$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft File: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json) Hash identifier: T64uiWFPnO/eceDKRG7E3inEJEicL995m9zet09jVvs= Subject key identifier: 45:C4:5E:25:6B:EC:BD:84:A4:89:CB:33:C8:FE:B4:20:6C:34:3A:8D Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 Certificate issuer: /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft Manifest number: 0D67 Signing time: Sun 26 Jul 2026 18:17:36 +0000 Manifest this update: Sun 26 Jul 2026 18:17:35 +0000 Manifest next update: Sun 02 Aug 2026 18:17:35 +0000 Files and hashes: 1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: qLYxD4Lgf2c8EKX9msvAgHIUeFLOnhd8jsWZ2CCD1hA=) 2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: 9a0DmjZ9WtrPbMbEmNnoQ2iB4wOKOazyVMvcL5JNv20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Validity Not Before: Jul 26 18:17:35 2026 GMT Not After : Aug 2 18:17:35 2026 GMT Subject: CN=6a664f40-8e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:36:67:0e:12:4f:a4:20:87:e1:90:ee:c3: 1e:b3:b0:c7:23:68:84:a9:75:d7:28:74:6e:9a:1f: f8:42:17:ad:12:e6:03:bf:34:35:e2:dd:e3:95:6f: 7f:9d:fe:31:a4:d5:79:0d:5d:0b:b3:5b:e3:da:2b: 57:9b:84:39:65:48:63:e5:af:fb:af:f5:9e:ae:0f: 8f:fb:8c:c9:59:c0:28:d6:c2:1e:ac:8b:41:f2:58: 44:bd:d6:5c:da:2a:3d:29:bb:df:18:4b:31:58:40: cb:20:55:72:3f:03:86:68:81:43:38:bf:23:66:8c: 82:ed:fd:11:8d:fc:20:a5:a4:eb:8d:bc:ad:a4:81: 77:d2:f4:ac:21:9d:79:c3:94:24:ee:e4:73:88:4e: c8:01:7c:6f:37:9a:0e:51:af:3e:9d:e4:3a:6c:53: 47:a1:53:eb:45:5b:37:0a:51:16:90:d2:c3:c7:68: 3a:38:a9:82:62:5e:f7:12:2e:99:3f:ac:3c:9b:e6: 49:f3:9d:f5:b7:1f:c0:2c:bc:c6:cf:39:70:e4:81: 26:e1:48:96:a7:eb:65:17:35:91:ab:50:3b:ff:2a: 8d:bf:c8:9e:b6:50:f9:5e:d2:d8:51:e4:10:3a:d1: 08:98:6a:dc:cb:74:6b:6e:22:78:91:c7:a2:d6:9d: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:5E:25:6B:EC:BD:84:A4:89:CB:33:C8:FE:B4:20:6C:34:3A:8D X509v3 Authority Key Identifier: keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f2:fd:ee:01:75:6e:1d:cc:5d:7e:14:7f:b3:40:ab:aa:21: f3:e4:3c:a8:c0:03:bb:a7:01:02:38:bb:2b:c5:88:04:6e:fc: 46:1c:41:77:c2:26:5c:dd:20:65:5d:98:51:4f:da:eb:14:72: 4b:33:9b:73:af:6a:ff:17:a2:dd:d5:d6:b4:6a:92:19:e6:a4: 56:95:70:37:b5:a1:7c:e2:ec:4c:64:ac:2c:2a:09:29:96:ba: 1c:87:af:ae:c5:54:dc:e5:5e:7c:b8:1d:46:58:c7:bb:c9:5e: 0c:10:b2:87:c8:65:f1:78:ad:ad:46:91:ed:54:17:d6:85:0d: db:dd:33:84:4b:cb:3d:52:48:6f:eb:de:2e:15:72:f8:61:d0: 29:8a:ec:14:8a:b5:7e:51:04:94:4c:14:32:23:20:ad:84:e2: 7c:bb:f3:75:38:c2:22:6f:b2:33:ba:ed:56:5e:4a:56:a8:88: 26:2d:b7:5c:30:64:3d:13:a2:51:d7:d7:dd:74:ec:f0:7d:ef: b7:29:30:72:f2:43:91:52:0d:74:5f:e4:89:c5:bc:aa:2d:39: 97:fd:66:eb:ad:13:c3:17:68:b1:5a:28:0a:81:22:74:c9:6f: 29:6e:25:a1:08:b5:7a:d1:eb:29:f6:51:4d:3b:01:e2:4e:43: 24:09:bf:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQjAxMTAvBgNVBAUTKENDODUwOUQzMUZCNjNBOERERDZCRjJEM0Q4NEM3QkMw QjJCQTNGQzAwHhcNMjYwNzI2MTgxNzM1WhcNMjYwODAyMTgxNzM1WjAYMRYwFAYD VQQDEw02YTY2NGY0MC04ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylA2Zw4ST6Qgh+GQ7sMes7DHI2iEqXXXKHRumh/4QhetEuYDvzQ14t3jlW9/ nf4xpNV5DV0Ls1vj2itXm4Q5ZUhj5a/7r/Werg+P+4zJWcAo1sIerItB8lhEvdZc 2io9KbvfGEsxWEDLIFVyPwOGaIFDOL8jZoyC7f0RjfwgpaTrjbytpIF30vSsIZ15 w5Qk7uRziE7IAXxvN5oOUa8+neQ6bFNHoVPrRVs3ClEWkNLDx2g6OKmCYl73Ei6Z P6w8m+ZJ8531tx/ALLzGzzlw5IEm4UiWp+tlFzWRq1A7/yqNv8ietlD5XtLYUeQQ OtEImGrcy3RrbiJ4kcei1p0OXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXEXiVr 7L2EpInLM8j+tCBsNDqNMB8GA1UdIwQYMBaAFMyFCdMftjqN3Wvy09hMe8Cyuj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZCMC9BM0FCNDNCMkY4 N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9vM2RhX0xUMkV4N3dMSzZQ OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJVUoweC0yT28zZGFfTFQyRXg3d0xLNlA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZCMC9BM0FCNDNCMkY4N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9v M2RhX0xUMkV4N3dMSzZQOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALfL97gF1bh3MXX4Uf7NAq6oh8+Q8qMADu6cBAji7K8WIBG78RhxBd8ImXN0g ZV2YUU/a6xRySzObc69q/xei3dXWtGqSGeakVpVwN7WhfOLsTGSsLCoJKZa6HIev rsVU3OVefLgdRljHu8leDBCyh8hl8XitrUaR7VQX1oUN290zhEvLPVJIb+veLhVy +GHQKYrsFIq1flEElEwUMiMgrYTifLvzdTjCIm+yM7rtVl5KVqiIJi23XDBkPROi UdfX3XTs8H3vtykwcvJDkVINdF/kicW8qi05l/1m660TwxdosVooCoEidMlvKW4l oQi1etHrKfZRTTsB4k5DJAm/Aw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:10 2026 by rpki-client