$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: k52BXbfVi+yjOaWO680DcWkf6N36tV0+NmF448NJwMk= Subject key identifier: 83:85:54:B6:21:F5:7B:78:94:87:39:3B:EA:C1:88:92:FD:C5:0C:35 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 0163 Signing time: Mon 27 Jul 2026 07:13:09 +0000 Manifest this update: Mon 27 Jul 2026 07:13:09 +0000 Manifest next update: Mon 03 Aug 2026 07:13:09 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: wcn1BkHE2UJqeVWTDiMBp7dktSCFt6Ll4z/FzZ0loXM=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) 3: 7AF7C814840211F1973E26E995A30FBC.roa (hash: is6JOCj8UH69lDcFhNaVF+Wuwi+xpA8ahsitf2M2Xz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Jul 27 07:13:09 2026 GMT Not After : Aug 3 07:13:09 2026 GMT Subject: CN=6a670505-43f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:38:42:2f:7c:8b:c9:26:4e:a5:39:2f:92: 87:da:db:5d:22:ea:33:e1:28:aa:03:db:fd:72:6b: 41:27:a5:27:9c:86:29:c1:dd:c3:25:9d:eb:33:1e: 46:dc:f3:f2:0c:61:11:4a:9b:7e:a9:00:b7:7c:9b: cb:0f:37:1d:2d:c8:d5:b9:cc:f1:cd:ce:39:15:a7: d5:0a:bb:cb:65:c5:15:5b:3b:4d:40:7a:fa:1e:c2: 7c:c4:8b:4a:20:1c:76:38:c6:83:a0:6e:fc:cb:bb: 28:f5:72:67:5f:b2:c4:2e:53:25:69:51:5b:a6:46: a9:ac:ad:0b:a3:68:91:ed:35:79:88:e7:e7:3e:21: 9b:b7:0d:b9:29:dd:45:ec:c2:b3:74:e1:b7:14:d5: 34:de:36:74:0d:c4:85:c5:fb:a1:e1:c1:53:0d:69: 0b:6c:f9:fc:52:86:20:7a:f8:15:fc:3b:48:24:e3: 8d:c3:3c:51:f1:e3:be:da:8b:25:0d:ac:87:25:9b: 55:41:f4:aa:00:40:97:d3:6f:03:92:16:31:b1:c6: 7d:51:11:25:33:df:f5:70:b5:08:71:1f:e2:af:88: 33:1f:14:eb:2e:29:ab:ec:0d:64:99:71:54:7b:05: da:a3:5a:ac:13:60:00:a7:cc:ad:da:34:9e:76:45: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:85:54:B6:21:F5:7B:78:94:87:39:3B:EA:C1:88:92:FD:C5:0C:35 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:14:ad:f5:8e:43:b6:f8:61:f4:e8:14:16:3c:3e:36:81:7c: c1:8c:af:7d:bb:b3:18:66:f3:9e:21:30:68:f0:db:72:d3:a3: be:9a:06:cb:64:dd:fb:1c:e2:0c:2a:9c:6c:ed:96:18:38:82: 68:f3:7d:ba:17:57:a2:9d:e5:e8:16:0b:ea:db:f3:51:0a:d1: 5f:1c:09:f1:9f:a2:e1:f2:b6:19:97:c1:3e:76:b9:cb:fc:4f: ec:e1:38:ee:a6:3a:81:8f:0d:57:50:54:69:01:69:f4:71:b5: 71:b6:cd:c3:64:4d:fd:60:ca:63:b0:31:1e:b5:81:b2:c8:9c: 51:b1:8e:03:c3:87:d5:34:20:ff:eb:99:7d:17:d8:09:03:88: 54:3d:95:1e:9b:84:ee:d2:8a:49:e2:12:48:fd:a9:4e:21:f4: 6b:d1:ad:af:4a:bc:24:06:6d:21:0c:58:2b:ca:9f:b7:7a:a3: 83:9e:05:72:ce:bc:6a:25:24:15:00:e9:0a:64:44:b2:3f:df: 93:ad:3f:12:1c:b4:a1:ed:19:cc:9a:5e:0a:ed:11:f6:f9:64: 06:be:b2:db:7f:c4:30:6d:17:3f:36:4f:b3:ed:80:2f:56:6d: c3:68:28:a9:83:43:b1:f1:04:ca:3b:9b:23:82:08:2f:db:42: 28:53:6e:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYwNzI3MDcxMzA5WhcNMjYwODAzMDcxMzA5WjAYMRYwFAYD VQQDEw02YTY3MDUwNS00M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLg4Qi98i8kmTqU5L5KH2ttdIuoz4SiqA9v9cmtBJ6UnnIYpwd3DJZ3rMx5G 3PPyDGERSpt+qQC3fJvLDzcdLcjVuczxzc45FafVCrvLZcUVWztNQHr6HsJ8xItK IBx2OMaDoG78y7so9XJnX7LELlMlaVFbpkaprK0Lo2iR7TV5iOfnPiGbtw25Kd1F 7MKzdOG3FNU03jZ0DcSFxfuh4cFTDWkLbPn8UoYgevgV/DtIJOONwzxR8eO+2osl DayHJZtVQfSqAECX028DkhYxscZ9URElM9/1cLUIcR/ir4gzHxTrLimr7A1kmXFU ewXao1qsE2AAp8yt2jSedkXCQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOFVLYh 9Xt4lIc5O+rBiJL9xQw1MB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxhSt9Y5Dtvhh9OgUFjw+NoF8wYyvfbuzGGbzniEwaPDbctOjvpoGy2Td+xzi DCqcbO2WGDiCaPN9uhdXop3l6BYL6tvzUQrRXxwJ8Z+i4fK2GZfBPna5y/xP7OE4 7qY6gY8NV1BUaQFp9HG1cbbNw2RN/WDKY7AxHrWBssicUbGOA8OH1TQg/+uZfRfY CQOIVD2VHpuE7tKKSeISSP2pTiH0a9Gtr0q8JAZtIQxYK8qft3qjg54Fcs68aiUk FQDpCmREsj/fk60/Ehy0oe0ZzJpeCu0R9vlkBr6y23/EMG0XPzZPs+2AL1Ztw2go qYNDsfEEyjubI4IIL9tCKFNuCg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:01:08 2026 by rpki-client