$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: M9b2IfJncciRN/jZ1SuSlc6sk7Y8Holg96LiIPVXvAc= Subject key identifier: C4:25:F4:B0:9F:61:89:BF:DC:DE:C8:78:F5:15:D4:61:0A:8B:F7:1C Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 09CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 09B7 Signing time: Sun 26 Jul 2026 20:27:56 +0000 Manifest this update: Sun 26 Jul 2026 20:27:56 +0000 Manifest next update: Sun 02 Aug 2026 20:27:56 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: l7wzsCe91DdrFziP+HlFUVDxmBuRfDDQJ4dvPn+dYY4=) 2: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo=) 3: 8698CD28A42211EB91621734C4F9AE02.roa (hash: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Jul 26 20:27:56 2026 GMT Not After : Aug 2 20:27:56 2026 GMT Subject: CN=6a666dcc-29e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:93:f9:cd:87:02:68:7b:7b:dc:9e:71:fe: c6:8e:44:07:fa:6f:27:64:2b:13:fd:73:ee:92:a3: 74:9c:b1:e0:e5:8a:c4:d7:dd:b4:82:ca:93:d7:02: d0:14:ed:56:79:64:71:f0:34:fe:49:92:cf:37:72: 44:ca:e6:75:15:6b:26:bd:6d:28:c0:48:63:8b:6c: 3f:61:11:65:a0:2b:80:8f:dc:40:cb:61:f5:5e:ce: 93:65:c8:43:3f:c4:9d:ab:e2:63:01:27:eb:fa:59: 48:52:04:3c:74:16:6f:8a:ef:45:c2:80:fa:84:42: 18:d4:37:53:7a:c9:59:2c:9a:e6:2c:31:64:1f:dd: 60:4a:25:b1:ef:b2:6c:0d:b7:b2:56:4c:42:3f:4b: 28:42:72:f4:ba:65:88:93:2b:fe:6f:dc:17:98:d1: c5:f6:13:e7:3b:7a:c7:09:62:a8:c4:c6:b4:dc:0d: 41:de:a9:ae:d5:43:23:72:47:b0:9a:a1:ec:9d:fc: 39:75:41:d8:db:a4:24:ef:0e:25:0c:97:52:7a:c3: 7c:a4:a1:9b:f1:9b:e6:47:b7:16:d3:a8:d8:cf:ef: 63:87:a8:2d:f3:10:94:42:11:fd:5d:7c:76:48:4f: 25:41:1f:62:01:29:cd:6b:2f:d0:28:39:d2:8c:a9: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:F4:B0:9F:61:89:BF:DC:DE:C8:78:F5:15:D4:61:0A:8B:F7:1C X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:36:74:89:15:13:e8:69:9d:c3:5b:e2:3f:2c:64:36:22: c9:68:8c:2c:87:be:00:60:60:5c:b0:0f:6a:0e:4b:1d:af:e5: 2c:b4:6c:b2:01:f9:87:2b:14:ec:07:89:d9:af:e9:30:4d:09: d0:85:e9:73:cf:c2:bc:67:0a:2b:e2:b7:7b:52:80:f0:39:b3: 02:c7:42:a7:49:34:2e:1d:4f:0b:7e:48:72:b9:71:88:95:5e: 0c:37:ce:8f:0f:f9:8a:a7:1c:86:79:04:0c:ab:24:ff:44:d2: 88:2d:9b:85:f0:4e:3c:f2:67:9f:86:23:9b:8f:db:24:24:96: be:5f:40:3e:62:16:00:7d:62:6a:da:23:f1:3e:16:f7:c8:b9: a9:15:90:81:38:20:63:b7:9a:5d:be:dc:34:b3:3d:21:f2:92: 56:44:45:b6:44:54:90:5a:8d:ae:88:fb:41:34:7a:2e:73:22: e8:58:e1:69:2d:20:f0:04:47:01:96:41:11:b9:16:02:dc:09: 46:a1:d1:13:3d:0f:df:9f:e3:20:00:64:37:e7:c1:f6:59:4c: 56:e8:f7:cf:69:1f:aa:ee:01:9f:32:3a:1e:c7:2e:1c:b4:b9: f4:b9:a5:bb:fc:df:5c:87:05:74:af:c6:31:4c:1a:29:2d:bc: c8:29:bb:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjYwNzI2MjAyNzU2WhcNMjYwODAyMjAyNzU2WjAYMRYwFAYD VQQDEw02YTY2NmRjYy0yOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M6T+c2HAmh7e9yecf7GjkQH+m8nZCsT/XPukqN0nLHg5YrE1920gsqT1wLQ FO1WeWRx8DT+SZLPN3JEyuZ1FWsmvW0owEhji2w/YRFloCuAj9xAy2H1Xs6TZchD P8Sdq+JjASfr+llIUgQ8dBZviu9FwoD6hEIY1DdTeslZLJrmLDFkH91gSiWx77Js DbeyVkxCP0soQnL0umWIkyv+b9wXmNHF9hPnO3rHCWKoxMa03A1B3qmu1UMjckew mqHsnfw5dUHY26Qk7w4lDJdSesN8pKGb8ZvmR7cW06jYz+9jh6gt8xCUQhH9XXx2 SE8lQR9iASnNay/QKDnSjKnvqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQl9LCf YYm/3N7IePUV1GEKi/ccMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWb02dIkVE+hpncNb4j8sZDYiyWiMLIe+AGBgXLAPag5LHa/lLLRssgH5hysU 7AeJ2a/pME0J0IXpc8/CvGcKK+K3e1KA8DmzAsdCp0k0Lh1PC35IcrlxiJVeDDfO jw/5iqcchnkEDKsk/0TSiC2bhfBOPPJnn4Yjm4/bJCSWvl9APmIWAH1iatoj8T4W 98i5qRWQgTggY7eaXb7cNLM9IfKSVkRFtkRUkFqNroj7QTR6LnMi6FjhaS0g8ARH AZZBEbkWAtwJRqHREz0P35/jIABkN+fB9llMVuj3z2kfqu4BnzI6HscuHLS59Lml u/zfXIcFdK/GMUwaKS28yCm7PA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:10:30 2026 by rpki-client