$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: P9TX8FM6gejDxZl0EuMs4jTdKUBR5C7lhj/5b/7aGKQ= Subject key identifier: AC:17:15:C2:52:A9:71:98:96:4C:77:98:08:4A:41:95:10:60:01:74 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 09CE Signing time: Tue 28 Jul 2026 20:16:02 +0000 Manifest this update: Tue 28 Jul 2026 20:16:01 +0000 Manifest next update: Tue 04 Aug 2026 20:16:01 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: 3v131rNjPSICG20Ft3zbYRvLOsoqeGokme5otS6Evr8=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jul 28 20:16:01 2026 GMT Not After : Aug 4 20:16:01 2026 GMT Subject: CN=6a690e02-7163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:75:e7:0f:76:41:d6:aa:cf:8b:47:00:d8: 89:cc:20:96:0f:b3:cf:26:04:45:bb:b9:4a:fe:f8: 4b:e0:5b:ad:52:4f:1a:e8:9f:a5:1b:06:4e:85:3d: c7:da:31:20:d7:67:8e:fb:85:72:d6:1a:5f:74:63: 55:48:05:31:5c:0f:d4:5e:35:8d:19:34:18:fd:3b: 4d:b5:6d:8e:d4:96:62:2b:6a:ff:71:41:14:78:3d: 0f:cd:d6:9c:21:43:2c:3d:f3:bc:77:85:01:f3:40: 88:19:2b:b8:fe:3f:b5:00:92:71:15:56:fb:80:f4: ed:df:45:04:b2:dc:dd:a3:db:5f:1c:44:17:8a:de: 1c:5a:fa:4f:c5:d4:4e:57:a8:95:86:bc:a2:af:cb: 38:b3:2a:dc:17:2b:68:01:d7:55:e1:25:1b:c0:10: f6:c5:64:38:7c:e0:f3:bc:09:06:50:05:4f:83:88: 70:68:b2:de:75:7b:37:9f:b4:e9:b8:7a:3f:47:fb: e6:e1:41:d1:0a:68:f2:42:6f:98:c4:fe:81:f9:8f: 8a:a1:d1:09:e4:42:20:8a:22:c7:23:45:d3:d6:a2: 1a:25:b0:8a:40:9b:a3:ae:15:2d:6b:71:ab:20:12: cc:b6:0b:6a:e0:f6:f1:fd:a9:69:2e:3c:99:87:15: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:15:C2:52:A9:71:98:96:4C:77:98:08:4A:41:95:10:60:01:74 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:47:90:b9:7d:05:3f:d1:49:70:2d:6d:42:14:31:e1:b6:89: 28:3d:4f:0d:fe:11:48:5c:3e:f4:ce:e0:38:1b:05:f7:98:37: 87:cc:25:6b:13:01:13:a3:03:69:78:f6:b2:84:89:0e:7e:ea: 6a:28:eb:46:bc:76:f6:2e:c0:9b:30:d4:db:2b:01:55:ec:e7: f8:91:07:19:31:fc:48:5c:c0:5a:34:77:dc:80:ac:e9:f7:b0: c1:4b:39:51:6d:b2:28:e4:03:7d:73:a5:54:af:8f:69:ac:40: ea:75:b5:85:24:fa:e2:80:43:13:f5:94:f4:68:e8:df:05:1c: b3:c6:bb:ba:6f:ff:e3:68:7c:69:46:8e:4a:64:ce:42:a3:45: 62:44:6a:f0:f0:b4:d6:0d:9f:47:49:f4:d6:b6:b7:5c:ae:2c: 84:0d:18:4f:e5:7f:05:b8:67:82:ca:a6:8f:f6:02:50:c6:34: 1a:95:a7:29:86:46:ac:80:bf:d6:cb:ce:02:a2:23:d3:c4:a0: 01:7a:b9:2f:dd:e3:10:b9:7f:51:85:5b:11:16:09:35:f6:20: a1:e0:58:bd:87:a6:a2:3e:2c:4e:4a:12:85:af:f4:f6:85:a3: 58:45:f4:d0:a4:ab:b9:c1:3d:0d:61:ab:e8:13:87:7a:65:be: 60:67:a4:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwNzI4MjAxNjAxWhcNMjYwODA0MjAxNjAxWjAYMRYwFAYD VQQDEw02YTY5MGUwMi03MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlN15w92Qdaqz4tHANiJzCCWD7PPJgRFu7lK/vhL4FutUk8a6J+lGwZOhT3H 2jEg12eO+4Vy1hpfdGNVSAUxXA/UXjWNGTQY/TtNtW2O1JZiK2r/cUEUeD0Pzdac IUMsPfO8d4UB80CIGSu4/j+1AJJxFVb7gPTt30UEstzdo9tfHEQXit4cWvpPxdRO V6iVhryir8s4syrcFytoAddV4SUbwBD2xWQ4fODzvAkGUAVPg4hwaLLedXs3n7Tp uHo/R/vm4UHRCmjyQm+YxP6B+Y+KodEJ5EIgiiLHI0XT1qIaJbCKQJujrhUta3Gr IBLMtgtq4Pbx/alpLjyZhxV1EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwXFcJS qXGYlkx3mAhKQZUQYAF0MB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR0eQuX0FP9FJcC1tQhQx4baJKD1PDf4RSFw+9M7gOBsF95g3h8wlaxMBE6MD aXj2soSJDn7qaijrRrx29i7AmzDU2ysBVezn+JEHGTH8SFzAWjR33ICs6fewwUs5 UW2yKOQDfXOlVK+PaaxA6nW1hST64oBDE/WU9Gjo3wUcs8a7um//42h8aUaOSmTO QqNFYkRq8PC01g2fR0n01ra3XK4shA0YT+V/Bbhngsqmj/YCUMY0GpWnKYZGrIC/ 1svOAqIj08SgAXq5L93jELl/UYVbERYJNfYgoeBYvYemoj4sTkoSha/09oWjWEX0 0KSrucE9DWGr6BOHemW+YGekYQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:29 2026 by rpki-client