$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: KROYJyeJT9JA9iCl9isdd9FKROqz/Msh2BQ3gIXnaYw= Subject key identifier: 63:23:CF:D2:92:C4:EE:C6:3D:5F:04:B0:BF:55:44:52:A1:43:C2:DB Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1AFB Signing time: Tue 28 Jul 2026 16:23:41 +0000 Manifest this update: Tue 28 Jul 2026 16:23:41 +0000 Manifest next update: Tue 04 Aug 2026 16:23:41 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: xNfugtkWksFu4kV5Iv7m/S8CBvr/Rfz7H8wkxFdJqcE=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6941 (0x1b1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Jul 28 16:23:41 2026 GMT Not After : Aug 4 16:23:41 2026 GMT Subject: CN=6a68d78d-ff6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:3d:80:a7:ab:5b:33:1a:69:a8:78:9b:21: 39:de:c5:1a:a5:be:d9:ec:61:99:a3:f5:90:40:24: 3d:82:f5:3b:de:13:dd:4e:de:16:44:ca:42:55:94: a5:47:1a:fe:e6:98:f7:e0:af:d9:a9:cd:e5:d9:b7: 9d:91:7a:68:13:e4:59:8b:d6:bd:21:1a:65:70:d6: 7f:70:91:07:f6:80:cc:3d:a2:da:e2:13:86:cd:ed: 56:90:4a:ed:66:ab:0f:30:d8:f7:46:02:42:34:b8: e0:e4:24:75:a6:34:15:90:13:cc:8b:9b:ae:22:23: 77:6d:a6:91:d9:39:f1:5f:e8:ca:5e:4b:e8:21:e0: 77:2e:11:18:b4:8c:25:a5:34:5c:d3:f3:58:99:b2: 70:3e:c7:8d:89:bb:7a:e3:71:5b:09:ba:9e:9d:9e: d1:88:04:bc:7b:80:23:07:a1:46:92:c3:16:de:fd: a0:b0:3f:0e:d6:c2:b1:d5:91:1c:18:c9:d4:35:3c: e7:fe:8f:75:25:93:cf:a1:bc:07:f5:ae:12:6c:b5: 9c:ce:9e:67:da:1e:28:9d:59:b2:7a:ef:21:f8:f7: 9c:25:c0:99:22:63:62:ec:d9:e8:cf:dd:86:16:d5: 3c:c2:87:82:83:73:74:43:bd:34:33:a2:2b:00:1f: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:CF:D2:92:C4:EE:C6:3D:5F:04:B0:BF:55:44:52:A1:43:C2:DB X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:01:b7:d1:46:21:cc:52:0f:55:d2:e6:6f:73:61:23:1c:97: 50:82:bf:e8:9d:c9:6b:29:fb:17:00:52:16:44:87:6a:0a:d6: 09:6c:4f:7e:db:17:43:e2:fd:6e:80:d0:e4:5c:0b:ef:21:6c: 48:0a:f9:0d:da:da:e0:ff:31:2f:1b:1e:60:08:2d:2c:c2:2a: de:f5:3a:fe:5a:c3:6b:fd:90:dc:be:93:d0:41:f4:42:b1:b7: ce:96:84:c8:41:14:05:4f:da:99:2b:ab:51:9b:dc:5a:8c:1a: c4:d4:f5:54:e3:bf:9a:9c:56:fc:24:6e:09:2c:18:33:73:90: 22:90:73:e8:86:6a:c1:be:aa:9e:db:ea:b5:10:c2:16:56:c2: 80:4f:b7:34:9f:5a:dd:19:34:56:bc:d1:5f:71:36:24:c8:16: 09:0c:28:07:89:ed:71:33:7b:d6:c9:b5:36:f0:c2:82:f2:c6: 1d:d0:e3:9c:d9:7e:4f:92:11:43:46:ca:07:86:a4:28:e6:b1: de:c1:7e:74:3a:5c:4b:56:9a:b6:f3:32:85:15:47:8a:57:21: f2:e7:a8:48:0f:de:34:c3:0c:6d:f3:64:33:43:d4:db:14:9b: 7a:7f:89:e4:2f:52:79:06:d8:51:af:1e:04:3e:1c:68:7b:88: de:73:16:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwNzI4MTYyMzQxWhcNMjYwODA0MTYyMzQxWjAYMRYwFAYD VQQDEw02YTY4ZDc4ZC1mZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+U9gKerWzMaaah4myE53sUapb7Z7GGZo/WQQCQ9gvU73hPdTt4WRMpCVZSl Rxr+5pj34K/Zqc3l2bedkXpoE+RZi9a9IRplcNZ/cJEH9oDMPaLa4hOGze1WkErt ZqsPMNj3RgJCNLjg5CR1pjQVkBPMi5uuIiN3baaR2TnxX+jKXkvoIeB3LhEYtIwl pTRc0/NYmbJwPseNibt643FbCbqenZ7RiAS8e4AjB6FGksMW3v2gsD8O1sKx1ZEc GMnUNTzn/o91JZPPobwH9a4SbLWczp5n2h4onVmyeu8h+PecJcCZImNi7Nnoz92G FtU8woeCg3N0Q700M6IrAB9wIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMjz9KS xO7GPV8EsL9VRFKhQ8LbMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuwG30UYhzFIPVdLmb3NhIxyXUIK/6J3Jayn7FwBSFkSHagrWCWxPftsXQ+L9 boDQ5FwL7yFsSAr5Ddra4P8xLxseYAgtLMIq3vU6/lrDa/2Q3L6T0EH0QrG3zpaE yEEUBU/amSurUZvcWowaxNT1VOO/mpxW/CRuCSwYM3OQIpBz6IZqwb6qntvqtRDC FlbCgE+3NJ9a3Rk0VrzRX3E2JMgWCQwoB4ntcTN71sm1NvDCgvLGHdDjnNl+T5IR Q0bKB4akKOax3sF+dDpcS1aatvMyhRVHilch8ueoSA/eNMMMbfNkM0PU2xSben+J 5C9SeQbYUa8eBD4caHuI3nMW+g== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:12 2026 by rpki-client