$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: 1UvAEdv/bz3aHeA/9N86WO6UUBj1du9sxtORldWZfto= Subject key identifier: 23:8B:87:78:73:77:05:DA:AE:9C:45:43:71:63:D9:88:B3:4E:63:DF Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0AD3 Signing time: Tue 28 Jul 2026 19:45:28 +0000 Manifest this update: Tue 28 Jul 2026 19:45:27 +0000 Manifest next update: Tue 04 Aug 2026 19:45:27 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: F5WpuBCvzoO1WMGTSZqYP/5OzJ9/1K4EeGwh0WmgWzI=) 2: 683CD6083EF511F1AB4378F7C3833773.roa (hash: 2AqUjb8b7TWsR15Or5pxjFuJpbFFS7iyKcRc0Dhq0k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Jul 28 19:45:27 2026 GMT Not After : Aug 4 19:45:27 2026 GMT Subject: CN=6a6906d8-3507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:f5:82:d2:51:5f:35:87:11:32:65:23:56: 98:b7:86:4f:1c:d2:5e:da:72:1d:ea:30:bd:55:15: de:b5:64:ca:e1:6b:3f:d2:e2:28:79:f9:c6:09:b7: 63:31:c2:2c:95:a3:ed:a6:3a:6e:ee:7f:99:2c:a4: 64:f8:30:19:be:04:b9:e3:e0:8b:c2:b4:2a:0f:eb: 0b:b9:1c:65:90:60:72:47:dd:1b:7c:10:49:67:bd: b8:7b:c4:44:1f:5e:9d:c9:fa:bb:e7:93:95:c5:b5: 53:62:d3:3d:ee:4c:ae:0c:0f:2c:f6:ae:c9:26:30: e1:8c:ce:83:63:29:c5:74:fa:81:e6:cb:fe:7f:c7: 14:76:f1:47:7e:10:99:27:85:fd:5c:c3:13:c0:d9: 84:d9:b2:59:ba:3e:a8:ff:e0:a8:1d:a4:08:64:0b: 76:1f:5c:2d:ef:bf:31:a9:c3:e4:1f:a2:54:82:d8: aa:ad:2c:5c:49:9c:83:ec:f2:78:34:8e:35:be:41: b9:73:97:ab:2e:fa:d9:2c:2e:af:50:e0:82:63:63: 7f:5d:fa:b8:62:a6:92:05:67:74:78:66:4c:b4:14: 80:1c:ab:e9:0a:38:9b:81:1a:ef:b1:20:82:5f:8b: ab:11:ed:4c:34:7f:53:85:75:09:2c:ea:30:ea:61: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:87:78:73:77:05:DA:AE:9C:45:43:71:63:D9:88:B3:4E:63:DF X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d9:09:8a:79:89:14:15:59:45:6b:7a:72:dd:c5:62:57:ad: 3e:8e:8c:bf:cd:a0:1f:dc:0f:d2:77:36:11:4a:55:47:56:f7: a3:7d:34:fc:9c:c7:44:9e:17:e2:ed:af:5e:05:7a:dd:24:98: 6e:e3:b8:0b:f5:bd:96:8a:38:56:b5:e3:6a:4d:a1:31:10:ba: cc:2a:68:77:4a:e4:24:f4:a3:71:a3:c3:01:32:81:ba:76:15: d2:68:4f:5e:eb:4e:56:fc:57:1a:8d:0e:3a:5c:93:8a:85:33: 03:b5:7e:e6:f2:45:19:93:2d:aa:31:44:b6:cd:ed:fe:8f:25: 42:ae:ed:a4:ab:6e:3b:67:b4:7e:8e:f1:17:fc:62:91:f2:a9: 54:a4:3e:e6:1b:b1:6a:1f:a6:76:ec:2f:b2:be:d1:02:f0:82: 47:e2:e9:59:0e:6a:ad:53:7c:28:81:69:39:f6:a5:cd:47:5f: d3:82:46:d7:39:25:d7:e1:93:1f:a0:58:d7:64:d1:94:41:bd: 66:22:4a:ef:cc:cc:4f:79:26:01:c7:19:62:1f:5f:9b:f8:5e: f9:6e:e7:b2:80:21:a1:b3:64:bb:21:e4:7d:3b:3b:84:c1:69: b5:00:78:53:9d:48:f2:20:c4:00:1f:2d:f3:5c:b9:35:db:f6: ce:4f:7f:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjYwNzI4MTk0NTI3WhcNMjYwODA0MTk0NTI3WjAYMRYwFAYD VQQDEw02YTY5MDZkOC0zNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYn1gtJRXzWHETJlI1aYt4ZPHNJe2nId6jC9VRXetWTK4Ws/0uIoefnGCbdj McIslaPtpjpu7n+ZLKRk+DAZvgS54+CLwrQqD+sLuRxlkGByR90bfBBJZ724e8RE H16dyfq755OVxbVTYtM97kyuDA8s9q7JJjDhjM6DYynFdPqB5sv+f8cUdvFHfhCZ J4X9XMMTwNmE2bJZuj6o/+CoHaQIZAt2H1wt778xqcPkH6JUgtiqrSxcSZyD7PJ4 NI41vkG5c5erLvrZLC6vUOCCY2N/Xfq4YqaSBWd0eGZMtBSAHKvpCjibgRrvsSCC X4urEe1MNH9ThXUJLOow6mHHVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOLh3hz dwXarpxFQ3Fj2YizTmPfMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNkJinmJFBVZRWt6ct3FYletPo6Mv82gH9wP0nc2EUpVR1b3o300/JzHRJ4X 4u2vXgV63SSYbuO4C/W9loo4VrXjak2hMRC6zCpod0rkJPSjcaPDATKBunYV0mhP XutOVvxXGo0OOlyTioUzA7V+5vJFGZMtqjFEts3t/o8lQq7tpKtuO2e0fo7xF/xi kfKpVKQ+5huxah+mduwvsr7RAvCCR+LpWQ5qrVN8KIFpOfalzUdf04JG1zkl1+GT H6BY12TRlEG9ZiJK78zMT3kmAccZYh9fm/he+W7nsoAhobNkuyHkfTs7hMFptQB4 U51I8iDEAB8t81y5Ndv2zk9/6w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:46:38 2026 by rpki-client