$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: ZJVvUa3LGYbiFA4Po93ukBI0H4HSmGRNVN9jIgrdGZ0= Subject key identifier: 3C:D7:C8:D0:CA:E1:2D:D3:AE:E9:FC:7F:1B:EF:86:2F:1C:73:73:4C Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 0135 Signing time: Mon 27 Jul 2026 07:55:25 +0000 Manifest this update: Mon 27 Jul 2026 07:55:24 +0000 Manifest next update: Mon 03 Aug 2026 07:55:24 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: 3KGgZao0cW0nnrfpx5PQyih9NTMDwxSDbVuK45ePTVI=) 2: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=) 4: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: Jul 27 07:55:24 2026 GMT Not After : Aug 3 07:55:24 2026 GMT Subject: CN=6a670eed-3175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:02:d3:f8:54:00:69:6d:36:37:c2:11:5d: f8:6c:54:72:6e:4e:92:82:7f:88:c4:00:a0:2b:ea: 90:40:03:80:be:14:01:48:25:72:59:34:be:3a:b7: 4d:52:03:1c:8c:ac:d5:71:b1:dc:4d:12:4c:56:b7: 37:d2:e7:19:24:e0:b4:65:d1:a4:99:38:bb:bc:73: ee:7b:dd:6f:3e:c8:71:e5:2b:db:83:c2:20:70:83: 45:e0:91:95:6c:f1:0b:e3:b9:d0:2d:e1:af:0f:65: ae:ad:03:9d:75:50:ba:d3:2b:0f:99:17:fb:eb:78: c1:da:db:9b:fc:01:10:c5:2d:e8:e8:f7:04:2e:81: ef:a5:3e:b5:6d:b1:ac:f5:d6:bc:35:bf:24:db:1c: 8a:52:82:9b:dc:d9:28:26:50:c1:2a:55:29:26:17: f2:6c:bb:4e:df:ad:00:1e:f8:8c:ea:7e:a7:16:a7: 26:be:86:a1:4c:29:81:2f:98:32:28:ab:bd:64:38: 59:9f:c3:0d:23:56:11:00:0f:67:22:0a:8a:b2:d0: b2:30:d8:ae:ba:9b:59:56:3f:c5:f9:b3:dc:36:03: 57:8a:a2:0c:59:d7:ad:e1:10:4b:18:be:40:d7:11: 18:d9:b0:ae:5e:93:17:4e:c8:78:17:73:ef:99:ea: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:C8:D0:CA:E1:2D:D3:AE:E9:FC:7F:1B:EF:86:2F:1C:73:73:4C X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b8:7d:4c:e4:bb:70:2f:76:22:87:4d:af:0a:d2:38:b6:14: 17:2b:50:2b:2c:18:10:db:20:56:54:67:f8:c5:5e:9e:e3:1f: 93:9d:6f:68:fb:fb:89:eb:9d:70:51:4e:f7:64:a8:2b:2c:30: 2f:4e:88:4e:8a:38:61:94:8b:55:bc:ce:b8:80:21:08:89:2f: f7:f6:1a:7a:17:55:2d:eb:24:1b:35:e4:d2:3d:34:80:94:7e: 75:07:8d:64:bc:08:82:22:df:27:b7:3f:99:1d:ee:72:32:7a: 13:05:58:0f:ff:ae:5a:a1:c6:99:ac:2d:c9:9a:f1:9c:7f:e2: b6:ff:22:7f:1c:77:b4:7c:a0:47:8b:2d:2f:b7:f5:f8:3f:c6: 90:a2:de:6a:2b:13:7e:1a:fb:a0:be:e2:2a:1d:dc:47:02:f0: 0a:35:db:98:6f:fc:01:cd:22:cd:ed:d1:56:dc:f8:6c:de:fc: ef:b4:ee:62:8f:a4:8f:2b:a6:e9:f0:15:91:28:c9:6e:71:1f: 0e:3f:9a:45:ac:e7:23:58:2a:e3:5d:3b:75:a1:3a:a3:61:19: db:5a:71:a1:3e:cd:a2:e1:53:e4:ef:6e:25:84:d4:f1:bb:d5: 03:d9:97:4a:8d:9a:37:ab:37:f0:6e:1c:d9:c8:ad:2d:4e:14: 2c:85:68:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC QjA3MzY1OTgwHhcNMjYwNzI3MDc1NTI0WhcNMjYwODAzMDc1NTI0WjAYMRYwFAYD VQQDEw02YTY3MGVlZC0zMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVYC0/hUAGltNjfCEV34bFRybk6Sgn+IxACgK+qQQAOAvhQBSCVyWTS+OrdN UgMcjKzVcbHcTRJMVrc30ucZJOC0ZdGkmTi7vHPue91vPshx5Svbg8IgcINF4JGV bPEL47nQLeGvD2WurQOddVC60ysPmRf763jB2tub/AEQxS3o6PcELoHvpT61bbGs 9da8Nb8k2xyKUoKb3NkoJlDBKlUpJhfybLtO360AHviM6n6nFqcmvoahTCmBL5gy KKu9ZDhZn8MNI1YRAA9nIgqKstCyMNiuuptZVj/F+bPcNgNXiqIMWdet4RBLGL5A 1xEY2bCuXpMXTsh4F3Pvmeo5mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzXyNDK 4S3Trun8fxvvhi8cc3NMMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS OU5RckxXaEhKMHE3QnpaWmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLh9TOS7cC92IodNrwrSOLYUFytQKywYENsgVlRn+MVenuMfk51vaPv7ieud cFFO92SoKywwL06IToo4YZSLVbzOuIAhCIkv9/YaehdVLeskGzXk0j00gJR+dQeN ZLwIgiLfJ7c/mR3ucjJ6EwVYD/+uWqHGmawtyZrxnH/itv8ifxx3tHygR4stL7f1 +D/GkKLeaisTfhr7oL7iKh3cRwLwCjXbmG/8Ac0ize3RVtz4bN7877TuYo+kjyum 6fAVkSjJbnEfDj+aRaznI1gq4107daE6o2EZ21pxoT7NouFT5O9uJYTU8bvVA9mX So2aN6s38G4c2citLU4ULIVorQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:02:13 2026 by rpki-client