$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: 1Q5j8RudCxfer/Nh0Hfj4q747RB8G79odAmP71eL5Ws= Subject key identifier: 38:8E:D6:7F:BD:D0:B5:06:D5:F5:3D:39:23:89:45:E6:B7:FF:76:53 Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 5D Signing time: Tue 21 Jul 2026 10:03:09 +0000 Manifest this update: Tue 21 Jul 2026 10:03:09 +0000 Manifest next update: Tue 28 Jul 2026 10:03:09 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: wbyP63h8xKobQxo0zYvdmWjJ8FlXkN6Vz638qFWo9NA=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Jul 21 10:03:09 2026 GMT Not After : Jul 28 10:03:09 2026 GMT Subject: CN=6a5f43dd-412e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:8a:37:96:71:c6:59:86:09:29:2a:e0:37: 92:27:79:02:6d:44:ee:ec:29:9b:84:ba:98:6a:db: 0a:70:cb:a5:48:3b:a3:39:90:72:e8:93:cc:27:4a: db:f2:66:60:7f:31:7b:38:4e:da:07:95:70:b2:7b: 3e:33:8d:f9:58:83:a1:bc:df:59:d5:d0:af:dc:00: 34:7e:a4:d4:fe:16:b4:91:61:c4:1d:ba:b5:e9:62: c9:17:3c:dc:7d:19:57:17:4e:d3:20:bc:a3:d1:0a: a7:d9:31:2e:72:64:2e:9e:68:3f:3c:1e:aa:0e:ea: e6:6f:21:50:49:a2:e5:fa:f8:71:d1:37:a8:2c:ff: d6:be:65:30:ee:0d:a1:75:1d:b4:1a:b1:d3:bd:66: 33:5e:18:e6:ae:d0:46:34:56:e0:97:ad:42:4a:dd: e0:bb:e4:2d:69:28:6b:bc:16:05:ea:d2:84:65:a1: cf:aa:cf:de:a0:ff:eb:2e:f1:19:61:80:ae:91:d0: b4:26:a5:6b:ca:02:1b:7c:18:32:58:b2:e4:59:7f: 92:72:e3:c8:c4:7b:52:33:bb:8d:ae:e3:90:96:d4: bc:78:96:d4:38:3a:40:31:07:57:04:69:fc:68:b2: de:73:14:87:8d:8f:2b:a8:35:da:df:9d:44:1e:57: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:D6:7F:BD:D0:B5:06:D5:F5:3D:39:23:89:45:E6:B7:FF:76:53 X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ef:f3:16:35:9f:9a:99:58:43:d0:2b:7b:1f:c7:f1:e8:8a: cf:ea:03:6f:2d:da:93:e3:98:8f:d0:14:5e:ba:ec:ed:7e:85: 18:b1:91:03:20:cf:e1:3c:43:af:a5:48:0b:48:62:30:4a:da: cc:ee:c1:a7:ee:47:6c:fb:44:32:56:e9:85:da:d3:da:b7:12: a9:8b:af:4b:dc:b3:21:43:34:41:e2:48:ac:ef:2a:c3:29:8b: 98:8e:a1:7d:34:ad:61:b4:3b:55:79:43:bb:6e:ad:eb:db:77: ac:ad:52:b9:22:fd:cd:6f:ea:3b:94:1d:21:3e:74:92:06:6a: 48:d1:e4:08:66:f3:65:a3:7a:99:0d:c6:cb:1b:63:8e:9a:14: 20:79:6a:f1:57:5b:9c:f1:05:f2:a1:a6:1c:4f:44:eb:77:48: 3b:50:7b:61:6a:65:78:7b:ef:78:e7:ff:a8:97:6d:6e:f1:e1: 9f:74:4b:9b:2a:d8:0b:e4:0b:24:99:02:c0:fd:3f:81:62:e9: a8:f5:55:16:09:fa:e2:f7:cd:5d:11:bf:41:f3:32:2d:11:b9: 14:fc:c2:d4:23:35:51:0e:bc:6f:95:06:24:9e:03:b2:fb:1b: 31:5c:37:ac:47:a1:2f:be:67:ad:db:9e:0b:e3:37:c6:78:a7: 08:60:d1:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1 RUVCREE0RjAeFw0yNjA3MjExMDAzMDlaFw0yNjA3MjgxMDAzMDlaMBgxFjAUBgNV BAMTDTZhNWY0M2RkLTQxMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCJ4o3lnHGWYYJKSrgN5IneQJtRO7sKZuEuphq2wpwy6VIO6M5kHLok8wnStvy ZmB/MXs4TtoHlXCyez4zjflYg6G831nV0K/cADR+pNT+FrSRYcQdurXpYskXPNx9 GVcXTtMgvKPRCqfZMS5yZC6eaD88HqoO6uZvIVBJouX6+HHRN6gs/9a+ZTDuDaF1 HbQasdO9ZjNeGOau0EY0VuCXrUJK3eC75C1pKGu8FgXq0oRloc+qz96g/+su8Rlh gK6R0LQmpWvKAht8GDJYsuRZf5Jy48jEe1Izu42u45CW1Lx4ltQ4OkAxB1cEafxo st5zFIeNjyuoNdrfnUQeVxYVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOI7Wf73Q tQbV9T05I4lF5rf/dlMwHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0UxQTY2RjE4MDBERTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpY YXZ4N3pGX0ViYVY3cjJrOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAm7/MWNZ+amVhD0Ct7H8fx6IrP6gNvLdqT45iP0BReuuztfoUYsZEDIM/hPEOv pUgLSGIwStrM7sGn7kds+0QyVumF2tPatxKpi69L3LMhQzRB4kis7yrDKYuYjqF9 NK1htDtVeUO7bq3r23esrVK5Iv3Nb+o7lB0hPnSSBmpI0eQIZvNlo3qZDcbLG2OO mhQgeWrxV1uc8QXyoaYcT0Trd0g7UHthamV4e+945/+ol21u8eGfdEubKtgL5Ask mQLA/T+BYumo9VUWCfri981dEb9B8zItEbkU/MLUIzVRDrxvlQYkngOy+xsxXDes R6Evvmet254L4zfGeKcIYNHi -----END CERTIFICATE-----Generated at Tue Jul 21 17:56:07 2026 by rpki-client