$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: SjWnviWrK+S0mwEK3hPI///ObtyoMqOgiqplSXztbVQ= Subject key identifier: 49:B6:16:A7:65:30:59:AB:7C:C7:0F:0F:EA:FB:96:9E:3B:CC:EF:5D Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 0747 Signing time: Mon 20 Jul 2026 22:29:54 +0000 Manifest this update: Mon 20 Jul 2026 22:29:54 +0000 Manifest next update: Mon 27 Jul 2026 22:29:54 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: XdhNtcJEJv3Z+XQqtgo0jIRa+IeVMVHg1kRMbCTYu/0=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: ZpGh+0AaLi7VES4v6+0Nh1egQb53z0dspkSaTavSdXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: Jul 20 22:29:54 2026 GMT Not After : Jul 27 22:29:54 2026 GMT Subject: CN=6a5ea162-943e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:52:e6:b6:1f:52:79:36:4f:eb:cb:d9:82:7e: 97:78:e1:8d:cc:01:4d:79:be:7a:1f:56:c3:d5:0d: 33:5c:f1:da:9a:bf:b1:0d:36:03:5d:51:6a:5a:23: 7b:50:38:54:49:52:53:ac:3e:62:a4:4d:d7:51:3d: 9e:84:b5:3f:7f:64:2f:4f:66:44:62:11:c7:2a:a3: 80:da:62:0c:bc:5c:27:25:5d:fa:7d:3b:46:c8:dc: e9:0e:a5:b1:23:41:72:27:42:e5:b0:69:95:79:40: 5d:fd:5d:9c:30:77:34:8a:01:81:7d:45:85:71:b7: 07:b0:78:f3:32:af:a4:ab:09:2a:a6:a4:00:7a:77: f9:af:f0:07:dd:38:05:e5:aa:48:71:4f:80:f0:c6: 6a:33:a5:85:8d:bd:8b:8c:17:c1:52:d6:8b:27:38: aa:62:e7:56:02:4d:63:91:1f:28:1b:0f:32:e1:a7: 9a:29:de:d4:88:c6:9b:da:44:2f:4e:1f:86:2c:fa: 7a:65:c6:1f:9e:8e:a8:ae:11:c0:6c:af:c1:5a:f6: a1:ad:f0:fa:de:22:cc:9b:95:68:7d:11:fa:71:43: c2:8b:7c:4c:e1:c7:6f:16:66:a3:18:ae:5c:48:d0: 34:01:17:a0:07:5a:a8:a7:c5:1e:37:80:78:7e:22: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:16:A7:65:30:59:AB:7C:C7:0F:0F:EA:FB:96:9E:3B:CC:EF:5D X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:75:a4:4e:fa:2c:c8:bf:e5:e0:c7:ce:b2:4d:56:4f:01:56: 4f:48:82:3a:79:06:42:29:9e:9d:d5:ba:ce:4d:77:af:6a:fe: 2c:f7:23:e3:6f:22:d1:5b:0a:f0:65:d9:ba:73:02:57:62:6c: 80:7d:77:c7:1b:df:d9:ad:ad:65:24:74:1a:c5:8d:58:10:db: d4:06:c7:74:3e:6d:46:6a:29:6a:4c:90:1f:af:f7:62:31:62: 63:85:74:36:49:9e:20:6b:95:74:88:d4:0a:51:79:de:d3:f5: 7f:9d:a9:9e:5e:0c:a9:89:af:30:7e:db:36:64:c5:f9:b7:a9: d8:e3:f8:61:e1:5e:c6:07:4d:dc:38:ba:06:4e:2f:9f:cd:50: 7b:e1:08:ce:80:10:ae:cb:58:7f:a4:eb:7b:6f:e5:c1:27:b0: 6a:92:92:7a:7f:70:b3:66:43:10:15:bc:51:18:53:6f:e5:8b: 05:9a:02:ec:a4:7c:c7:70:e8:9d:87:74:d9:23:b2:fc:cd:f4: 87:7e:69:9a:ef:f5:2a:06:91:50:96:e8:40:ca:eb:f9:65:e8: 2d:e4:8c:9d:9d:ad:26:5f:63:97:f3:4c:ab:1a:00:3a:13:6b: 5c:6a:2d:03:1b:58:a3:b2:07:1c:50:da:7b:b7:95:2e:1b:cd: 43:ed:eb:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjYwNzIwMjIyOTU0WhcNMjYwNzI3MjIyOTU0WjAYMRYwFAYD VQQDEw02YTVlYTE2Mi05NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllLmth9SeTZP68vZgn6XeOGNzAFNeb56H1bD1Q0zXPHamr+xDTYDXVFqWiN7 UDhUSVJTrD5ipE3XUT2ehLU/f2QvT2ZEYhHHKqOA2mIMvFwnJV36fTtGyNzpDqWx I0FyJ0LlsGmVeUBd/V2cMHc0igGBfUWFcbcHsHjzMq+kqwkqpqQAenf5r/AH3TgF 5apIcU+A8MZqM6WFjb2LjBfBUtaLJziqYudWAk1jkR8oGw8y4aeaKd7UiMab2kQv Th+GLPp6ZcYfno6orhHAbK/BWvahrfD63iLMm5VofRH6cUPCi3xM4cdvFmajGK5c SNA0ARegB1qop8UeN4B4fiICJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEm2Fqdl MFmrfMcPD+r7lp47zO9dMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmnWkTvosyL/l4MfOsk1WTwFWT0iCOnkGQimendW6zk13r2r+LPcj428i0VsK 8GXZunMCV2JsgH13xxvf2a2tZSR0GsWNWBDb1AbHdD5tRmopakyQH6/3YjFiY4V0 NkmeIGuVdIjUClF53tP1f52pnl4MqYmvMH7bNmTF+bep2OP4YeFexgdN3Di6Bk4v n81Qe+EIzoAQrstYf6Tre2/lwSewapKSen9ws2ZDEBW8URhTb+WLBZoC7KR8x3Do nYd02SOy/M30h35pmu/1KgaRUJboQMrr+WXoLeSMnZ2tJl9jl/NMqxoAOhNrXGot AxtYo7IHHFDae7eVLhvNQ+3rRA== -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:45 2026 by rpki-client