$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: Ekym/mjb1p4IPIh3EXM3yptVmjcz7itm17vu2aUVQ3c= Subject key identifier: 85:51:9E:03:8D:8F:A9:A1:A5:B3:41:44:2D:4C:C8:00:4E:30:67:56 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 35B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 358C Signing time: Tue 28 Jul 2026 14:47:28 +0000 Manifest this update: Tue 28 Jul 2026 14:47:28 +0000 Manifest next update: Tue 04 Aug 2026 14:47:28 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: riayyUEGbiETyb0mLbyWcH9QHFfI/mLrKNXmDDbo3pE=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Jul 28 14:47:28 2026 GMT Not After : Aug 4 14:47:28 2026 GMT Subject: CN=6a68c100-f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:f4:12:fd:a7:d3:ca:a4:71:61:55:8e:50: fb:09:7b:b5:77:9a:1d:ea:7d:92:a6:37:64:e9:0d: a0:7d:00:ec:73:fa:e6:35:f0:8b:40:2f:e6:fe:9d: 3e:1a:1d:8f:85:de:ed:f6:68:8d:e7:20:5a:fd:60: 6d:16:70:93:ec:80:be:af:38:e8:7f:0e:b1:fb:73: e4:6e:5b:de:fa:9c:62:dd:f0:a5:90:b7:aa:c7:3c: 89:06:a3:1f:79:be:44:89:f0:cc:37:d4:ea:27:8c: 4d:09:b7:53:66:48:e1:22:8d:21:c1:3d:ce:2a:c5: af:1d:b6:ad:dc:97:0a:7f:63:84:95:d4:10:d9:7e: aa:67:c7:ad:c4:fb:dd:e4:29:79:4e:88:67:f7:b7: d5:fd:29:8a:82:9c:55:fb:f9:10:07:73:f1:69:23: 23:c9:8b:d7:01:f9:6e:83:28:24:85:fa:cf:ce:3d: 16:3c:81:02:5e:ba:bc:51:27:80:45:b4:b1:30:ef: 62:ed:47:a2:28:de:6a:c6:68:a6:08:43:a0:d0:cc: 31:45:93:d9:7b:8e:a8:ca:b5:d3:03:77:7b:5c:60: a2:c8:6b:d9:bf:ec:73:3a:23:bb:55:e4:e3:fc:d9: 51:3d:d5:8c:98:6b:53:0b:4d:df:6b:df:58:d9:e8: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:9E:03:8D:8F:A9:A1:A5:B3:41:44:2D:4C:C8:00:4E:30:67:56 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:65:cc:c1:0d:c3:ce:5c:9c:15:c7:7e:83:02:ae:14:84: 07:0b:64:a3:60:b7:2b:bc:7a:dd:2f:5a:34:9f:12:9e:43:9d: ff:21:24:d0:a1:44:86:3b:0d:26:2b:8f:fc:60:9d:26:3a:97: 53:5e:8b:33:12:a2:34:a9:19:b3:4f:5b:db:93:77:39:58:42: 79:78:ba:0d:a9:f6:21:c0:33:11:e9:5d:7c:7e:a8:78:1d:66: e3:e5:52:da:a5:7e:9a:3c:1a:b8:b4:0d:c1:10:e2:b3:7c:b6: ae:48:b3:d0:35:0f:c4:61:f1:53:88:ec:35:58:d9:19:55:84: ca:6a:3d:a3:68:d9:64:82:6e:85:ee:de:f3:5a:ea:66:4c:2f: b5:7f:f0:99:e8:0e:dd:97:f0:97:2e:36:a7:46:97:e5:c6:33: 2e:1a:05:c9:56:a4:d4:c7:fe:c0:62:76:59:47:b5:30:2d:db: 11:01:8c:5d:95:64:a3:a4:ce:54:68:1a:75:66:01:e1:52:ce: dd:77:06:0d:86:ac:0c:3f:86:ee:74:24:0c:fa:9e:d1:a6:c3: 5b:0e:33:d4:a8:1b:a0:27:71:8f:7c:69:36:65:7d:10:41:d6: 34:b1:ef:dc:25:55:77:49:22:bf:1f:01:9e:12:a5:e7:1b:4c: 98:04:0d:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjYwNzI4MTQ0NzI4WhcNMjYwODA0MTQ0NzI4WjAYMRYwFAYD VQQDEw02YTY4YzEwMC1mOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjX0Ev2n08qkcWFVjlD7CXu1d5od6n2Spjdk6Q2gfQDsc/rmNfCLQC/m/p0+ Gh2Phd7t9miN5yBa/WBtFnCT7IC+rzjofw6x+3Pkblve+pxi3fClkLeqxzyJBqMf eb5EifDMN9TqJ4xNCbdTZkjhIo0hwT3OKsWvHbat3JcKf2OEldQQ2X6qZ8etxPvd 5Cl5Tohn97fV/SmKgpxV+/kQB3PxaSMjyYvXAflugygkhfrPzj0WPIECXrq8USeA RbSxMO9i7UeiKN5qxmimCEOg0MwxRZPZe46oyrXTA3d7XGCiyGvZv+xzOiO7VeTj /NlRPdWMmGtTC03fa99Y2egFxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVRngON j6mhpbNBRC1MyABOMGdWMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB0xlzMENw85cnBXHfoMCrhSEBwtko2C3K7x63S9aNJ8SnkOd/yEk0KFEhjsN JiuP/GCdJjqXU16LMxKiNKkZs09b25N3OVhCeXi6Dan2IcAzEeldfH6oeB1m4+VS 2qV+mjwauLQNwRDis3y2rkiz0DUPxGHxU4jsNVjZGVWEymo9o2jZZIJuhe7e81rq ZkwvtX/wmegO3Zfwly42p0aX5cYzLhoFyVak1Mf+wGJ2WUe1MC3bEQGMXZVko6TO VGgadWYB4VLO3XcGDYasDD+G7nQkDPqe0abDWw4z1KgboCdxj3xpNmV9EEHWNLHv 3CVVd0kivx8BnhKl5xtMmAQNyg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:09 2026 by rpki-client