$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: WnPNrNnsMj3AVTne9USGdn5I3PglsAHGqMLRt5ogZpc= Subject key identifier: 33:C5:30:99:BB:AB:8B:3D:A0:52:6F:FF:28:3D:DE:42:50:DD:CF:D6 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17F0 Signing time: Tue 28 Jul 2026 16:38:19 +0000 Manifest this update: Tue 28 Jul 2026 16:38:18 +0000 Manifest next update: Tue 04 Aug 2026 16:38:18 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: QroeexEPi7uAKEKrItCmrK1Yrjsv/9REaiKw/Q+Mgcc=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6141 (0x17fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Jul 28 16:38:18 2026 GMT Not After : Aug 4 16:38:18 2026 GMT Subject: CN=6a68dafb-8b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:cc:24:3e:ef:3d:60:39:92:ed:40:43:2d: b0:2c:23:ea:39:2a:71:f1:44:ca:1e:72:8f:ad:72: f3:7e:e4:99:88:83:d2:ff:7e:e1:ba:a1:b1:53:1d: 45:da:0e:93:19:11:88:73:44:19:f2:cb:9a:b1:b8: 9b:08:6a:f7:87:33:f9:b6:7d:40:35:c9:34:b0:10: 4d:68:84:52:e8:30:5a:6e:88:a7:27:77:97:4a:88: 59:aa:36:09:36:05:4c:55:3b:f3:11:84:98:da:92: 6f:53:70:f3:2b:e8:81:1a:95:b6:7a:f3:6c:19:b4: cf:5b:39:01:ea:29:a6:81:0a:60:eb:98:83:09:cc: f2:57:ef:7a:cd:a8:ff:e9:12:db:9b:42:36:6e:82: a1:02:3a:4c:b9:cb:32:ac:62:29:68:d8:0d:27:9a: 36:06:e6:84:ee:a9:77:a6:9c:e5:30:5a:51:b8:d6: 27:86:17:79:e0:42:06:72:1d:a2:ac:59:62:00:c4: 3c:81:17:a7:86:ba:68:64:93:55:03:21:9d:63:74: 91:97:1b:a5:77:f1:54:dd:9c:bc:df:8e:70:6d:e0: 07:7a:f7:46:d1:02:42:0e:38:2c:0c:e5:41:04:7e: e4:41:54:7c:f4:cc:88:74:07:01:e4:67:4b:bc:15: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:30:99:BB:AB:8B:3D:A0:52:6F:FF:28:3D:DE:42:50:DD:CF:D6 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:38:aa:9b:6a:5f:3a:56:82:fb:aa:ff:ea:7c:a8:a3:4a: 71:45:c4:49:bd:2c:93:d7:8c:c2:9b:fa:0e:47:ff:5f:c2:ee: 95:66:11:33:7f:62:e7:c4:59:19:75:f4:d5:70:e6:f7:91:9a: 96:47:cb:4b:f8:3c:9d:bf:0e:bc:a0:03:e9:da:14:59:b3:c8: 1c:11:48:70:7d:3e:41:f8:32:2b:cd:3d:1a:00:e9:a4:1c:13: c5:3e:0d:b5:09:1c:9c:18:79:fb:0f:ce:f6:29:e0:64:fb:20: a8:e6:71:72:1a:ac:09:22:ec:5c:cd:ed:be:13:e5:e2:8a:3b: 2f:43:49:02:8d:f6:ed:72:7b:d9:7e:09:aa:0c:cc:e4:67:9b: 36:72:98:e1:fa:67:33:fd:97:68:dc:2c:4f:68:80:03:a9:ee: c9:7e:51:6d:c2:14:a0:cb:bf:34:b4:12:07:63:d5:58:be:8e: 77:1d:4e:4c:18:14:b3:cd:d9:86:42:90:9d:78:8c:86:88:a3: cd:45:66:cf:d3:91:a6:4f:2a:5a:8a:bb:78:84:ea:62:a1:7b: c2:23:76:d1:26:b3:83:3d:bd:22:eb:4b:e2:a3:9e:4b:c5:b0: b0:78:76:c8:1d:8e:fb:3b:9f:9e:fc:a1:12:cc:31:b3:86:bd: e5:36:f5:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwNzI4MTYzODE4WhcNMjYwODA0MTYzODE4WjAYMRYwFAYD VQQDEw02YTY4ZGFmYi04YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvLMJD7vPWA5ku1AQy2wLCPqOSpx8UTKHnKPrXLzfuSZiIPS/37huqGxUx1F 2g6TGRGIc0QZ8suasbibCGr3hzP5tn1ANck0sBBNaIRS6DBaboinJ3eXSohZqjYJ NgVMVTvzEYSY2pJvU3DzK+iBGpW2evNsGbTPWzkB6immgQpg65iDCczyV+96zaj/ 6RLbm0I2boKhAjpMucsyrGIpaNgNJ5o2BuaE7ql3ppzlMFpRuNYnhhd54EIGch2i rFliAMQ8gRenhrpoZJNVAyGdY3SRlxuld/FU3Zy8345wbeAHevdG0QJCDjgsDOVB BH7kQVR89MyIdAcB5GdLvBUWIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPFMJm7 q4s9oFJv/yg93kJQ3c/WMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbcc4qptqXzpWgvuq/+p8qKNKcUXESb0sk9eMwpv6Dkf/X8LulWYRM39i58RZ GXX01XDm95GalkfLS/g8nb8OvKAD6doUWbPIHBFIcH0+QfgyK809GgDppBwTxT4N tQkcnBh5+w/O9ingZPsgqOZxchqsCSLsXM3tvhPl4oo7L0NJAo327XJ72X4JqgzM 5GebNnKY4fpnM/2XaNwsT2iAA6nuyX5RbcIUoMu/NLQSB2PVWL6Odx1OTBgUs83Z hkKQnXiMhoijzUVmz9ORpk8qWoq7eITqYqF7wiN20Sazgz29IutL4qOeS8WwsHh2 yB2O+zufnvyhEswxs4a95Tb1EQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:55:50 2026 by rpki-client