$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: ZDlWfPF0QBefH4JnfuMY36Gs/Z5zC4dMdbt2cT5NqLk= Subject key identifier: 50:D0:F0:3A:53:C3:A8:1E:E9:B4:62:D5:1D:68:10:65:AA:DE:FB:DF Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 0266 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0255 Signing time: Mon 27 Jul 2026 03:53:09 +0000 Manifest this update: Mon 27 Jul 2026 03:53:09 +0000 Manifest next update: Mon 03 Aug 2026 03:53:09 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: AqsvdXmP7NyOdrnbkGWwdqxbf1u9HcBlNuVRsfaYpQw=) 2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: XjXcCi2v5LhOi6H+CcgSm46oBwz6y5FjSkvJ1fRJvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Jul 27 03:53:09 2026 GMT Not After : Aug 3 03:53:09 2026 GMT Subject: CN=6a66d625-9073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:4c:57:ce:07:9f:5e:67:23:a9:24:89:d8: d5:fe:30:25:48:8e:10:c0:81:f9:db:20:aa:b5:38: fa:aa:60:0c:a3:e2:ff:17:72:f7:2a:c7:69:65:fb: 06:70:cd:88:44:4c:54:39:32:64:3f:5e:f1:19:73: 8c:5f:eb:2a:fb:e6:62:ef:b9:da:18:09:4a:18:7c: 3b:6c:63:19:63:73:57:7c:69:ce:6a:a1:9e:e8:20: 8c:6d:aa:a5:06:30:46:da:98:b6:7d:86:b3:8c:cb: 54:de:3f:cc:4a:8a:e2:d5:c8:60:d4:2d:4a:a4:64: cd:87:be:1c:2b:e4:5a:f2:4b:29:49:6a:43:3a:33: e7:36:1e:64:cb:28:2c:14:17:04:e0:d0:48:98:5c: 2d:f7:01:e1:9e:04:d7:29:5e:e7:41:f6:22:61:d4: d6:70:9d:75:cb:85:57:2f:8e:c7:5f:5c:3f:1d:96: d5:f4:eb:87:c0:d8:ed:f9:ad:4c:52:50:cf:7f:c7: bb:1a:04:ac:7b:5a:8a:75:a5:96:9f:d6:6b:83:80: 7d:eb:bd:a1:ce:21:0f:49:7d:16:87:7f:ec:4d:20: 17:78:91:9d:5a:c6:ce:4d:05:15:fc:a5:74:d3:f2: e3:fa:52:e8:0d:83:26:bc:db:76:13:5a:8b:c3:b7: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:F0:3A:53:C3:A8:1E:E9:B4:62:D5:1D:68:10:65:AA:DE:FB:DF X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3f:91:85:1e:63:cc:08:ac:35:9c:52:4f:c0:8f:55:40:fb: e8:e0:61:e2:28:d1:da:dd:34:fb:f9:99:22:ad:2c:f1:ee:4a: bc:cb:2b:09:b0:d7:a5:ad:b2:56:00:b4:82:ac:f1:7a:fc:a4: d7:64:96:b7:84:66:07:e9:0c:38:30:9e:a7:30:51:27:d1:a4: a5:64:e1:0c:0d:c3:90:d3:41:a2:5c:68:20:25:2b:12:34:49: 24:b2:50:33:59:c5:a0:9a:18:eb:22:a2:ba:24:b9:af:74:25: cd:d6:52:ad:9b:f0:b4:b9:ce:19:36:46:f1:a9:f7:5e:e5:54: f3:20:56:01:b1:81:d7:0d:1d:a9:4c:38:40:34:fd:25:6e:9d: 08:c6:5f:7b:31:21:8d:b0:0f:eb:9e:75:0a:9d:46:da:b4:94: da:af:7f:98:70:2d:75:30:c9:7b:b2:6a:7a:bc:2b:53:1f:b2: e6:b5:eb:78:0d:0c:35:7b:30:67:23:a7:aa:47:46:d6:03:04: 06:67:96:99:db:15:f2:c1:40:1a:3a:fa:02:cf:d5:51:90:bb: ea:a1:3d:56:7b:88:3c:56:f6:cf:42:64:f6:ba:13:87:91:81: 16:4c:0e:80:a6:da:1a:1f:8d:95:5f:3a:ce:e4:7f:a4:63:43: 2d:44:45:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwNzI3MDM1MzA5WhcNMjYwODAzMDM1MzA5WjAYMRYwFAYD VQQDEw02YTY2ZDYyNS05MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOZMV84Hn15nI6kkidjV/jAlSI4QwIH52yCqtTj6qmAMo+L/F3L3KsdpZfsG cM2IRExUOTJkP17xGXOMX+sq++Zi77naGAlKGHw7bGMZY3NXfGnOaqGe6CCMbaql BjBG2pi2fYazjMtU3j/MSori1chg1C1KpGTNh74cK+Ra8kspSWpDOjPnNh5kyygs FBcE4NBImFwt9wHhngTXKV7nQfYiYdTWcJ11y4VXL47HX1w/HZbV9OuHwNjt+a1M UlDPf8e7GgSse1qKdaWWn9Zrg4B9672hziEPSX0Wh3/sTSAXeJGdWsbOTQUV/KV0 0/Lj+lLoDYMmvNt2E1qLw7cf0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDQ8DpT w6ge6bRi1R1oEGWq3vvfMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATT+RhR5jzAisNZxST8CPVUD76OBh4ijR2t00+/mZIq0s8e5KvMsrCbDXpa2y VgC0gqzxevyk12SWt4RmB+kMODCepzBRJ9GkpWThDA3DkNNBolxoICUrEjRJJLJQ M1nFoJoY6yKiuiS5r3QlzdZSrZvwtLnOGTZG8an3XuVU8yBWAbGB1w0dqUw4QDT9 JW6dCMZfezEhjbAP6551Cp1G2rSU2q9/mHAtdTDJe7JqerwrUx+y5rXreA0MNXsw ZyOnqkdG1gMEBmeWmdsV8sFAGjr6As/VUZC76qE9VnuIPFb2z0Jk9roTh5GBFkwO gKbaGh+NlV86zuR/pGNDLURFUg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:22 2026 by rpki-client