$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: Vus7iVm6E7Z7s5DSRDpneW0gNAgT3jcRcWMrzWrao2k= Subject key identifier: 05:1D:41:B8:51:D8:A9:CE:2D:03:CF:03:F0:6A:26:29:30:EC:65:70 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2567 Signing time: Tue 28 Jul 2026 15:50:29 +0000 Manifest this update: Tue 28 Jul 2026 15:50:28 +0000 Manifest next update: Tue 04 Aug 2026 15:50:28 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: wtpwP7DAXxjWmjDif6pCuZdMizLnuA49+UmH+ERFV7M=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9607 (0x2587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jul 28 15:50:28 2026 GMT Not After : Aug 4 15:50:28 2026 GMT Subject: CN=6a68cfc5-4d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:b3:9a:a9:29:47:09:6b:34:8c:2e:cc:30: dc:8b:7b:15:07:71:8f:18:b7:e1:e2:e3:9e:5a:17: de:da:4f:1f:44:30:fc:1f:a4:f7:72:39:2e:e7:b5: d0:88:c7:c0:2a:76:e0:fc:c8:ad:1d:e7:8d:fc:28: bc:30:16:05:60:35:55:f0:ad:30:08:4e:bd:41:ba: 2b:ca:28:bb:3c:90:dc:b1:93:58:27:ec:9b:e7:6c: ee:83:da:38:b4:18:0c:dd:e2:4c:24:09:6b:f9:f3: 85:60:de:26:35:fd:df:92:62:f4:df:ae:da:89:23: dd:4e:fc:0f:07:ee:ee:50:7e:d3:72:be:25:d3:30: 4d:af:f1:bb:ac:3b:2c:b4:d0:50:6f:3f:99:63:4c: fb:e7:d4:07:dd:f0:94:1f:73:3c:75:7e:74:a3:2c: 6a:2a:44:9a:0d:68:85:8a:29:62:15:26:77:8d:43: cd:11:ec:49:dc:d3:2a:66:34:dc:3b:f2:80:98:27: 90:a3:30:5b:a0:01:79:66:02:18:59:8a:9b:1c:97: 54:02:de:63:5e:97:90:63:2c:ff:c3:d7:07:15:89: 00:c8:df:60:34:5a:99:42:2b:9a:65:a7:d4:66:2c: 4c:e9:0d:b3:2f:f8:16:2e:70:80:5c:c2:57:e8:46: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1D:41:B8:51:D8:A9:CE:2D:03:CF:03:F0:6A:26:29:30:EC:65:70 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:5c:e4:54:af:03:93:dd:7e:58:d4:25:f9:e5:82:f4:15: 46:f9:9e:81:f1:59:cc:4a:c8:d2:2f:b7:4a:36:a9:78:c4:fc: c3:f4:6b:7d:aa:8b:92:f1:30:7e:04:7d:f6:48:28:00:8a:9c: ae:5f:81:f4:a5:42:16:11:fa:2f:04:a7:ab:9a:91:e7:bb:07: d1:06:4f:29:6a:b6:b2:67:ad:21:10:fd:df:ed:21:74:b3:eb: 66:05:f1:15:ca:1f:a0:fd:22:d5:15:de:92:fc:16:3d:61:87: 72:3d:15:c2:1d:58:c7:78:61:ca:bb:49:ed:64:80:09:37:97: e0:b6:15:b7:a3:8b:51:45:42:62:9e:0b:d4:01:6f:eb:ee:69: d0:cd:8e:fa:be:9c:80:d3:03:d2:00:50:b4:2f:db:d9:bb:28: f0:b1:57:c7:80:ae:01:7f:ac:72:f9:c3:0d:dd:98:68:61:60: 78:70:19:e4:95:9a:ca:35:98:14:0a:ee:38:b2:a4:67:68:bd: 17:d5:1f:d1:2b:de:c3:6f:03:21:54:eb:36:82:0a:8a:af:75: ea:0b:09:15:a6:94:59:d4:ea:51:eb:bb:d1:45:e0:51:74:fd: 38:d0:3b:d9:58:f9:b9:55:0f:d1:5e:94:4b:0a:df:d5:f9:86: d5:d9:41:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNzI4MTU1MDI4WhcNMjYwODA0MTU1MDI4WjAYMRYwFAYD VQQDEw02YTY4Y2ZjNS00ZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mCzmqkpRwlrNIwuzDDci3sVB3GPGLfh4uOeWhfe2k8fRDD8H6T3cjku57XQ iMfAKnbg/MitHeeN/Ci8MBYFYDVV8K0wCE69Qboryii7PJDcsZNYJ+yb52zug9o4 tBgM3eJMJAlr+fOFYN4mNf3fkmL0367aiSPdTvwPB+7uUH7Tcr4l0zBNr/G7rDss tNBQbz+ZY0z759QH3fCUH3M8dX50oyxqKkSaDWiFiiliFSZ3jUPNEexJ3NMqZjTc O/KAmCeQozBboAF5ZgIYWYqbHJdUAt5jXpeQYyz/w9cHFYkAyN9gNFqZQiuaZafU ZixM6Q2zL/gWLnCAXMJX6EYFHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUdQbhR 2KnOLQPPA/BqJikw7GVwMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADg9c5FSvA5PdfljUJfnlgvQVRvmegfFZzErI0i+3SjapeMT8w/RrfaqLkvEw fgR99kgoAIqcrl+B9KVCFhH6LwSnq5qR57sH0QZPKWq2smetIRD93+0hdLPrZgXx FcofoP0i1RXekvwWPWGHcj0Vwh1Yx3hhyrtJ7WSACTeX4LYVt6OLUUVCYp4L1AFv 6+5p0M2O+r6cgNMD0gBQtC/b2bso8LFXx4CuAX+scvnDDd2YaGFgeHAZ5JWayjWY FAruOLKkZ2i9F9Uf0Svew28DIVTrNoIKiq916gsJFaaUWdTqUeu70UXgUXT9ONA7 2Vj5uVUP0V6USwrf1fmG1dlBgw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:03:59 2026 by rpki-client