$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: b9/iS9huXZ/QzqunfVVuc9iPG9JQJ70zUZTj+goR9xA= Subject key identifier: E8:95:73:34:71:56:E8:6C:30:07:C0:1C:EF:3A:70:96:4E:62:BB:7F Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 70 Signing time: Mon 27 Jul 2026 10:12:32 +0000 Manifest this update: Mon 27 Jul 2026 10:12:31 +0000 Manifest next update: Mon 03 Aug 2026 10:12:31 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: s0YYu4KvhMOtymngpbSUnaN26Fllripq9LtoZrNRIgo=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Jul 27 10:12:31 2026 GMT Not After : Aug 3 10:12:31 2026 GMT Subject: CN=6a672f10-a8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:b1:b9:ce:2c:c0:f4:33:7f:60:7d:d2:17: 24:95:cc:62:34:45:56:13:92:71:92:aa:d6:fb:f2: 79:88:de:73:c2:60:d9:1d:4a:a5:66:a0:53:1d:e6: a3:d8:4a:5f:7b:38:14:d7:58:6c:ee:b2:b4:a8:0a: b4:64:e3:d8:d5:8c:1a:5d:45:36:de:d1:ab:fd:d0: db:cd:2d:be:db:de:4c:50:ab:7f:3f:b6:2f:7b:71: 4f:ff:b4:84:33:7a:2a:50:96:2a:f2:4e:d7:55:18: d4:12:56:d6:4a:01:f9:4f:56:5b:e2:17:7d:4d:99: f7:b6:bf:46:07:9b:13:d1:83:b9:b7:6a:f2:ae:59: 71:fe:64:d7:27:2a:ad:4f:7e:28:3d:e5:f5:18:69: b9:a1:3f:67:00:3e:f5:bd:c0:16:d5:ea:38:29:92: 68:f8:c9:eb:a3:02:26:a1:d4:9c:98:72:db:7b:2d: 6c:95:87:9d:82:7b:a5:0b:be:ab:ef:58:70:3a:70: 53:1d:58:b0:fe:d5:59:d8:9f:45:42:8c:dd:e9:aa: df:2b:07:46:fe:54:f4:87:9e:b1:70:83:7a:a8:66: fe:3b:91:c5:e5:18:3d:87:db:b3:c1:f8:71:80:c4: 55:ea:5d:f8:3a:1a:bc:11:f2:59:33:e3:75:5c:0e: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:95:73:34:71:56:E8:6C:30:07:C0:1C:EF:3A:70:96:4E:62:BB:7F X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:55:2a:b5:ee:db:cf:a3:78:e5:bc:d7:e8:d8:c9:ba:df:55: a8:ca:bc:16:e9:d4:c3:23:ed:60:2b:b9:bb:f8:24:69:05:84: 91:67:0a:63:5e:f5:27:12:3b:5a:b7:0f:8a:98:c7:e0:fa:08: e9:06:07:ee:1d:06:d7:c2:e1:2e:4a:7e:82:d6:96:29:ed:e8: 1f:6f:df:ee:7e:54:cc:2a:a7:1f:45:f1:f0:57:8b:d2:93:68: 65:67:47:37:89:10:81:ba:b3:ae:ef:3c:b9:49:b2:17:d6:58: 34:c2:82:74:e1:11:de:11:b5:0f:95:48:de:ff:b0:c9:20:d3: f3:6b:4d:59:aa:44:7b:4c:ec:d8:31:e9:aa:84:49:3a:c4:6f: 16:b9:50:26:f5:8b:41:2f:b2:d8:a5:96:8b:26:89:5f:4b:db: 57:57:37:c9:4d:db:4e:9a:11:f9:44:98:9b:c3:dc:f6:5d:ae: 10:d1:7d:0b:90:20:3e:25:4b:7a:36:e5:fb:33:ec:75:22:46: 5b:52:a5:a2:4c:c8:2d:a1:3a:78:50:8f:be:fe:20:f9:8d:9a: 1e:31:98:a6:30:f9:2c:d8:8a:3d:19:69:c3:28:32:f2:e1:b6: 35:9c:3c:d3:bb:6c:e6:d5:d5:e2:57:d0:64:2b:52:37:43:39: 9f:2a:f2:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjA3MjcxMDEyMzFaFw0yNjA4MDMxMDEyMzFaMBgxFjAUBgNV BAMTDTZhNjcyZjEwLWE4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKcrG5zizA9DN/YH3SFySVzGI0RVYTknGSqtb78nmI3nPCYNkdSqVmoFMd5qPY Sl97OBTXWGzusrSoCrRk49jVjBpdRTbe0av90NvNLb7b3kxQq38/ti97cU//tIQz eipQliryTtdVGNQSVtZKAflPVlviF31Nmfe2v0YHmxPRg7m3avKuWXH+ZNcnKq1P fig95fUYabmhP2cAPvW9wBbV6jgpkmj4yeujAiah1JyYctt7LWyVh52Ce6ULvqvv WHA6cFMdWLD+1VnYn0VCjN3pqt8rB0b+VPSHnrFwg3qoZv47kcXlGD2H27PB+HGA xFXqXfg6GrwR8lkz43VcDhIPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6JVzNHFW 6GwwB8Ac7zpwlk5iu38wHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWVSq17tvPo3jlvNfo2Mm631WoyrwW6dTDI+1gK7m7+CRpBYSRZwpjXvUnEjta tw+KmMfg+gjpBgfuHQbXwuEuSn6C1pYp7egfb9/uflTMKqcfRfHwV4vSk2hlZ0c3 iRCBurOu7zy5SbIX1lg0woJ04RHeEbUPlUje/7DJINPza01ZqkR7TOzYMemqhEk6 xG8WuVAm9YtBL7LYpZaLJolfS9tXVzfJTdtOmhH5RJibw9z2Xa4Q0X0LkCA+JUt6 NuX7M+x1IkZbUqWiTMgtoTp4UI++/iD5jZoeMZimMPks2Io9GWnDKDLy4bY1nDzT u2zm1dXiV9BkK1I3QzmfKvJm -----END CERTIFICATE-----Generated at Tue Jul 28 22:07:23 2026 by rpki-client