$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: ptec0azC07QleHX5ZYrLP/b2Y2ESbQbpGzLMqSyXyhA= Subject key identifier: 36:E4:9B:19:62:F8:C1:22:83:AD:6C:F7:0D:59:9D:B9:C6:1E:5F:FD Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 1595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 156B Signing time: Thu 02 Jul 2026 16:51:27 +0000 Manifest this update: Thu 02 Jul 2026 16:51:26 +0000 Manifest next update: Thu 09 Jul 2026 16:51:26 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: kJF7PraPP0Ksrjqzs3Fw8TtxkPt3XQg9yPRe0pGphzk=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=) 3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=) 4: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 16:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5525 (0x1595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Jul 2 16:51:26 2026 GMT Not After : Jul 9 16:51:26 2026 GMT Subject: CN=6a46970f-7601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:a7:9a:45:c2:e3:fe:ff:05:48:df:a6:03: 9a:6f:31:95:88:52:83:25:e2:b5:94:f7:90:c2:fa: 80:a1:f5:3f:0a:c6:77:87:af:6d:c6:3a:fd:90:67: ea:33:c3:95:3b:42:b2:12:94:a7:bd:6c:20:63:0b: 34:5a:b0:9f:c7:c3:b2:9b:8e:f1:b2:ad:51:d7:c8: f9:9c:66:eb:5c:6d:1c:bf:d1:7e:05:44:29:95:c4: e2:60:98:05:e4:c1:bb:c1:1f:41:28:33:fc:da:f3: 85:f2:f9:01:b6:85:93:18:77:9b:43:7c:4b:26:11: bf:ba:5e:eb:da:41:2c:f9:c3:85:43:f4:73:30:4a: 24:71:33:18:e1:97:be:68:6c:73:0c:05:32:de:e7: 53:de:7c:c2:5b:80:2c:0d:87:3d:c6:4b:e9:ef:ef: cd:43:f9:8a:b5:53:02:56:0b:1f:c9:27:c5:e8:97: a8:9c:fc:d8:1e:a6:18:71:e4:2e:6b:18:7f:18:e1: 9d:16:7e:8b:6e:29:3b:80:18:dd:48:39:25:a3:9b: a6:7f:82:50:c5:48:48:89:d5:7b:89:bb:34:10:2b: 8f:39:0a:59:70:b2:df:d7:97:f6:f3:91:10:db:d0: 6f:d3:e9:2c:e0:35:4a:03:b1:a9:3e:f9:97:07:09: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:9B:19:62:F8:C1:22:83:AD:6C:F7:0D:59:9D:B9:C6:1E:5F:FD X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:87:73:67:8d:44:10:4c:bd:ff:d6:2f:e3:eb:52:2a:90:cc: 80:0d:ce:64:f1:fe:97:56:ae:6a:3f:29:16:5d:91:28:50:18: 55:9c:cb:26:64:01:c5:d1:f9:d8:08:be:5d:f7:08:8f:25:36: be:98:a8:33:0f:36:b8:ea:be:18:b2:8e:7b:35:46:47:01:0a: c7:86:43:8f:87:e0:83:9e:f8:44:32:a8:1e:35:59:4d:bf:a4: b3:6d:63:bb:fb:9b:5f:02:2b:17:98:95:62:1d:30:a8:ff:13: 19:ed:a0:74:2b:e2:ba:16:f3:73:ad:03:04:7e:ed:cd:24:b3: 4c:d2:5d:6c:1a:25:ff:2a:9f:2a:2b:41:ca:df:d8:65:19:30: c3:02:d5:8d:ce:4c:3e:98:99:5d:05:47:5e:21:60:c9:20:96: 16:8f:ad:23:ad:f7:2c:20:ec:e7:ba:a3:2c:1f:2f:88:f9:40: e2:7f:17:04:3e:1a:60:24:6a:9f:d9:25:0b:22:81:75:1a:6d: 90:5e:be:d4:2a:07:1c:7a:24:45:66:3d:7c:67:5e:d8:8d:e8: 63:44:e6:99:82:71:20:24:f7:3a:30:6a:66:ab:7a:15:5a:67: 73:23:2e:83:b5:15:d9:00:72:31:9c:10:36:41:24:02:2b:68: ac:7b:15:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYwNzAyMTY1MTI2WhcNMjYwNzA5MTY1MTI2WjAYMRYwFAYD VQQDEw02YTQ2OTcwZi03NjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TenmkXC4/7/BUjfpgOabzGViFKDJeK1lPeQwvqAofU/CsZ3h69txjr9kGfq M8OVO0KyEpSnvWwgYws0WrCfx8Oym47xsq1R18j5nGbrXG0cv9F+BUQplcTiYJgF 5MG7wR9BKDP82vOF8vkBtoWTGHebQ3xLJhG/ul7r2kEs+cOFQ/RzMEokcTMY4Ze+ aGxzDAUy3udT3nzCW4AsDYc9xkvp7+/NQ/mKtVMCVgsfySfF6JeonPzYHqYYceQu axh/GOGdFn6Lbik7gBjdSDklo5umf4JQxUhIidV7ibs0ECuPOQpZcLLf15f285EQ 29Bv0+ks4DVKA7GpPvmXBwlUMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbkmxli +MEig61s9w1ZnbnGHl/9MB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVodzZ41EEEy9/9Yv4+tSKpDMgA3OZPH+l1auaj8pFl2RKFAYVZzLJmQBxdH5 2Ai+XfcIjyU2vpioMw82uOq+GLKOezVGRwEKx4ZDj4fgg574RDKoHjVZTb+ks21j u/ubXwIrF5iVYh0wqP8TGe2gdCviuhbzc60DBH7tzSSzTNJdbBol/yqfKitByt/Y ZRkwwwLVjc5MPpiZXQVHXiFgySCWFo+tI633LCDs57qjLB8viPlA4n8XBD4aYCRq n9klCyKBdRptkF6+1CoHHHokRWY9fGde2I3oY0TmmYJxICT3OjBqZqt6FVpncyMu g7UV2QByMZwQNkEkAitorHsVlw== -----END CERTIFICATE-----Generated at Fri Jul 3 20:58:04 2026 by rpki-client