$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: WA/AKUHhek8OsySWR03K9cXDnZvO5FGl2K5T+f2SebY= Subject key identifier: 53:CE:42:0C:5C:A1:BF:D6:2B:0E:28:22:CB:B9:E8:4E:42:EF:70:67 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 0144 Signing time: Mon 27 Jul 2026 07:15:15 +0000 Manifest this update: Mon 27 Jul 2026 07:15:15 +0000 Manifest next update: Mon 03 Aug 2026 07:15:15 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: Il9xpAGkMqQCs+rk8W27EW8oYSa/R4hYF6Aha7nKWAk=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: c0roN8cPiQejDa+804Uoxjig98zoRoNUAxeOFr9K58Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Jul 27 07:15:15 2026 GMT Not After : Aug 3 07:15:15 2026 GMT Subject: CN=6a670583-7716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:ac:cb:22:a5:8c:73:48:6e:41:6d:2c:e8: aa:c5:f2:ba:bf:a2:e2:7c:6e:e3:b2:75:5a:73:4d: ba:c4:42:7b:fa:b2:52:13:88:c6:11:6f:ab:3e:d8: 0f:2b:ed:3e:ec:bf:54:2d:3f:79:c8:19:a2:f7:18: 89:02:a6:7c:0d:bb:60:13:30:57:e4:19:f7:5a:6a: bc:c6:6d:d1:05:db:66:f1:0c:b2:39:ee:86:03:6f: 87:8c:0a:67:00:37:b6:ee:bc:f8:de:1a:c9:28:7e: 4f:8f:9f:04:42:2e:f0:e5:9d:e9:1d:5d:8b:21:1f: 81:5f:f1:09:b6:bf:1b:ea:33:2c:9b:c8:95:96:6d: 0c:12:73:fe:33:92:ef:c8:38:7e:65:3c:01:1c:7c: 69:27:d2:2f:56:6b:f1:e8:03:58:5e:fd:83:09:3d: 14:32:b7:48:6b:46:1b:e8:2c:a9:1b:ad:1b:b6:e5: 0c:16:00:ce:17:6e:4b:69:c5:d7:fc:f0:8e:e8:d3: 98:88:66:3e:8e:92:59:19:e4:1c:36:0c:f8:b8:8e: 45:04:47:a6:c2:30:61:c1:6c:52:43:8b:d0:50:b4: 4b:32:34:1a:6c:d3:2c:fe:53:a3:09:cb:15:f5:f8: 0f:f0:10:ff:32:d5:6e:31:32:c1:15:a6:e0:84:cf: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CE:42:0C:5C:A1:BF:D6:2B:0E:28:22:CB:B9:E8:4E:42:EF:70:67 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:2f:90:f8:14:65:dc:58:ce:00:21:bf:60:1b:8d:3b:da: c1:80:58:37:57:86:87:e0:ca:29:b3:3d:2a:3d:a4:7d:1b:da: 09:63:49:87:8d:26:85:e6:cb:a2:a5:22:81:6e:f6:ba:be:28: ad:c1:ad:95:72:47:33:9d:55:ed:c0:09:78:db:5a:27:f1:a4: 36:e1:43:8f:1c:90:a2:bd:48:7b:c9:55:ec:ff:ca:ce:1a:b9: 0e:82:da:dd:a9:9b:59:b1:87:88:1f:4f:ac:22:b0:a6:d9:4f: 74:9e:64:63:f4:92:ad:df:98:55:dc:82:d2:8c:74:1a:99:c1: d8:b4:9f:e8:e6:96:02:c7:1e:62:e0:b1:ea:ee:e0:c2:ac:6b: 52:18:23:47:5b:eb:93:57:d4:2c:80:f8:fc:ed:ed:4d:bf:fa: 82:a7:93:02:8c:f0:f5:00:51:55:0a:5d:84:74:a1:54:25:e4: 76:6c:d2:47:14:b4:fd:4a:03:1f:a7:48:a6:d3:f8:f1:d0:3b: 27:35:3d:aa:66:e3:bb:0c:6a:f6:8f:73:dc:ab:47:1d:ee:7d: a5:65:37:0e:c5:80:45:38:ba:7b:4a:e1:c2:b4:af:52:f2:47: e9:9a:9d:ac:1d:8f:1e:f2:c0:76:76:b3:07:b1:71:f9:b3:9a: 01:ea:a5:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA5RkUxMTAvBgNVBAUTKDY0Q0NDMTY2QzU4QzM4RkU4Q0MxOTc2RjVDRjA3QzFE RDA2RjY4MTQwHhcNMjYwNzI3MDcxNTE1WhcNMjYwODAzMDcxNTE1WjAYMRYwFAYD VQQDEw02YTY3MDU4My03NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTGsyyKljHNIbkFtLOiqxfK6v6LifG7jsnVac026xEJ7+rJSE4jGEW+rPtgP K+0+7L9ULT95yBmi9xiJAqZ8DbtgEzBX5Bn3Wmq8xm3RBdtm8QyyOe6GA2+HjApn ADe27rz43hrJKH5Pj58EQi7w5Z3pHV2LIR+BX/EJtr8b6jMsm8iVlm0MEnP+M5Lv yDh+ZTwBHHxpJ9IvVmvx6ANYXv2DCT0UMrdIa0Yb6CypG60btuUMFgDOF25LacXX /PCO6NOYiGY+jpJZGeQcNgz4uI5FBEemwjBhwWxSQ4vQULRLMjQabNMs/lOjCcsV 9fgP8BD/MtVuMTLBFabghM9bvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPOQgxc ob/WKw4oIsu56E5C73BnMB8GA1UdIwQYMBaAFGTMwWbFjDj+jMGXb1zwfB3Qb2gU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDlGRS8zODAzQUExQzlC MTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9QNk13WmR2WFBCOEhkQnZh QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9Q Nk13WmR2WFBCOEhkQnZhQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB48vkPgUZdxYzgAhv2AbjTvawYBYN1eGh+DKKbM9Kj2kfRvaCWNJh40mhebL oqUigW72ur4orcGtlXJHM51V7cAJeNtaJ/GkNuFDjxyQor1Ie8lV7P/Kzhq5DoLa 3ambWbGHiB9PrCKwptlPdJ5kY/SSrd+YVdyC0ox0GpnB2LSf6OaWAsceYuCx6u7g wqxrUhgjR1vrk1fULID4/O3tTb/6gqeTAozw9QBRVQpdhHShVCXkdmzSRxS0/UoD H6dIptP48dA7JzU9qmbjuwxq9o9z3KtHHe59pWU3DsWARTi6e0rhwrSvUvJH6Zqd rB2PHvLAdnazB7Fx+bOaAeql0Q== -----END CERTIFICATE-----Generated at Wed Jul 29 06:56:11 2026 by rpki-client