$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: OHI6Lldmfkjgz5cv8DhBYijvLknlWsUoECsNOw5ba8w= Subject key identifier: D3:D8:19:99:D3:D4:45:99:F8:D1:E2:46:36:25:8C:CA:BE:02:80:8F Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 0708 Signing time: Thu 16 Jul 2026 22:31:50 +0000 Manifest this update: Thu 16 Jul 2026 22:31:49 +0000 Manifest next update: Thu 23 Jul 2026 22:31:49 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: eK4jBATw7L+am5ggsgfqavUe0UuNm4TCsluZ7zXaYmk=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 22:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Jul 16 22:31:49 2026 GMT Not After : Jul 23 22:31:49 2026 GMT Subject: CN=6a595bd6-233f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:da:d7:1e:82:93:ae:4a:58:ea:2d:1e:65:69: 22:fb:00:4c:89:75:dc:1c:13:e1:d6:d4:5f:2b:35: 24:35:8a:02:bd:e6:02:e5:5f:a4:dc:54:19:ab:90: e9:99:c4:81:b8:43:6e:ea:83:d8:50:e6:20:6c:84: 3e:73:10:9a:31:47:e7:09:e7:5d:a2:55:8f:33:67: de:97:9d:c7:1f:8e:91:dd:78:54:19:f9:cc:09:a2: 31:02:63:bd:bb:28:2d:55:97:88:61:d0:c0:9f:65: 54:5a:d0:3a:d0:60:55:77:f3:d8:de:8a:ba:9b:da: 51:ca:c1:7f:8c:bb:3a:0c:98:ea:97:2c:23:0a:ab: 44:c6:02:95:ca:75:ad:a6:41:05:d9:b3:4b:cf:c5: f6:a7:15:5d:ba:46:9d:c3:34:97:48:a1:d2:87:c8: 13:24:af:2e:6a:95:12:b3:ae:53:da:17:98:64:3f: 26:4f:09:0f:02:30:8c:a2:ae:0e:f5:8b:69:7a:b6: 59:c4:91:b9:8c:ea:d7:4c:72:e2:41:ce:c5:1e:d2: e9:94:c1:2a:50:37:8c:fe:20:bd:f3:06:dc:80:93: dd:f0:c5:db:68:19:e0:14:55:2f:99:04:82:79:30: 36:d8:64:90:7e:f4:19:da:06:f4:2d:3f:f4:e1:50: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D8:19:99:D3:D4:45:99:F8:D1:E2:46:36:25:8C:CA:BE:02:80:8F X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7d:14:44:d4:7c:88:b3:b5:e9:86:15:f2:35:77:98:3c:ef: 87:0d:86:12:61:35:ad:c3:98:17:d4:89:61:81:61:02:df:2c: f5:90:27:8a:56:59:65:b5:7b:df:4d:9d:2e:4f:45:92:c8:5f: 71:53:fb:70:aa:2f:bd:49:58:6a:0f:57:ab:d8:99:37:89:6e: f7:1b:54:15:6f:10:b9:e0:d3:db:57:03:0e:48:85:62:41:60: 62:b1:6f:e7:b8:82:4a:e1:35:b3:3b:07:a6:52:7f:1e:7d:ca: b5:e2:36:36:79:d9:be:4d:68:73:a3:22:f3:5d:a7:af:b0:d0: 17:c2:fb:b0:79:5f:97:5e:2d:29:a5:46:7d:e6:94:83:d1:e4: 95:ca:b3:f2:cf:37:41:44:21:a1:cc:77:22:d7:c5:c6:e4:12: 23:72:48:ec:f3:d0:5b:3e:d5:d9:fa:5e:4b:14:7e:a3:73:8b: 9a:4e:8d:d4:44:24:59:13:6b:73:fb:8f:a5:d0:46:a6:d0:d6: 14:8b:dd:04:20:38:3a:37:d0:08:ff:f3:67:3e:fa:92:3a:c1: b4:79:46:cd:aa:5a:8e:33:97:00:e5:29:24:a8:12:96:1e:e2: 3c:dd:fa:61:8c:82:15:8e:6c:d3:58:48:36:20:b8:61:99:d0: 4e:f1:bc:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwNzE2MjIzMTQ5WhcNMjYwNzIzMjIzMTQ5WjAYMRYwFAYD VQQDEw02YTU5NWJkNi0yMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4drXHoKTrkpY6i0eZWki+wBMiXXcHBPh1tRfKzUkNYoCveYC5V+k3FQZq5Dp mcSBuENu6oPYUOYgbIQ+cxCaMUfnCeddolWPM2fel53HH46R3XhUGfnMCaIxAmO9 uygtVZeIYdDAn2VUWtA60GBVd/PY3oq6m9pRysF/jLs6DJjqlywjCqtExgKVynWt pkEF2bNLz8X2pxVdukadwzSXSKHSh8gTJK8uapUSs65T2heYZD8mTwkPAjCMoq4O 9YtperZZxJG5jOrXTHLiQc7FHtLplMEqUDeM/iC98wbcgJPd8MXbaBngFFUvmQSC eTA22GSQfvQZ2gb0LT/04VAf/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPYGZnT 1EWZ+NHiRjYljMq+AoCPMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADX0URNR8iLO16YYV8jV3mDzvhw2GEmE1rcOYF9SJYYFhAt8s9ZAnilZZZbV7 302dLk9FkshfcVP7cKovvUlYag9Xq9iZN4lu9xtUFW8QueDT21cDDkiFYkFgYrFv 57iCSuE1szsHplJ/Hn3KteI2NnnZvk1oc6Mi812nr7DQF8L7sHlfl14tKaVGfeaU g9Hklcqz8s83QUQhocx3ItfFxuQSI3JI7PPQWz7V2fpeSxR+o3OLmk6N1EQkWRNr c/uPpdBGptDWFIvdBCA4OjfQCP/zZz76kjrBtHlGzapajjOXAOUpJKgSlh7iPN36 YYyCFY5s01hINiC4YZnQTvG8sw== -----END CERTIFICATE-----Generated at Sat Jul 18 09:56:26 2026 by rpki-client