$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: kd5Gb71cfrehDDJnEUlec6PvLm7NcRR2CjPzYwTTvnM= Subject key identifier: 3F:D3:C9:12:39:CD:4B:DE:89:D1:74:9F:B9:D5:47:AC:0A:FD:72:1A Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0A96 Signing time: Tue 28 Jul 2026 19:50:11 +0000 Manifest this update: Tue 28 Jul 2026 19:50:11 +0000 Manifest next update: Tue 04 Aug 2026 19:50:11 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: nDMXO/8HUx0JYD5ERB8gemYCG5pVvkgHQHZuz/BBdLM=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: EASpkdXObrJ8H1sWrr81zx66bGecEu9OLYPesUTFCoA=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: bQj5mxklQD19F906ONQY4Ae0sdx03lDa6OD6mt+hkGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Jul 28 19:50:11 2026 GMT Not After : Aug 4 19:50:11 2026 GMT Subject: CN=6a6907f3-778a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:c0:6e:6f:7a:27:07:84:52:e1:91:17:73: 1a:21:34:34:1d:b1:5f:2e:44:a6:45:f5:c6:b1:4b: f2:47:83:67:01:21:69:ab:9b:84:60:aa:87:6e:c9: 1c:1d:0e:c8:3f:fd:88:a6:35:14:d4:3f:1a:20:46: cc:f7:d4:6d:c5:09:0c:b7:bf:7a:30:a1:11:49:bd: 86:fd:6c:b3:b7:fe:02:87:2c:6e:ab:ea:ea:3e:49: d6:ba:fd:88:b5:6a:d9:7c:82:ee:21:74:61:5f:e6: e9:78:0a:12:1b:47:78:99:d7:81:80:bd:39:ba:43: 3f:03:39:4a:f4:cf:bc:6d:f9:bd:fd:9c:6b:ce:8f: ef:69:39:12:ad:ba:54:77:bd:c6:ad:17:a7:9c:37: cd:4d:ff:6d:03:32:2b:3f:72:bf:6e:76:d2:2a:bb: 7e:ce:a8:69:e7:96:1c:fe:79:a1:4b:dc:de:40:fd: 75:ae:93:e1:f5:48:a3:34:21:ee:a5:da:96:a9:08: a3:bf:f4:12:35:bb:f3:f7:d7:bb:1e:69:a3:64:26: 95:bd:5b:7a:ac:75:c6:5b:46:6d:a0:16:cd:4f:62: 55:ae:10:87:5b:86:75:a1:d2:3d:a5:9b:1c:2f:69: 12:61:02:ce:74:81:87:78:a1:65:52:12:36:75:23: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:C9:12:39:CD:4B:DE:89:D1:74:9F:B9:D5:47:AC:0A:FD:72:1A X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:fe:fd:ac:db:ba:fe:1c:92:11:8f:02:24:64:06:c4:9a:f9: 25:db:4a:38:57:ff:ee:e7:69:33:d7:b1:8e:74:c0:ca:9b:2e: c0:d0:f8:cf:f1:5f:a5:11:ff:24:bd:ec:d9:ab:3d:6c:7d:e3: 40:da:8d:32:41:83:e7:d0:63:1a:5a:ba:02:37:91:52:6d:a7: 32:be:08:bb:ef:b9:f0:62:58:2f:46:a0:e8:6e:81:38:5c:86: 14:03:1c:36:c8:eb:12:f9:74:ea:b8:12:66:01:3b:c0:79:f7: 96:32:7c:16:6a:a2:66:3c:d4:58:20:29:af:92:91:fe:89:e5: 81:cb:92:f6:c6:70:8a:11:a4:9d:bb:79:95:88:b1:d8:cb:09: 9a:8d:e6:76:5c:59:82:4b:f5:e4:a4:aa:30:9d:37:f2:56:76: 84:76:c5:87:b0:a1:3b:f4:56:da:03:45:52:f5:0e:3e:eb:20: 69:c3:2e:c1:f7:09:a7:92:00:20:9e:3d:a7:ce:c0:0b:6f:35: 32:37:d8:17:fe:a5:78:02:cb:2a:08:ae:4e:59:df:57:60:5d: d1:79:7f:59:e9:20:88:36:07:0d:9c:19:03:64:3a:9f:59:24: dc:1a:fa:c3:7b:20:d8:cc:78:d6:2a:5d:b1:ce:68:5a:90:03: 15:cf:21:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjYwNzI4MTk1MDExWhcNMjYwODA0MTk1MDExWjAYMRYwFAYD VQQDEw02YTY5MDdmMy03NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqvAbm96JweEUuGRF3MaITQ0HbFfLkSmRfXGsUvyR4NnASFpq5uEYKqHbskc HQ7IP/2IpjUU1D8aIEbM99RtxQkMt796MKERSb2G/Wyzt/4Chyxuq+rqPknWuv2I tWrZfILuIXRhX+bpeAoSG0d4mdeBgL05ukM/AzlK9M+8bfm9/Zxrzo/vaTkSrbpU d73GrRennDfNTf9tAzIrP3K/bnbSKrt+zqhp55Yc/nmhS9zeQP11rpPh9UijNCHu pdqWqQijv/QSNbvz99e7HmmjZCaVvVt6rHXGW0ZtoBbNT2JVrhCHW4Z1odI9pZsc L2kSYQLOdIGHeKFlUhI2dSMVLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/TyRI5 zUveidF0n7nVR6wK/XIaMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc/79rNu6/hySEY8CJGQGxJr5JdtKOFf/7udpM9exjnTAypsuwND4z/FfpRH/ JL3s2as9bH3jQNqNMkGD59BjGlq6AjeRUm2nMr4Iu++58GJYL0ag6G6BOFyGFAMc NsjrEvl06rgSZgE7wHn3ljJ8FmqiZjzUWCApr5KR/onlgcuS9sZwihGknbt5lYix 2MsJmo3mdlxZgkv15KSqMJ038lZ2hHbFh7ChO/RW2gNFUvUOPusgacMuwfcJp5IA IJ49p87AC281MjfYF/6leALLKgiuTlnfV2Bd0Xl/WekgiDYHDZwZA2Q6n1kk3Br6 w3sg2Mx41ipdsc5oWpADFc8hvw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:20 2026 by rpki-client