$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: HhPKif82/YdUOc3okasAyUsYYLLb5rPkvO+M5mFabLw= Subject key identifier: B8:4A:20:C7:A7:D4:93:E7:54:B5:13:D6:67:AD:56:E3:D9:84:09:CC Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2563 Signing time: Mon 20 Jul 2026 15:49:39 +0000 Manifest this update: Mon 20 Jul 2026 15:49:39 +0000 Manifest next update: Mon 27 Jul 2026 15:49:39 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: y9gNp3SCMe9zWQPloozLEMmaTDrTzABkOVCoBne9WAg=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9603 (0x2583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jul 20 15:49:39 2026 GMT Not After : Jul 27 15:49:39 2026 GMT Subject: CN=6a5e4393-94f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6e:be:31:72:c1:66:73:ac:86:9e:1c:d2:d9: 38:61:e4:f5:c9:f4:ad:f9:4a:35:0f:93:69:f3:41: 13:18:24:4d:22:64:96:6f:02:a7:e1:3e:30:b6:46: 63:1d:25:7c:4b:cc:6e:62:26:d1:90:1d:5f:5c:b9: e1:55:62:ff:4e:4b:50:1f:80:5e:8b:ae:69:c2:96: dc:6e:14:6c:50:ce:c8:24:f1:61:f9:a3:84:2a:ea: 4d:d0:28:18:fc:94:70:18:7d:b7:41:4b:c1:2f:69: fa:09:70:62:de:b5:16:e3:c8:6a:0e:0f:a2:a2:6d: f7:fa:b8:f0:66:14:a3:9c:2c:95:19:9b:47:d1:c9: d0:3e:a4:f5:d5:ed:62:b4:e0:6f:cd:c6:9a:9c:03: eb:90:ed:8d:d2:dd:92:35:7d:2d:15:65:4b:a8:d5: eb:50:f9:3e:5a:8b:7d:57:e7:03:95:7c:98:70:35: 92:ee:fc:09:bf:85:64:c2:2a:35:5f:28:a8:b2:e0: f0:f2:78:c2:87:05:b4:e5:2d:23:91:8e:77:c9:50: 26:5e:3f:05:61:46:7d:bb:f7:97:8f:66:0e:dd:29: 7f:73:19:fc:f6:74:ae:b1:31:27:2f:18:85:32:d9: 98:5a:72:f1:c3:e0:bd:31:d6:e0:2a:5b:b4:f8:0e: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:20:C7:A7:D4:93:E7:54:B5:13:D6:67:AD:56:E3:D9:84:09:CC X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:93:bd:83:15:79:1b:77:40:e4:e7:a0:2e:45:68:b8:3a:18: 0c:6f:cd:0e:db:02:89:2d:91:5e:f0:f0:eb:99:c0:c6:10:6b: 23:53:55:54:3d:18:bd:79:22:4b:aa:21:3a:7f:7c:24:cf:9d: f4:84:83:e4:75:19:82:0d:4d:b3:b4:55:8f:f3:de:5d:81:80: 26:c4:9e:8b:33:60:6e:17:d7:65:08:7f:81:af:96:0a:c9:27: 60:d1:e7:54:83:e9:88:3d:fe:00:f3:3a:bc:6d:08:24:2a:5d: 4d:e3:20:4b:36:b2:a5:fb:5f:34:41:50:b5:35:ae:99:eb:2b: 62:4a:d5:09:9a:0d:f6:01:15:b4:82:ed:9e:e8:9d:91:2d:85: 36:05:20:d9:ea:b9:c6:4d:69:0d:f9:0a:72:55:61:31:95:f0: 3c:3a:b3:fe:0f:c5:66:75:89:82:dc:df:1f:1b:ed:62:c9:46: a7:2b:70:36:04:8d:ea:53:09:c8:1e:93:8c:99:f9:7a:4c:39: 8b:57:a4:71:f8:5e:a6:fe:35:45:2c:3a:91:1e:bb:f4:7d:7f: c9:4a:4a:7d:2f:dd:21:93:32:5a:19:55:37:d9:74:c1:82:86: 4a:8a:a2:9c:7b:c0:d9:bb:d1:b7:ca:2d:6a:31:83:4e:1c:14: 6c:cc:ae:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNzIwMTU0OTM5WhcNMjYwNzI3MTU0OTM5WjAYMRYwFAYD VQQDEw02YTVlNDM5My05NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA626+MXLBZnOshp4c0tk4YeT1yfSt+Uo1D5Np80ETGCRNImSWbwKn4T4wtkZj HSV8S8xuYibRkB1fXLnhVWL/TktQH4Bei65pwpbcbhRsUM7IJPFh+aOEKupN0CgY /JRwGH23QUvBL2n6CXBi3rUW48hqDg+iom33+rjwZhSjnCyVGZtH0cnQPqT11e1i tOBvzcaanAPrkO2N0t2SNX0tFWVLqNXrUPk+Wot9V+cDlXyYcDWS7vwJv4Vkwio1 XyiosuDw8njChwW05S0jkY53yVAmXj8FYUZ9u/eXj2YO3Sl/cxn89nSusTEnLxiF MtmYWnLxw+C9MdbgKlu0+A4T8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhKIMen 1JPnVLUT1metVuPZhAnMMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArpO9gxV5G3dA5OegLkVouDoYDG/NDtsCiS2RXvDw65nAxhBrI1NVVD0YvXki S6ohOn98JM+d9ISD5HUZgg1Ns7RVj/PeXYGAJsSeizNgbhfXZQh/ga+WCsknYNHn VIPpiD3+APM6vG0IJCpdTeMgSzaypftfNEFQtTWumesrYkrVCZoN9gEVtILtnuid kS2FNgUg2eq5xk1pDfkKclVhMZXwPDqz/g/FZnWJgtzfHxvtYslGpytwNgSN6lMJ yB6TjJn5ekw5i1ekcfhepv41RSw6kR679H1/yUpKfS/dIZMyWhlVN9l0wYKGSoqi nHvA2bvRt8otajGDThwUbMyulQ== -----END CERTIFICATE-----Generated at Tue Jul 21 21:51:01 2026 by rpki-client