$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: aq/SVJCn+F/IuItkAmYEY2Kemnjo+lgPOR3GQZtoNjg= Subject key identifier: 2F:6A:E7:22:7E:B0:73:C0:15:FA:37:3C:F0:95:F0:85:7C:9A:D9:EF Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 090C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 08F8 Signing time: Tue 28 Jul 2026 20:40:52 +0000 Manifest this update: Tue 28 Jul 2026 20:40:52 +0000 Manifest next update: Tue 04 Aug 2026 20:40:52 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: wMvGhC6BRVAybId6NIebE1t2ZMWF0uAfiWaxK0JpxwU=) 2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=) 3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Jul 28 20:40:52 2026 GMT Not After : Aug 4 20:40:52 2026 GMT Subject: CN=6a6913d4-57e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:a3:e2:12:70:f8:df:0e:1e:18:88:87:16: d8:2d:ad:bd:4f:d5:83:1a:02:be:97:8f:b9:46:01: 42:ce:15:79:f9:14:5a:60:59:24:44:39:85:68:92: d9:b6:af:a8:06:91:7f:31:1e:3b:a8:d9:e0:3e:0d: 5a:bf:00:27:bd:01:3e:70:37:79:68:44:e1:c9:89: b1:ba:f1:bd:62:96:89:3c:c3:87:e7:eb:c8:b1:a6: a3:b5:ad:c1:81:1f:02:58:7a:1b:37:5f:27:f7:c7: 30:03:1b:13:86:ad:c0:24:19:25:5d:58:dd:bc:18: ee:f9:78:16:84:5f:ff:37:6d:83:a1:36:fb:51:32: 58:ad:3e:f3:3e:10:23:e4:88:64:75:42:16:45:0d: 8c:16:27:91:41:18:d1:e8:5d:cc:bb:52:f2:bd:00: 73:88:15:7a:1b:bb:b2:da:41:40:14:0a:24:e1:f4: 1d:ee:c2:89:94:6f:26:4c:42:f8:6f:b0:3f:e0:1c: b4:1b:b7:08:8a:24:76:1d:0e:27:34:ca:20:e9:c5: 75:64:51:78:dc:e3:f0:ff:ac:ff:cc:35:b1:4f:da: 80:88:54:75:be:f3:53:13:bf:a9:b7:7c:6b:a0:04: 5a:c4:d7:26:02:73:ee:37:cf:0c:03:ff:95:ab:10: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6A:E7:22:7E:B0:73:C0:15:FA:37:3C:F0:95:F0:85:7C:9A:D9:EF X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b8:c7:4b:15:29:87:a3:eb:4f:64:22:b7:6d:be:d0:8f:94: 1a:dd:39:05:ac:b7:df:4f:03:3e:50:6d:6a:de:d9:11:3e:ec: 37:43:2b:9a:41:67:0b:87:36:73:a5:20:a3:a0:69:0d:f7:04: a7:65:a2:5a:cd:c0:aa:54:cd:7d:61:ef:c1:a7:4c:28:63:59: be:64:00:eb:0e:df:ee:85:2d:ac:95:35:09:ac:d8:66:53:38: 80:ac:74:aa:8c:82:65:82:4e:c5:0f:83:06:8f:98:e2:2b:cc: 57:db:98:06:75:a7:aa:ad:10:56:e1:8a:eb:67:9d:63:2b:46: d0:66:d9:0a:6c:41:e3:d0:d7:0c:28:d5:28:83:9c:67:7f:be: d3:df:81:7b:c0:2c:e1:fc:ba:0d:69:72:da:6c:0f:e4:37:4f: fc:0a:0e:8a:53:e8:8b:5b:11:3e:6d:72:5a:3c:3e:d1:df:6c: 10:37:63:6e:b2:27:b9:87:80:25:32:a4:35:ea:6b:47:cc:87: 5f:3e:36:65:93:c5:c2:ba:27:b9:f6:f0:9d:b8:30:37:c5:06: 62:c3:d6:35:ea:e8:f9:f4:4e:ca:99:01:81:4f:d1:cc:eb:20: 40:8f:8c:1f:08:ad:12:68:bb:26:02:32:86:11:bb:60:f2:6e: d6:f1:fd:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjYwNzI4MjA0MDUyWhcNMjYwODA0MjA0MDUyWjAYMRYwFAYD VQQDEw02YTY5MTNkNC01N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xWj4hJw+N8OHhiIhxbYLa29T9WDGgK+l4+5RgFCzhV5+RRaYFkkRDmFaJLZ tq+oBpF/MR47qNngPg1avwAnvQE+cDd5aEThyYmxuvG9YpaJPMOH5+vIsaajta3B gR8CWHobN18n98cwAxsThq3AJBklXVjdvBju+XgWhF//N22DoTb7UTJYrT7zPhAj 5IhkdUIWRQ2MFieRQRjR6F3Mu1LyvQBziBV6G7uy2kFAFAok4fQd7sKJlG8mTEL4 b7A/4By0G7cIiiR2HQ4nNMog6cV1ZFF43OPw/6z/zDWxT9qAiFR1vvNTE7+pt3xr oARaxNcmAnPuN88MA/+VqxBD+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9q5yJ+ sHPAFfo3PPCV8IV8mtnvMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLjHSxUph6PrT2Qit22+0I+UGt05Bay3308DPlBtat7ZET7sN0MrmkFnC4c2 c6Ugo6BpDfcEp2WiWs3AqlTNfWHvwadMKGNZvmQA6w7f7oUtrJU1CazYZlM4gKx0 qoyCZYJOxQ+DBo+Y4ivMV9uYBnWnqq0QVuGK62edYytG0GbZCmxB49DXDCjVKIOc Z3++09+Be8As4fy6DWly2mwP5DdP/AoOilPoi1sRPm1yWjw+0d9sEDdjbrInuYeA JTKkNeprR8yHXz42ZZPFwronufbwnbgwN8UGYsPWNero+fROypkBgU/RzOsgQI+M HwitEmi7JgIyhhG7YPJu1vH9Eg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:29:35 2026 by rpki-client