$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: A382kCcn8vWlcpIOtWI4RM0CXH1paJMVThSlwR3rQOc= Subject key identifier: 04:E7:BA:0F:8C:74:C9:48:65:43:8F:44:9D:79:7C:B3:3E:B4:BA:EA Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 0881 Signing time: Sun 26 Jul 2026 21:22:48 +0000 Manifest this update: Sun 26 Jul 2026 21:22:47 +0000 Manifest next update: Sun 02 Aug 2026 21:22:47 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: n+iPymVrw39Xll0u5GUZuARJhVCHM81+6ifNTkwDyJg=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: 6D7ij53r9ioYBrQpTrEg7bEtxQIHnICUtJjGzqeUXdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: Jul 26 21:22:47 2026 GMT Not After : Aug 2 21:22:47 2026 GMT Subject: CN=6a667aa8-aa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:53:d4:9a:53:d7:9c:ae:87:d1:87:93:b3: 28:c7:0a:cc:0f:2e:0d:62:47:8c:1a:e2:7b:bc:98: 6e:8a:f2:af:5b:85:df:14:75:3f:d1:28:85:2e:6c: c9:4a:7f:e5:e5:6a:6e:cd:1f:38:ac:86:e0:64:41: 4c:a4:93:c5:d4:26:4c:09:10:c7:d1:55:cd:3c:ed: 56:45:2f:05:ed:3b:4c:4d:2c:29:53:d7:e0:6e:be: 57:09:c4:7f:af:47:b7:f6:e7:7d:a7:a3:21:89:3d: 5e:56:b8:fc:9a:e0:9e:7c:a2:d6:b9:d5:57:97:d2: 7c:01:6b:a8:20:c6:d7:f7:41:9c:db:98:a8:e4:90: 6c:6c:b7:1a:38:1d:94:b5:35:6e:40:db:70:67:de: 3c:ba:10:1c:d8:88:8f:f1:a3:b2:3d:4e:9a:83:19: cc:b2:a3:e8:ed:78:83:90:49:f1:58:36:58:af:ca: 0a:fc:af:52:bd:00:04:27:af:c2:87:fb:d0:01:64: 54:42:74:78:48:db:ed:c1:f5:9c:e8:61:a1:76:6d: 8b:b6:d1:34:c4:e4:86:41:b4:a1:eb:c1:c6:8c:c9: 8b:e1:27:a0:d7:22:91:a5:78:4e:61:13:9b:c7:57: 9b:24:47:f5:51:8b:32:45:31:b1:3e:2a:e3:9d:83: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E7:BA:0F:8C:74:C9:48:65:43:8F:44:9D:79:7C:B3:3E:B4:BA:EA X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c4:92:af:c2:1f:14:71:50:e3:41:6b:ec:aa:e1:b1:39:0c: 15:bb:30:a8:05:e2:85:16:87:b8:d4:66:23:33:19:51:bc:c5: 39:20:3b:ab:12:9b:9d:3f:16:79:03:1b:ec:a7:ba:d8:f4:d9: 6d:32:b4:2d:2a:62:47:75:a2:a6:dd:24:1d:46:22:67:2e:93: f4:92:6a:13:99:26:41:ea:d6:62:d6:b5:ef:b3:bc:4b:86:cc: 4c:f7:83:eb:b1:3d:e7:87:2b:f3:c1:0f:95:4a:38:8b:59:aa: 7e:f6:17:45:20:53:62:d9:6a:74:dd:61:a8:49:91:49:83:d6: 51:08:66:8b:41:3f:7b:e4:dc:51:e3:b6:2c:fc:ce:7e:9e:31: 1b:0c:4d:35:0b:03:8b:4f:89:35:4b:0a:97:a3:ef:82:cb:c2: 5e:9a:f1:65:07:d2:c0:e0:c2:28:88:b0:6c:a7:21:27:a7:cc: ad:98:5b:12:81:b9:69:6a:7e:b7:18:ff:31:c3:ab:f9:18:45: 93:c3:fd:71:de:12:77:2f:3e:b0:f3:75:f3:65:0a:f2:79:b3: 9a:c1:09:ad:71:0a:a9:df:01:29:cd:c8:e9:f4:08:61:6e:74: 7b:ae:8f:e9:81:66:23:16:b6:b2:23:60:ea:83:eb:b7:9d:31: be:78:84:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjYwNzI2MjEyMjQ3WhcNMjYwODAyMjEyMjQ3WjAYMRYwFAYD VQQDEw02YTY2N2FhOC1hYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xlT1JpT15yuh9GHk7MoxwrMDy4NYkeMGuJ7vJhuivKvW4XfFHU/0SiFLmzJ Sn/l5WpuzR84rIbgZEFMpJPF1CZMCRDH0VXNPO1WRS8F7TtMTSwpU9fgbr5XCcR/ r0e39ud9p6MhiT1eVrj8muCefKLWudVXl9J8AWuoIMbX90Gc25io5JBsbLcaOB2U tTVuQNtwZ948uhAc2IiP8aOyPU6agxnMsqPo7XiDkEnxWDZYr8oK/K9SvQAEJ6/C h/vQAWRUQnR4SNvtwfWc6GGhdm2LttE0xOSGQbSh68HGjMmL4Seg1yKRpXhOYROb x1ebJEf1UYsyRTGxPirjnYNIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATnug+M dMlIZUOPRJ15fLM+tLrqMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgsSSr8IfFHFQ40Fr7KrhsTkMFbswqAXihRaHuNRmIzMZUbzFOSA7qxKbnT8W eQMb7Ke62PTZbTK0LSpiR3Wipt0kHUYiZy6T9JJqE5kmQerWYta177O8S4bMTPeD 67E954cr88EPlUo4i1mqfvYXRSBTYtlqdN1hqEmRSYPWUQhmi0E/e+TcUeO2LPzO fp4xGwxNNQsDi0+JNUsKl6PvgsvCXprxZQfSwODCKIiwbKchJ6fMrZhbEoG5aWp+ txj/McOr+RhFk8P9cd4Sdy8+sPN182UK8nmzmsEJrXEKqd8BKc3I6fQIYW50e66P 6YFmIxa2siNg6oPrt50xvniEkg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:14 2026 by rpki-client