$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: N69I+pwunRbwaIw387dmlSWoq4m0Vs5wgllBTHId7fY= Subject key identifier: EC:78:C8:F7:38:53:4B:20:3E:95:E4:88:91:C6:3C:12:0F:75:33:16 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 09E5 Signing time: Mon 06 Jul 2026 20:16:59 +0000 Manifest this update: Mon 06 Jul 2026 20:16:58 +0000 Manifest next update: Mon 13 Jul 2026 20:16:58 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: 3buQYsyfjop9HdKCM9x20XfDQNSV0VKopDnZVCBnius=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 20:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Jul 6 20:16:58 2026 GMT Not After : Jul 13 20:16:58 2026 GMT Subject: CN=6a4c0d3b-5bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:ca:e1:ce:e3:24:eb:06:5a:f9:08:0c:5b: 55:47:be:8c:09:f6:ba:65:a2:f9:43:3a:5b:46:8d: 76:d2:ac:b6:98:3a:22:04:32:77:4f:ed:f8:3d:9e: f7:9d:8b:e9:b1:31:22:39:88:e6:62:e2:b0:a1:28: d0:7e:87:4a:93:2f:80:e8:02:19:ee:f4:84:f5:be: 81:23:2a:64:3c:f3:e5:77:7a:42:c8:4a:a5:8c:3a: 76:bf:16:e4:e3:33:46:e7:b0:bd:d4:f8:c9:0e:c3: 0a:60:21:91:98:12:0b:68:ed:0d:01:80:4d:81:59: b7:4d:db:e3:2e:9f:26:9c:d6:cf:a2:5b:8b:16:6f: 94:d6:b3:c3:d9:96:1a:d1:73:f6:c1:a3:b2:a5:f5: f4:65:ab:8f:0a:ca:0b:c0:eb:32:8a:5c:d4:8c:75: 86:fc:d6:dc:d4:e1:d2:66:02:8e:1c:f3:22:5b:d2: 9f:37:a0:ac:95:5b:fa:b4:55:29:79:35:de:d2:b7: 6d:75:30:e1:96:0f:c3:59:16:b0:b4:49:71:33:c4: 12:cf:c8:1c:93:ee:15:5d:18:4f:ce:7d:2c:9e:8a: a7:2e:36:ba:30:83:c4:cc:64:6a:b0:02:86:40:ce: 89:34:29:f1:ce:7d:66:7b:b7:72:49:47:14:6b:81: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:C8:F7:38:53:4B:20:3E:95:E4:88:91:C6:3C:12:0F:75:33:16 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:16:c7:0e:a7:be:a8:5b:37:3a:3c:31:6f:c0:ae:e2:23:38: cd:8f:28:f4:6a:06:25:29:f9:10:e8:9b:ef:c7:98:f7:a4:ca: ee:ac:49:d5:76:eb:fe:f6:3e:aa:2b:bd:5b:e3:19:58:56:63: f1:a9:b8:26:26:c7:2f:05:d6:83:bf:f3:b8:ad:0c:d0:81:aa: b3:f3:88:33:df:40:6d:fe:07:26:3b:16:6a:a5:d7:27:d3:f6: db:24:08:c8:86:c6:a6:0b:30:84:4a:7b:2e:29:1a:70:21:00: f1:0c:0f:97:c4:26:f7:a2:2d:09:a3:e5:b2:b2:26:0a:81:e7: 5e:0b:b4:da:23:05:eb:24:d5:e2:50:d9:4d:28:e3:76:8a:8c: 88:f9:02:16:ba:45:f4:b3:b5:8d:ff:e8:e5:4d:ed:59:a5:24: 70:ea:c4:6e:dc:c6:e6:bd:84:4b:f6:c2:c7:90:49:e7:9f:80: 5e:45:25:67:2b:7c:46:84:c6:2e:38:c5:60:d2:5a:5a:33:63: 22:a0:f3:41:ae:62:8c:3f:de:b3:47:fe:a0:2e:5d:b0:b1:e5: db:a9:40:fe:e5:c5:a3:ce:7f:aa:97:43:f5:85:f8:ec:b7:d3: 49:a9:13:28:de:40:61:c2:f8:af:b9:c3:ee:6b:09:f3:0d:fe: 20:95:82:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjYwNzA2MjAxNjU4WhcNMjYwNzEzMjAxNjU4WjAYMRYwFAYD VQQDEw02YTRjMGQzYi01YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkCvK4c7jJOsGWvkIDFtVR76MCfa6ZaL5QzpbRo120qy2mDoiBDJ3T+34PZ73 nYvpsTEiOYjmYuKwoSjQfodKky+A6AIZ7vSE9b6BIypkPPPld3pCyEqljDp2vxbk 4zNG57C91PjJDsMKYCGRmBILaO0NAYBNgVm3TdvjLp8mnNbPoluLFm+U1rPD2ZYa 0XP2waOypfX0ZauPCsoLwOsyilzUjHWG/Nbc1OHSZgKOHPMiW9KfN6CslVv6tFUp eTXe0rdtdTDhlg/DWRawtElxM8QSz8gck+4VXRhPzn0snoqnLja6MIPEzGRqsAKG QM6JNCnxzn1me7dySUcUa4GURQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx4yPc4 U0sgPpXkiJHGPBIPdTMWMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQxbHDqe+qFs3Ojwxb8Cu4iM4zY8o9GoGJSn5EOib78eY96TK7qxJ1Xbr/vY+ qiu9W+MZWFZj8am4JibHLwXWg7/zuK0M0IGqs/OIM99Abf4HJjsWaqXXJ9P22yQI yIbGpgswhEp7LikacCEA8QwPl8Qm96ItCaPlsrImCoHnXgu02iMF6yTV4lDZTSjj doqMiPkCFrpF9LO1jf/o5U3tWaUkcOrEbtzG5r2ES/bCx5BJ55+AXkUlZyt8RoTG LjjFYNJaWjNjIqDzQa5ijD/es0f+oC5dsLHl26lA/uXFo85/qpdD9YX47LfTSakT KN5AYcL4r7nD7msJ8w3+IJWCmw== -----END CERTIFICATE-----Generated at Tue Jul 7 11:56:25 2026 by rpki-client