$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: j6JDOfwgt49WNL+wOFay0ZTwk3Jzm0G0n1FmRcGgTYw= Subject key identifier: E5:17:F3:EC:0A:AB:0F:4D:60:94:ED:0E:B5:BA:82:7D:8E:FB:63:02 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 029B Signing time: Mon 27 Jul 2026 03:00:23 +0000 Manifest this update: Mon 27 Jul 2026 03:00:22 +0000 Manifest next update: Mon 03 Aug 2026 03:00:22 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: PCwAlPBpCX7MyCmOtkEnn9jgzudOVb6D05+hNIlholg=) 2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) 3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Jul 27 03:00:22 2026 GMT Not After : Aug 3 03:00:22 2026 GMT Subject: CN=6a66c9c7-6660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:0b:69:2d:44:64:18:25:43:0b:43:cd:0c: 93:af:b0:85:26:c6:34:25:07:e1:11:bc:01:35:54: a8:56:c2:77:b4:68:c7:64:37:b8:a3:7d:58:e9:fe: 23:6d:17:ed:67:6e:79:0e:e2:64:e4:bf:0e:e0:be: 18:24:c8:77:91:36:11:b8:19:6f:ea:6f:0a:c2:2a: 0f:b8:29:f5:d3:02:83:3c:75:2d:f3:7f:a4:8c:b3: 2a:29:8e:54:37:91:32:a1:e4:43:ac:19:bb:dd:48: b6:82:ee:49:5d:0b:e1:d3:44:4a:7e:c2:85:03:95: 4d:dc:ea:eb:c5:79:a5:b6:ca:f5:d5:de:9e:f0:0a: e6:ae:06:d9:ed:b3:c2:2d:8c:d0:53:8f:8d:92:f1: b6:5c:e3:fb:c9:9f:d2:7c:7b:f0:ac:1e:b9:44:d8: 6b:2f:00:ef:53:db:90:d0:fe:75:3c:f5:a6:f8:5a: 28:23:66:2f:95:d1:57:b0:1c:f5:d7:d2:40:f8:44: 13:4b:b4:b6:01:9a:2a:d0:cf:f1:8c:21:b5:4f:08: 7c:20:08:86:5b:55:a2:ec:d9:88:a1:61:40:c1:23: cd:d2:c6:61:21:65:d5:99:c2:b5:13:c2:fa:12:79: a6:2d:9e:b6:df:aa:ad:51:da:21:c7:b9:77:98:d9: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:17:F3:EC:0A:AB:0F:4D:60:94:ED:0E:B5:BA:82:7D:8E:FB:63:02 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5f:f6:77:4a:2d:c4:3d:11:d6:e7:e8:e8:34:81:f3:26:76: 70:e7:ab:fe:ea:dc:df:47:29:07:39:24:56:22:c3:11:e7:27: 58:a3:6e:2d:69:49:cf:41:7f:5e:1e:bf:e9:e7:2a:18:45:80: d2:15:37:fb:e0:fd:39:3a:e6:45:97:59:69:da:db:30:19:a1: a2:f9:c4:eb:39:e8:f4:f6:a8:1f:54:c5:c9:05:b7:c0:66:dd: 23:9e:18:9e:9d:2d:40:4a:e1:50:8f:24:e7:98:cf:04:ed:22: f2:72:34:5d:43:33:d3:a7:87:04:f3:13:51:bb:75:27:03:5b: e9:d8:a6:2f:4f:a2:91:02:41:c6:6e:62:04:13:de:c2:10:a9: 33:98:c2:cf:f1:18:5b:e5:5c:e7:95:13:cf:1a:47:84:1a:d9: f8:0e:a9:c9:82:ef:5e:76:e8:7e:ff:99:5f:c1:2e:23:0b:f5: 29:3d:88:96:c5:6e:93:25:fc:a5:bf:ff:88:0b:91:5e:a7:37: 19:15:25:8a:cb:bd:e0:79:0c:f8:3b:53:8e:f4:48:87:d1:34: 13:4a:fa:0f:ed:85:23:43:d2:c3:9f:99:ee:69:e0:52:e5:fe: 92:91:f7:e6:a3:84:1e:7f:42:0b:11:e4:3e:60:a4:78:32:35: bd:6b:7d:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwNzI3MDMwMDIyWhcNMjYwODAzMDMwMDIyWjAYMRYwFAYD VQQDEw02YTY2YzljNy02NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N8LaS1EZBglQwtDzQyTr7CFJsY0JQfhEbwBNVSoVsJ3tGjHZDe4o31Y6f4j bRftZ255DuJk5L8O4L4YJMh3kTYRuBlv6m8KwioPuCn10wKDPHUt83+kjLMqKY5U N5EyoeRDrBm73Ui2gu5JXQvh00RKfsKFA5VN3OrrxXmltsr11d6e8ArmrgbZ7bPC LYzQU4+NkvG2XOP7yZ/SfHvwrB65RNhrLwDvU9uQ0P51PPWm+FooI2YvldFXsBz1 19JA+EQTS7S2AZoq0M/xjCG1Twh8IAiGW1Wi7NmIoWFAwSPN0sZhIWXVmcK1E8L6 EnmmLZ6236qtUdohx7l3mNmDNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUX8+wK qw9NYJTtDrW6gn2O+2MCMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZF/2d0otxD0R1ufo6DSB8yZ2cOer/urc30cpBzkkViLDEecnWKNuLWlJz0F/ Xh6/6ecqGEWA0hU3++D9OTrmRZdZadrbMBmhovnE6zno9PaoH1TFyQW3wGbdI54Y np0tQErhUI8k55jPBO0i8nI0XUMz06eHBPMTUbt1JwNb6dimL0+ikQJBxm5iBBPe whCpM5jCz/EYW+Vc55UTzxpHhBrZ+A6pyYLvXnbofv+ZX8EuIwv1KT2IlsVukyX8 pb//iAuRXqc3GRUlisu94HkM+DtTjvRIh9E0E0r6D+2FI0PSw5+Z7mngUuX+kpH3 5qOEHn9CCxHkPmCkeDI1vWt9Yg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:22:19 2026 by rpki-client