$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: NC8cQ5DXPw9xdf7IEl42O+OVKY1Yfciqa6GebjA7fjI= Subject key identifier: DC:A5:16:B1:A9:48:13:53:44:9C:DF:0F:7D:F0:69:3A:BD:08:0F:27 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 0292 Signing time: Wed 29 Jul 2026 02:46:56 +0000 Manifest this update: Wed 29 Jul 2026 02:46:55 +0000 Manifest next update: Wed 05 Aug 2026 02:46:55 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: wsTKH1oefrHroLWLEJ5TU8Q+LZxL1mYuKNZtykdd2ro=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 02:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Jul 29 02:46:55 2026 GMT Not After : Aug 5 02:46:55 2026 GMT Subject: CN=6a6969a0-c887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:49:f3:bc:aa:72:92:c1:2c:4e:1c:95:16: 61:53:3a:61:f8:d4:30:78:18:c7:72:b0:21:95:51: 3c:f7:7f:1d:b9:78:ab:f4:b1:0f:60:3a:a3:d5:ae: 5a:73:1d:9c:3e:90:40:94:4c:6f:40:21:49:5a:dd: a4:ea:4f:19:9f:38:37:c5:12:95:cc:c4:e2:48:0b: d0:9f:87:5b:95:2b:2c:70:87:8c:96:93:4d:ce:e8: d1:9f:bb:90:8c:8e:30:04:23:64:cc:6d:33:49:05: 84:d6:31:48:4c:eb:cd:73:9c:70:93:08:35:f2:8b: d7:0c:10:a1:27:de:ca:91:ba:5c:50:c7:c1:69:d9: d3:d8:a9:02:44:37:0e:df:46:a9:81:04:d4:a8:00: d3:3a:79:c8:c0:1c:50:11:27:18:c4:9c:bd:0b:8c: 39:b7:f3:96:66:8a:45:bb:58:e9:c1:a9:31:df:23: aa:74:e3:0d:49:42:70:d7:78:74:8b:90:c2:4a:8a: 72:b4:36:b3:1a:cb:50:86:2f:6c:83:d4:a7:8d:65: f6:47:3c:14:c1:2e:6c:74:f9:fd:a3:65:41:d4:ee: 82:d4:02:cc:4e:8f:6a:78:a6:00:57:ab:99:bf:4d: 26:51:16:25:ae:de:a2:bc:5f:db:e6:f3:55:7a:25: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A5:16:B1:A9:48:13:53:44:9C:DF:0F:7D:F0:69:3A:BD:08:0F:27 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6e:d4:9c:01:c0:0f:b5:55:20:b4:45:8d:98:fc:64:a6:a7: d6:79:27:64:ae:c1:2e:a7:32:51:0c:97:70:41:b6:44:ad:2d: 00:91:3c:a9:0f:d8:66:a3:22:d0:1c:5b:ca:e5:61:d3:a4:9c: 09:71:e4:2d:e8:35:96:12:58:de:4a:e7:45:c3:f4:ef:89:a4: 46:8f:6d:66:be:f9:a0:b2:b7:3d:ee:83:bb:14:88:40:5a:d6: a8:4f:98:6a:6f:f4:cb:46:e4:c3:a8:55:eb:a8:58:13:48:cf: e5:71:c6:de:12:70:e1:33:ee:02:c9:cf:68:c6:a8:66:35:d3: 5f:85:95:ea:62:2a:8a:6b:8a:44:4b:c2:99:93:75:e0:8d:57: 14:1d:3e:5a:be:06:1b:b3:27:fe:3c:8d:88:fd:09:46:0d:84: 5e:51:88:ff:b8:5a:3d:4f:a5:98:52:eb:e4:c1:24:7b:96:0c: b2:e5:e0:96:9a:6a:71:dd:27:2e:c8:87:f3:8d:60:a0:3c:f8: ce:2a:59:de:e4:c2:08:c3:4d:8f:09:5e:c8:20:29:64:a8:83: 86:f1:53:65:0a:ec:bf:a5:b7:24:9a:32:3e:5c:9b:08:87:7f: c9:87:c8:a9:f9:42:b1:a3:9b:0d:87:6a:73:22:13:6e:4a:b9: aa:77:ba:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwNzI5MDI0NjU1WhcNMjYwODA1MDI0NjU1WjAYMRYwFAYD VQQDEw02YTY5NjlhMC1jODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mVJ87yqcpLBLE4clRZhUzph+NQweBjHcrAhlVE8938duXir9LEPYDqj1a5a cx2cPpBAlExvQCFJWt2k6k8Znzg3xRKVzMTiSAvQn4dblSsscIeMlpNNzujRn7uQ jI4wBCNkzG0zSQWE1jFITOvNc5xwkwg18ovXDBChJ97KkbpcUMfBadnT2KkCRDcO 30apgQTUqADTOnnIwBxQEScYxJy9C4w5t/OWZopFu1jpwakx3yOqdOMNSUJw13h0 i5DCSopytDazGstQhi9sg9SnjWX2RzwUwS5sdPn9o2VB1O6C1ALMTo9qeKYAV6uZ v00mURYlrt6ivF/b5vNVeiU47wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNylFrGp SBNTRJzfD33waTq9CA8nMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm27UnAHAD7VVILRFjZj8ZKan1nknZK7BLqcyUQyXcEG2RK0tAJE8qQ/YZqMi 0BxbyuVh06ScCXHkLeg1lhJY3krnRcP074mkRo9tZr75oLK3Pe6DuxSIQFrWqE+Y am/0y0bkw6hV66hYE0jP5XHG3hJw4TPuAsnPaMaoZjXTX4WV6mIqimuKREvCmZN1 4I1XFB0+Wr4GG7Mn/jyNiP0JRg2EXlGI/7haPU+lmFLr5MEke5YMsuXglppqcd0n LsiH841goDz4zipZ3uTCCMNNjwleyCApZKiDhvFTZQrsv6W3JJoyPlybCId/yYfI qflCsaObDYdqcyITbkq5qne6Hg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:40:07 2026 by rpki-client