$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: OIADoy5HqHPYfsXz6Ii95KNz4HmcCRwZ0AIa4k5eEwI= Subject key identifier: 01:2F:27:37:DF:90:56:D4:A3:A7:D8:5E:BD:9C:6A:E6:C2:5B:AE:3E Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0253 Signing time: Mon 27 Jul 2026 03:50:15 +0000 Manifest this update: Mon 27 Jul 2026 03:50:15 +0000 Manifest next update: Mon 03 Aug 2026 03:50:15 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: yxoWytfDOfCe40ywWn6ZXW8TeHNwfInQpr0uZcmcD50=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jul 27 03:50:15 2026 GMT Not After : Aug 3 03:50:15 2026 GMT Subject: CN=6a66d577-9e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:c5:d1:db:7e:6c:ba:3f:8e:13:3b:ed:d1: 1b:b9:d5:72:58:89:00:f8:e0:62:48:97:63:8d:ee: 86:ef:a6:0d:24:9e:74:22:d8:3b:70:3c:11:6a:39: 64:06:8f:1d:18:d6:04:50:cc:4d:5a:fb:d8:52:b0: d4:ea:43:5c:fd:9c:83:44:bb:2b:61:c0:e2:dc:2e: f5:85:0d:35:76:46:21:a1:bd:f6:f0:9e:70:3d:16: b8:4b:0d:9e:ed:c7:83:5b:b6:3b:06:b3:d3:38:a2: 5b:95:4f:ab:b4:58:3c:43:b3:65:11:a6:c2:5f:9f: 69:92:87:5d:f3:67:e2:e8:78:45:25:38:f9:69:50: e8:6f:ec:9b:d1:93:96:32:f7:09:de:cd:fa:3a:cb: 92:d6:5d:3b:b5:a0:2b:eb:17:d6:2f:9b:00:6f:a3: 1d:76:57:98:56:61:0e:29:a6:5b:32:b5:a0:61:d0: 46:48:e1:60:88:32:ae:70:ad:5b:fd:a8:95:fd:a4: ef:8a:7b:50:db:cd:30:ff:fc:cb:bf:f5:d6:60:81: eb:0e:b9:51:95:d4:5c:5c:c3:bd:2c:14:ce:03:41: b9:f4:79:b6:65:8a:88:65:1f:e4:93:3a:dc:9e:30: d9:18:30:19:1e:47:b3:c2:42:aa:e6:eb:56:6e:54: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:27:37:DF:90:56:D4:A3:A7:D8:5E:BD:9C:6A:E6:C2:5B:AE:3E X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ad:7a:f5:0e:dc:e9:62:db:f0:9e:72:57:fb:f0:21:64:d1: 49:4a:f5:fc:b5:42:97:50:d5:35:8a:0d:ff:84:85:50:23:20: 6b:47:5a:ec:e5:5b:67:ba:2c:9c:69:0f:66:cf:49:83:4b:21: 09:d2:cf:07:87:8f:10:e0:b9:21:6a:b0:49:6e:7b:08:7a:4f: 5f:9e:68:6e:39:82:ee:59:ee:83:6d:0d:28:97:e9:cf:d9:d2: 3c:a9:2a:03:01:0e:b2:da:3a:5f:31:2f:9e:2b:15:b3:ef:e0: c1:03:d7:da:4a:ae:d9:e3:06:b2:07:33:6f:4b:b0:bc:dc:03: 9a:4b:8a:d4:c9:9c:b7:34:99:5e:74:6e:e0:7d:87:53:7c:20: 0e:6d:34:bc:7e:d7:00:b6:f2:eb:1b:88:5b:96:cd:d6:40:8c: 7d:90:1b:a9:07:47:31:6f:94:43:03:bd:27:15:e7:b4:50:0b: 01:54:59:28:fd:1e:c5:d7:39:cf:b4:9c:21:16:98:d4:bc:ca: 89:5b:c6:b6:e7:b9:3d:46:36:29:11:a9:20:35:78:b1:99:99: 0d:be:50:1f:2b:42:63:18:42:1d:5e:7e:81:12:f7:f5:26:ee: 99:3d:c9:a1:5d:17:e4:c4:01:84:89:7e:32:1d:99:b8:17:c4: fd:6c:60:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNzI3MDM1MDE1WhcNMjYwODAzMDM1MDE1WjAYMRYwFAYD VQQDEw02YTY2ZDU3Ny05ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBrF0dt+bLo/jhM77dEbudVyWIkA+OBiSJdjje6G76YNJJ50Itg7cDwRajlk Bo8dGNYEUMxNWvvYUrDU6kNc/ZyDRLsrYcDi3C71hQ01dkYhob328J5wPRa4Sw2e 7ceDW7Y7BrPTOKJblU+rtFg8Q7NlEabCX59pkodd82fi6HhFJTj5aVDob+yb0ZOW MvcJ3s36OsuS1l07taAr6xfWL5sAb6MddleYVmEOKaZbMrWgYdBGSOFgiDKucK1b /aiV/aTvintQ280w//zLv/XWYIHrDrlRldRcXMO9LBTOA0G59Hm2ZYqIZR/kkzrc njDZGDAZHkezwkKq5utWblRHxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEvJzff kFbUo6fYXr2caubCW64+MB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv6169Q7c6WLb8J5yV/vwIWTRSUr1/LVCl1DVNYoN/4SFUCMga0da7OVbZ7os nGkPZs9Jg0shCdLPB4ePEOC5IWqwSW57CHpPX55objmC7lnug20NKJfpz9nSPKkq AwEOsto6XzEvnisVs+/gwQPX2kqu2eMGsgczb0uwvNwDmkuK1MmctzSZXnRu4H2H U3wgDm00vH7XALby6xuIW5bN1kCMfZAbqQdHMW+UQwO9JxXntFALAVRZKP0exdc5 z7ScIRaY1LzKiVvGtue5PUY2KRGpIDV4sZmZDb5QHytCYxhCHV5+gRL39SbumT3J oV0X5MQBhIl+Mh2ZuBfE/WxgMA== -----END CERTIFICATE-----Generated at Tue Jul 28 03:15:40 2026 by rpki-client