$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: TRxYqQXi7XvhXsMh/vAyDHdIjy1BDPGGjGOYVuopt1k= Subject key identifier: 85:1E:99:7B:08:AA:D8:15:EF:9F:A3:E5:45:1E:5D:7C:3D:CD:2B:83 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 011B Signing time: Mon 27 Jul 2026 07:58:07 +0000 Manifest this update: Mon 27 Jul 2026 07:58:06 +0000 Manifest next update: Mon 03 Aug 2026 07:58:06 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: UYDYYc1BsacCrkRomt6NImuaYJiAzKrQGCqOBFwvngI=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: pme8BEo7whHw/nE985T4YJ9ukK31bkVycJriDT2MMKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Jul 27 07:58:06 2026 GMT Not After : Aug 3 07:58:06 2026 GMT Subject: CN=6a670f8e-c98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:a3:5c:e6:96:af:ea:fb:42:f6:e3:3b:d5: 11:3a:da:ed:d6:69:6b:3c:80:b0:ba:55:e9:2b:70: 7a:eb:e3:94:6b:df:c5:51:31:35:ef:0b:ce:e6:dc: ec:8d:c9:68:ad:48:61:6c:27:64:40:38:1f:64:da: dd:06:0b:a9:55:f5:54:73:2a:b1:97:52:49:f3:2c: 7c:03:bc:8c:a6:8f:5a:42:11:2b:e5:b1:7f:97:88: f8:4d:6f:01:b3:59:8e:82:ec:58:15:7c:cb:5e:f5: 71:5e:63:5d:3f:fa:ae:b2:ab:88:3c:9e:a6:5f:03: a3:81:2b:9d:9f:52:77:58:3a:67:15:c1:5e:08:a2: 8f:41:08:00:9b:cf:22:f7:b5:f1:a8:7b:19:da:f1: 4e:c2:0f:6a:f3:2b:5f:d2:cc:8b:6e:1c:3d:51:fc: d1:bc:32:61:82:e6:38:88:c1:50:38:e3:a2:b1:ac: 3f:bf:76:76:56:5e:9c:e1:e0:4a:68:90:ee:16:98: 2e:5f:24:0e:6f:3c:96:b0:61:54:45:97:94:cf:0f: 18:30:2c:25:9a:43:29:98:79:05:28:6e:fd:88:e1: 0f:b7:1d:ad:f5:a7:b4:f0:57:04:34:73:de:4a:f4: c9:14:51:b8:0c:f8:26:5f:e6:f5:e1:63:26:69:63: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1E:99:7B:08:AA:D8:15:EF:9F:A3:E5:45:1E:5D:7C:3D:CD:2B:83 X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a5:1b:b4:02:4e:ab:dd:27:23:15:ee:0e:53:00:b6:56:d4: 90:a2:cc:00:9f:73:df:3a:32:38:9c:a2:eb:44:4d:70:42:2c: cc:c2:2a:c3:8e:86:87:51:ea:f2:5e:59:52:45:a6:37:7d:32: 52:2a:2a:8f:a9:18:c0:44:3a:0a:12:7f:b2:26:72:c5:2d:6c: 28:51:a5:bd:4b:83:1b:52:99:ae:ee:ff:d3:b3:0c:42:7e:68: 09:d1:cd:82:be:02:d0:33:75:f3:99:61:10:22:76:44:d1:93: 53:73:69:1d:e9:de:4f:48:30:c0:ee:97:d0:63:0d:3c:4c:e4: 9e:c0:4b:cf:c2:07:44:d7:61:31:b8:38:d8:28:90:7e:3d:dc: 85:8d:92:9d:d4:3b:2d:67:34:5c:8d:74:a6:76:30:1a:cb:d9: ab:74:05:38:7d:56:55:fb:92:00:72:42:d5:a7:c4:87:a5:e5: 82:25:6c:6c:72:a7:d8:c4:7d:29:9f:26:51:e9:9f:3b:20:39: f6:6a:96:20:e8:8d:a3:a4:8f:f1:76:fc:4c:a3:12:20:85:e7: d0:a4:c7:20:8a:fe:8b:50:e8:bd:32:9b:74:f8:ff:eb:e7:ba: 23:f3:49:a1:e6:b5:3c:45:a3:a2:18:97:47:ba:0e:02:b2:3d: a9:94:53:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz QjUzQzcyRkEwHhcNMjYwNzI3MDc1ODA2WhcNMjYwODAzMDc1ODA2WjAYMRYwFAYD VQQDEw02YTY3MGY4ZS1jOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UGjXOaWr+r7QvbjO9UROtrt1mlrPICwulXpK3B66+OUa9/FUTE17wvO5tzs jclorUhhbCdkQDgfZNrdBgupVfVUcyqxl1JJ8yx8A7yMpo9aQhEr5bF/l4j4TW8B s1mOguxYFXzLXvVxXmNdP/qusquIPJ6mXwOjgSudn1J3WDpnFcFeCKKPQQgAm88i 97XxqHsZ2vFOwg9q8ytf0syLbhw9UfzRvDJhguY4iMFQOOOisaw/v3Z2Vl6c4eBK aJDuFpguXyQObzyWsGFURZeUzw8YMCwlmkMpmHkFKG79iOEPtx2t9ae08FcENHPe SvTJFFG4DPgmX+b14WMmaWPjwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUemXsI qtgV75+j5UUeXXw9zSuDMB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0 QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy LTU0WEhXWlktUFE3VThjdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHqUbtAJOq90nIxXuDlMAtlbUkKLMAJ9z3zoyOJyi60RNcEIszMIqw46Gh1Hq 8l5ZUkWmN30yUioqj6kYwEQ6ChJ/siZyxS1sKFGlvUuDG1KZru7/07MMQn5oCdHN gr4C0DN185lhECJ2RNGTU3NpHeneT0gwwO6X0GMNPEzknsBLz8IHRNdhMbg42CiQ fj3chY2SndQ7LWc0XI10pnYwGsvZq3QFOH1WVfuSAHJC1afEh6XlgiVsbHKn2MR9 KZ8mUemfOyA59mqWIOiNo6SP8Xb8TKMSIIXn0KTHIIr+i1DovTKbdPj/6+e6I/NJ oea1PEWjohiXR7oOArI9qZRTOg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:10 2026 by rpki-client