$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: EPHc8jVF0Gasq+KwEQqvbrM212dvsZ+3A+7v0aRl3eA= Subject key identifier: AD:DF:42:E2:9E:A9:B8:B2:A8:6B:DD:BE:63:B2:AE:F2:10:AA:42:62 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: 016D Signing time: Mon 20 Jul 2026 22:07:04 +0000 Manifest this update: Mon 20 Jul 2026 22:07:03 +0000 Manifest next update: Mon 27 Jul 2026 22:07:03 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: npuAePr/8QZSirf5trC8dgk7OaUnmdpluDfszBOd/PY=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Jul 20 22:07:03 2026 GMT Not After : Jul 27 22:07:03 2026 GMT Subject: CN=6a5e9c07-b54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:9d:c7:cf:86:d4:16:da:c3:1c:7b:3a:ff: 3b:49:25:e0:9b:b8:66:8f:0d:d9:fe:da:c2:31:93: 4c:84:28:69:a2:bd:ab:cf:ca:2e:c3:41:c6:45:7b: 4b:f4:51:79:55:14:ea:50:10:13:42:4e:f3:3c:65: 29:f5:65:e0:e0:b4:db:9f:67:6b:a5:79:d7:32:04: 09:fb:16:6d:d7:93:15:70:f7:b0:14:0d:12:42:d2: e4:30:b8:28:cf:0a:22:17:96:31:26:b4:67:3b:c9: 7e:30:da:f0:93:b1:3c:d7:8e:48:ac:68:17:60:4c: 60:cd:69:9f:51:97:88:a5:f9:9f:25:25:58:de:b9: 8b:26:fe:d0:a9:af:7b:a5:e7:34:e6:8b:3b:c6:54: 15:e7:d0:64:10:88:c1:a4:4f:b0:e1:b7:ec:ee:37: 34:cc:a0:cf:30:f2:b5:b9:0e:0e:85:a9:48:de:47: b5:dd:13:6c:a0:18:a7:16:51:54:97:72:18:e6:7c: 81:d5:a2:0e:ee:61:b6:4e:97:2d:0d:30:e5:3d:d6: 5d:1d:4e:5e:e2:53:4a:7d:92:3b:1d:8c:ae:75:14: ee:c3:d5:55:b4:7f:4c:f4:c4:09:17:e1:09:ec:e1: d6:bb:7d:a8:a9:bb:b7:00:a1:3d:56:21:13:76:43: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DF:42:E2:9E:A9:B8:B2:A8:6B:DD:BE:63:B2:AE:F2:10:AA:42:62 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e8:36:92:c3:a4:b9:16:14:6a:a0:8f:ea:2b:3b:45:9c:53: e7:d1:e9:0f:75:46:0a:11:1d:74:1d:4f:e5:e4:e6:fb:ad:ba: c3:00:62:32:d2:74:64:c3:01:e0:db:df:45:92:fc:7f:1b:78: 60:de:27:9f:87:82:b0:c9:44:db:fa:bc:5b:d1:3d:cb:c0:17: fb:38:a9:72:ac:b2:a0:b6:2b:f5:3d:b4:49:1d:4b:e4:64:8c: fb:ea:17:bd:7d:25:bb:22:77:8d:da:48:12:ee:91:d8:d3:24: 88:57:ec:67:c6:89:5f:b8:4a:78:ca:a1:85:f2:e3:89:d3:33: 4a:6f:ba:d0:3f:06:02:1c:38:0e:2c:92:04:c1:d3:a5:1b:9f: 5c:c3:c5:60:28:4c:93:30:bc:c9:2d:c4:e1:64:a3:5a:a6:eb: d0:c8:22:b9:1d:0f:07:79:81:9d:c2:16:c2:7c:9f:97:f3:ea: eb:7f:a5:ee:9c:95:b9:82:81:0d:08:52:b0:c5:62:ae:77:23: 73:94:18:0d:86:19:46:ca:8d:50:b1:01:3f:e3:87:c2:aa:0b: 4c:b8:53:b0:97:b2:a5:b6:c1:fe:80:4f:a0:54:31:0a:1c:f3: e1:ea:b3:0c:83:c0:97:0b:07:0b:72:30:45:5b:b3:8b:d6:21: 76:6f:1d:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjYwNzIwMjIwNzAzWhcNMjYwNzI3MjIwNzAzWjAYMRYwFAYD VQQDEw02YTVlOWMwNy1iNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4Odx8+G1Bbawxx7Ov87SSXgm7hmjw3Z/trCMZNMhChpor2rz8ouw0HGRXtL 9FF5VRTqUBATQk7zPGUp9WXg4LTbn2drpXnXMgQJ+xZt15MVcPewFA0SQtLkMLgo zwoiF5YxJrRnO8l+MNrwk7E8145IrGgXYExgzWmfUZeIpfmfJSVY3rmLJv7Qqa97 pec05os7xlQV59BkEIjBpE+w4bfs7jc0zKDPMPK1uQ4OhalI3ke13RNsoBinFlFU l3IY5nyB1aIO7mG2TpctDTDlPdZdHU5e4lNKfZI7HYyudRTuw9VVtH9M9MQJF+EJ 7OHWu32oqbu3AKE9ViETdkPuYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3fQuKe qbiyqGvdvmOyrvIQqkJiMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdOg2ksOkuRYUaqCP6is7RZxT59HpD3VGChEddB1P5eTm+626wwBiMtJ0ZMMB 4NvfRZL8fxt4YN4nn4eCsMlE2/q8W9E9y8AX+zipcqyyoLYr9T20SR1L5GSM++oX vX0luyJ3jdpIEu6R2NMkiFfsZ8aJX7hKeMqhhfLjidMzSm+60D8GAhw4DiySBMHT pRufXMPFYChMkzC8yS3E4WSjWqbr0MgiuR0PB3mBncIWwnyfl/Pq63+l7pyVuYKB DQhSsMVirncjc5QYDYYZRsqNULEBP+OHwqoLTLhTsJeypbbB/oBPoFQxChzz4eqz DIPAlwsHC3IwRVuzi9Yhdm8dpw== -----END CERTIFICATE-----Generated at Wed Jul 22 22:42:40 2026 by rpki-client