$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: YIlRDGlyMpbrpRpW2exJX9bYAyRaKraA1XDPLse+pe4= Subject key identifier: 4E:8C:B9:9E:BE:A8:DE:81:BB:7D:A9:0C:CD:7A:DD:E1:C7:DA:E7:76 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E54 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0DAC Signing time: Tue 28 Jul 2026 16:53:50 +0000 Manifest this update: Tue 28 Jul 2026 16:53:49 +0000 Manifest next update: Tue 04 Aug 2026 16:53:49 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: gTv0l6/3eQD2LbtEhKIcbpGQPg6B5MB3KFw0E8gVcaA=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=) 3: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=) 4: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3668 (0xe54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jul 28 16:53:49 2026 GMT Not After : Aug 4 16:53:49 2026 GMT Subject: CN=6a68de9e-dde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:1a:44:2b:7b:18:40:b4:3a:d0:eb:d7:26: 25:aa:e0:ab:b2:e1:de:6c:17:18:7f:e1:81:6e:b1: 83:2d:05:d4:e3:56:e0:11:7c:e0:e5:17:7c:4b:cf: e9:87:b8:1a:ab:39:ea:c7:33:9e:f6:bd:63:a2:2e: 9f:9f:f6:70:65:8c:6a:ac:3e:d0:56:c2:44:e3:80: ba:a5:63:fe:d8:ad:27:97:77:06:87:05:2f:07:30: 1a:11:e9:1e:9d:c6:34:b1:d6:cd:ab:52:96:87:fa: 29:6b:30:c4:00:e4:0e:99:7f:f1:f1:d5:46:9d:5f: 9b:84:85:92:dc:a9:c4:2b:5c:0c:b5:2a:63:4c:5b: 17:ef:a4:85:f7:af:d2:9a:5e:b5:3d:a2:14:18:7f: d7:94:44:d9:20:3e:e5:41:65:d9:08:5f:fd:05:65: 51:76:69:b6:9f:fb:95:2c:4a:59:e1:f1:a3:4b:f1: fe:2f:52:50:62:2b:d1:11:8b:58:04:16:4e:34:8a: 37:29:ea:ab:49:60:3b:ba:5e:27:77:64:44:d1:ab: dc:2d:92:37:5b:00:9b:9a:b9:19:86:a0:72:42:de: cf:f3:df:67:2e:94:04:1e:73:17:d0:3c:9f:20:08: bf:9b:49:11:ba:01:81:84:a4:aa:a8:a7:11:85:51: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8C:B9:9E:BE:A8:DE:81:BB:7D:A9:0C:CD:7A:DD:E1:C7:DA:E7:76 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:a5:04:cf:a4:78:16:d0:30:ac:a6:5a:6a:41:27:c2:0b:47: 3f:f9:f2:ba:49:ad:d6:db:36:0f:9f:54:c2:83:b3:eb:4c:bc: f8:e4:67:a0:12:35:5e:49:af:c3:38:c9:04:b7:7b:cf:10:88: eb:a2:f7:1f:03:ea:90:a5:ca:9c:80:cd:c2:00:94:7c:a1:49: e2:91:87:3f:b9:5a:d5:88:2e:4b:98:33:fb:c1:de:1d:f7:50: c1:b0:f3:fb:e5:e2:b2:75:c0:e7:cb:14:0f:60:74:ca:57:e3: 6f:e8:89:da:bd:c3:17:34:a8:24:e4:7d:c1:07:01:00:44:41: 28:5b:1d:24:47:80:a1:34:46:2f:09:21:37:b7:29:d4:74:b5: 8c:d8:21:60:74:5d:0b:4b:b2:4f:7c:e5:77:5c:1c:2f:70:96: a1:0b:43:e8:73:13:02:4e:07:fe:21:c3:f7:41:4a:93:ca:5a: 4c:a5:b0:e3:31:7a:5e:4d:5d:df:da:e2:8c:b3:f2:d6:64:0a: 77:98:8e:0f:99:aa:71:20:35:ff:b7:6a:b3:59:40:4c:b9:71: 3e:f2:bd:9a:79:e7:2e:2a:9e:90:90:93:1e:dc:ae:1c:73:67: 20:0b:44:3d:47:a5:1e:a3:b9:d8:b7:56:f7:4f:23:71:e8:82: 31:04:76:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwNzI4MTY1MzQ5WhcNMjYwODA0MTY1MzQ5WjAYMRYwFAYD VQQDEw02YTY4ZGU5ZS1kZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu8aRCt7GEC0OtDr1yYlquCrsuHebBcYf+GBbrGDLQXU41bgEXzg5Rd8S8/p h7gaqznqxzOe9r1joi6fn/ZwZYxqrD7QVsJE44C6pWP+2K0nl3cGhwUvBzAaEeke ncY0sdbNq1KWh/opazDEAOQOmX/x8dVGnV+bhIWS3KnEK1wMtSpjTFsX76SF96/S ml61PaIUGH/XlETZID7lQWXZCF/9BWVRdmm2n/uVLEpZ4fGjS/H+L1JQYivREYtY BBZONIo3KeqrSWA7ul4nd2RE0avcLZI3WwCbmrkZhqByQt7P899nLpQEHnMX0Dyf IAi/m0kRugGBhKSqqKcRhVHoRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6MuZ6+ qN6Bu32pDM163eHH2ud2MB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA16UEz6R4FtAwrKZaakEnwgtHP/nyukmt1ts2D59UwoOz60y8+ORnoBI1Xkmv wzjJBLd7zxCI66L3HwPqkKXKnIDNwgCUfKFJ4pGHP7la1YguS5gz+8HeHfdQwbDz ++XisnXA58sUD2B0ylfjb+iJ2r3DFzSoJOR9wQcBAERBKFsdJEeAoTRGLwkhN7cp 1HS1jNghYHRdC0uyT3zld1wcL3CWoQtD6HMTAk4H/iHD90FKk8paTKWw4zF6Xk1d 39rijLPy1mQKd5iOD5mqcSA1/7dqs1lATLlxPvK9mnnnLiqekJCTHtyuHHNnIAtE PUelHqO52LdW908jceiCMQR2hg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:09:25 2026 by rpki-client