$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: rYfsfqikBGyLwwoGubkjIQnRPvzIATv0Whdxo6FbMRc= Subject key identifier: 34:EF:6B:64:B2:81:3B:63:B3:E3:A5:95:AA:3A:2B:5A:98:31:8F:DA Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 3572 Signing time: Tue 28 Jul 2026 14:38:26 +0000 Manifest this update: Tue 28 Jul 2026 14:38:25 +0000 Manifest next update: Tue 04 Aug 2026 14:38:25 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: j+kfbQJdX+RqUy+juyg4ndYzWU7hCFSafZpwiCF9tbU=) 2: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: xn1GYfH1rwc+2AIvQfDokFXkj6OoQH1mNdhrUcoaQW0=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: WdRTaGnFoQwXTrDKxW4rp2v7Q/g6mL76weyA7zS/lnI=) 4: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: QvGmtT1ZWDXn7Q9qTG1+FbSqpfo986BnpmRtmxx/sP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Jul 28 14:38:25 2026 GMT Not After : Aug 4 14:38:25 2026 GMT Subject: CN=6a68bee2-670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:3a:ac:c5:e4:6a:38:85:36:3a:73:71:01: ff:89:c4:8d:e8:fe:95:5e:3a:2a:2b:ee:2a:73:b6: 8c:4f:54:68:f0:c6:53:b2:20:e5:11:a7:15:2d:62: 14:d2:7b:01:89:b6:78:ad:3e:20:2f:72:1e:e1:69: 7e:0c:0e:cb:f8:24:d2:bf:d1:a9:84:01:14:ac:df: 17:73:1d:a6:f3:5c:3c:7c:6d:9a:32:69:cd:cd:d6: bf:89:2f:7a:7a:1e:1d:5c:0c:bb:d2:9f:b4:b2:dc: 88:3f:d4:ea:66:ef:d0:95:06:c3:72:74:94:f2:77: 62:09:e4:d1:d3:2d:b4:0b:be:a0:84:11:df:7d:c9: f3:0a:b2:cd:84:6f:0e:80:8b:1a:84:79:84:7b:10: b8:66:69:d8:0b:d0:cf:62:76:64:f6:f7:a8:73:1d: 5a:cb:9c:ff:85:80:73:5c:34:d9:38:e8:51:91:28: f9:37:96:9a:c0:6b:78:cd:87:ac:c1:e0:c8:c4:dd: 24:42:b0:dd:db:83:81:6f:d4:d0:71:6a:ef:e0:5b: cd:8f:c1:01:9d:66:98:31:5a:11:34:f9:9b:d3:dc: 1e:28:b3:25:b7:43:28:12:b2:4f:db:f1:57:b1:9b: 69:c0:25:8f:c3:5f:68:fb:2c:10:a4:28:35:dd:ee: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EF:6B:64:B2:81:3B:63:B3:E3:A5:95:AA:3A:2B:5A:98:31:8F:DA X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:d6:39:f6:a1:ff:82:21:fe:a9:42:da:04:eb:42:3f:19: f5:e2:10:08:cd:ab:a5:3c:d7:d3:61:e7:37:2f:48:e8:62:90: 99:67:ca:e1:66:93:de:ac:f6:d7:09:7c:09:0f:ee:d5:64:d5: 38:36:37:6b:b3:e8:1c:23:b2:68:51:27:9a:96:1d:4c:f4:f3: 62:a4:4b:e0:92:e9:61:37:b5:06:86:46:b6:ed:d1:1e:c4:1e: c2:68:bc:c3:e4:25:ef:a5:18:a6:07:91:eb:a5:61:81:9d:e1: f1:7e:b5:85:95:2e:3a:ab:42:d7:26:02:7b:61:eb:84:6e:1b: 32:6a:19:e7:ce:2b:9a:9f:d7:74:5d:50:7a:5b:a0:29:30:61: 9a:c9:0e:f7:5b:b9:1d:cb:11:d8:a0:f7:de:d0:c9:94:28:69: c7:58:ca:b6:85:eb:23:0b:a8:cd:09:73:7f:11:55:80:53:da: 11:9f:f2:c7:bb:30:58:31:77:fb:55:23:9e:57:5b:6a:d1:b0: 9d:3f:52:92:7c:2b:cf:f5:b8:cc:f0:6c:63:27:59:e4:70:e6: ac:3b:42:b7:5f:a3:de:73:2c:02:98:aa:96:61:69:00:d9:90: 79:dc:97:c9:50:0b:d9:ae:02:ad:15:04:ac:e0:81:bb:02:29: 39:d5:1b:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjYwNzI4MTQzODI1WhcNMjYwODA0MTQzODI1WjAYMRYwFAYD VQQDEw02YTY4YmVlMi02NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXw6rMXkajiFNjpzcQH/icSN6P6VXjoqK+4qc7aMT1Ro8MZTsiDlEacVLWIU 0nsBibZ4rT4gL3Ie4Wl+DA7L+CTSv9GphAEUrN8Xcx2m81w8fG2aMmnNzda/iS96 eh4dXAy70p+0styIP9TqZu/QlQbDcnSU8ndiCeTR0y20C76ghBHffcnzCrLNhG8O gIsahHmEexC4ZmnYC9DPYnZk9veocx1ay5z/hYBzXDTZOOhRkSj5N5aawGt4zYes weDIxN0kQrDd24OBb9TQcWrv4FvNj8EBnWaYMVoRNPmb09weKLMlt0MoErJP2/FX sZtpwCWPw19o+ywQpCg13e6lTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTva2Sy gTtjs+Ollao6K1qYMY/aMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnlPWOfah/4Ih/qlC2gTrQj8Z9eIQCM2rpTzX02HnNy9I6GKQmWfK4WaT3qz2 1wl8CQ/u1WTVODY3a7PoHCOyaFEnmpYdTPTzYqRL4JLpYTe1BoZGtu3RHsQewmi8 w+Ql76UYpgeR66VhgZ3h8X61hZUuOqtC1yYCe2HrhG4bMmoZ584rmp/XdF1Qelug KTBhmskO91u5HcsR2KD33tDJlChpx1jKtoXrIwuozQlzfxFVgFPaEZ/yx7swWDF3 +1UjnldbatGwnT9Sknwrz/W4zPBsYydZ5HDmrDtCt1+j3nMsApiqlmFpANmQedyX yVAL2a4CrRUErOCBuwIpOdUbkQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:37:43 2026 by rpki-client