:dc:59:63:1d:fa:69:f7:61:e0:67:1e:f3: 4f:06:47:8f:29:54:1f:de:0f:64:90:1b:c3:0c:e8: 3d:99:e5:ca:b2:48:05:b8:65:18:98:25:54:1a:82: 88:e5:ae:c3:1b:fe:e6:06:76:4f:d1:45:8e:78:2a: 51:45:61:de:65:21:37:f5:37:1c:45:e4:2e:ad:7d: 61:09:12:8c:bf:90:0f:bd:57:4e:f8:ff:8e:e5:ea: 4a:ef:08:4e:f5:ab:2a:52:30:08:7e:28:d9:7c:5d: aa:8e:e4:8d:9b:31:02:1a:81:58:d1:81:63:bf:f0: da:db:56:0b:e7:68:9f:2b:cc:b1:b6:e2:6a:f7:2e: 12:92:40:1b:12:e1:7f:b9:70:b4:30:8e:5d:5c:6c: 8a:ac:86:90:1b:20:29:d7:18:e8:15:b7:f1:6f:db: ff:5e:74:54:ac:55:44:0f:d5:b6:3d:40:89:d6:b4: 3b:72:b8:e7:ac:e3:60:c4:f7:b1:26:00:b0:e1:15: 2f:93:0c:4b:38:31:56:be:07:24:6b:ee:9a:b1:ed: 9f:d9:9b:ad:82:8b:81:72:b3:6e:88:dd:74:bf:51: b2:11:86:eb:08:13:1a:22:d7:08:5a:ee:9e:cf:27: da:63:6c:3a:6e:de:fd:40:68:a8:1a:1a:33:a4:ee: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5A:B3:3A:BE:D3:0F:C6:CF:6B:AC:8D:ED:3F:C0:85:64:D0:D4:BA X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:48:4e:a5:bb:0b:8a:5a:40:24:5a:83:7e:81:f1:09:8c:f7: 5c:a9:1e:99:34:33:53:fd:d3:9d:58:a6:3c:bd:b5:d4:eb:3e: 0e:f4:9d:aa:6b:e8:2e:cf:f8:ae:ce:41:27:df:8a:fe:24:e6: 87:1d:97:5a:90:90:c3:21:49:32:53:a4:4a:5f:04:08:aa:a6: a9:d3:59:15:e2:64:e9:5f:33:30:4b:71:45:93:8d:1c:7b:db: 14:3a:dc:c3:51:0d:56:05:b4:06:d1:51:a4:6f:3e:88:b5:78: 5d:ab:eb:db:3b:7c:b7:b2:a4:54:e1:47:c2:ef:e9:6f:8d:7f: 54:0a:4c:21:49:b1:2d:66:96:1c:84:70:36:97:d3:fc:4c:89: da:a7:0e:ba:79:84:99:d6:32:4e:97:d5:93:20:85:54:54:e7: c1:92:d2:6b:52:87:90:97:06:c1:ec:ef:1c:69:b3:62:40:e0: 2b:ba:84:0c:3d:5c:8c:9d:8c:a3:d9:72:2e:ab:c1:07:c5:96: e6:01:b9:e9:65:b7:3d:6d:6c:29:d8:9a:fb:bd:2b:60:6a:69: af:c9:db:79:69:11:42:70:4b:82:e1:71:f8:a4:f1:3e:70:c0: a1:47:22:9a:c0:1f:bd:f4:db:71:d9:5d:84:bc:90:5f:d1:b9: 68:15:00:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNzI5MDMyNDA2WhcNMjYwODA1MDMyNDA2WjAYMRYwFAYD VQQDEw02YTY5NzI1Ni0zM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXXcWWMd+mn3YeBnHvNPBkePKVQf3g9kkBvDDOg9meXKskgFuGUYmCVUGoKI 5a7DG/7mBnZP0UWOeCpRRWHeZSE39TccReQurX1hCRKMv5APvVdO+P+O5epK7whO 9asqUjAIfijZfF2qjuSNmzECGoFY0YFjv/Da21YL52ifK8yxtuJq9y4SkkAbEuF/ uXC0MI5dXGyKrIaQGyAp1xjoFbfxb9v/XnRUrFVED9W2PUCJ1rQ7crjnrONgxPex JgCw4RUvkwxLODFWvgcka+6ase2f2ZutgouBcrNuiN10v1GyEYbrCBMaItcIWu6e zyfaY2w6bt79QGioGhozpO4z0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlaszq+ 0w/Gz2usje0/wIVk0NS6MB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPEhOpbsLilpAJFqDfoHxCYz3XKkemTQzU/3TnVimPL211Os+DvSdqmvoLs/4 rs5BJ9+K/iTmhx2XWpCQwyFJMlOkSl8ECKqmqdNZFeJk6V8zMEtxRZONHHvbFDrc w1ENVgW0BtFRpG8+iLV4Xavr2zt8t7KkVOFHwu/pb41/VApMIUmxLWaWHIRwNpfT /EyJ2qcOunmEmdYyTpfVkyCFVFTnwZLSa1KHkJcGwezvHGmzYkDgK7qEDD1cjJ2M o9lyLqvBB8WW5gG56WW3PW1sKdia+70rYGppr8nbeWkRQnBLguFx+KTxPnDAoUci msAfvfTbcdldhLyQX9G5aBUAUQ== -----END CERTIFICATE-----Generated at Wed Jul 29 09:07:04 2026 by rpki-client