$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: nHRFG+QmOayIvI43QsOxlZhlrygQDCPVbOKfEPD4gE4= Subject key identifier: 4A:A5:69:6D:4B:B7:F2:55:AA:4F:CA:BA:EB:B7:4D:43:A6:02:4F:3C Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0D18 Signing time: Sun 26 Jul 2026 18:38:02 +0000 Manifest this update: Sun 26 Jul 2026 18:38:01 +0000 Manifest next update: Sun 02 Aug 2026 18:38:01 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: yghZ7PYRlyXNHb0op5DuohUJV7USsOWTO2/ev088DR0=) 2: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: Y8iM/MKUEXQVyE05jFr0puje86YlCeOzhufaO/pUc48=) 3: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Wt4x3BfITYgEJpfJfRMRvuhFDSw9mC2fKJBIZ/u4oik=) 4: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: xhv9klMH7WY9g3J7ol55oSW0zPIjpCPV6bNDdN9bbrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3395 (0xd43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Jul 26 18:38:01 2026 GMT Not After : Aug 2 18:38:01 2026 GMT Subject: CN=6a66540a-4b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:e8:52:bf:9b:1c:8f:d2:60:c3:b5:bc:24: 90:eb:81:5d:9b:24:43:ce:42:36:57:25:de:39:0a: 11:60:33:90:ac:78:85:78:76:63:6b:ac:55:ce:52: 3a:e8:10:bf:52:a9:5d:a7:22:e1:bb:ba:ac:9b:4d: 1f:a9:2c:da:41:14:c6:8c:24:9c:9e:e8:54:b5:a2: 82:ee:15:51:df:c0:93:40:bb:97:37:82:61:f5:8b: d8:74:78:a3:53:c0:70:1f:69:c5:78:ff:b9:88:91: ca:15:06:ff:ae:da:cc:8e:ef:f8:eb:60:b0:19:6f: 63:40:5b:cd:e3:d8:33:46:eb:ce:ab:3f:a9:c3:33: be:bc:81:d8:6a:1b:de:c3:4f:8c:1a:b2:1e:66:ce: 43:55:8d:00:df:64:0e:12:3d:9c:44:70:d3:07:b6: dd:7d:e0:48:fa:b7:8f:ab:86:d6:79:39:6b:3c:a2: 2e:01:b4:72:e0:9e:85:c8:c9:3b:8e:3f:b8:10:73: 9c:15:97:23:76:95:63:7d:25:be:a7:44:4e:ca:43: fc:e6:77:15:a3:81:03:1f:a5:42:4b:ef:29:0b:8f: bd:b9:4d:80:9f:99:59:48:4c:15:97:23:a0:e6:f5: 54:42:03:e1:2e:30:e6:7e:b3:ac:ed:1c:70:b7:05: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A5:69:6D:4B:B7:F2:55:AA:4F:CA:BA:EB:B7:4D:43:A6:02:4F:3C X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:61:d5:b5:25:b0:dd:d3:a2:11:ca:d1:30:88:85:54:14:f7: c1:72:ae:db:a2:30:98:b1:8e:9f:a1:45:b9:1c:70:cc:96:7c: 13:d1:64:0d:8b:e1:7e:d0:de:d8:2e:27:ee:13:3a:55:ed:a3: 4b:a5:98:80:ae:63:21:ac:db:95:f0:cd:62:43:0e:6c:30:02: 76:2a:de:8f:e2:b3:57:3d:7f:93:c7:b0:f1:cd:25:ab:d7:47: e9:3a:2b:58:ab:7d:a2:0f:e5:a4:7e:30:a8:78:62:5c:0a:2c: 09:d5:ed:14:4d:a0:fc:68:ea:9f:ae:89:49:bd:3e:3e:93:65: 77:07:e8:74:eb:3d:bd:19:1e:06:78:81:40:50:9d:e0:4c:01: e7:11:09:88:8a:83:62:48:fa:2a:4d:de:96:a0:a4:c0:2a:00: 37:c9:ed:6c:c6:27:88:b8:78:46:fb:13:6f:e8:44:45:4d:a3: f1:69:5c:6d:0d:59:7a:fa:61:30:2a:0e:f2:7d:22:24:2a:5e: e3:85:89:1e:a7:7d:52:59:3a:e2:ee:1f:f9:72:6d:94:e7:89: 07:1c:2b:85:fd:00:1c:c1:0d:4c:75:ac:14:e5:1d:87:69:1a: 35:9d:e5:22:29:14:e0:88:9c:c2:b4:85:4a:71:3b:56:8c:f8: e0:93:88:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYwNzI2MTgzODAxWhcNMjYwODAyMTgzODAxWjAYMRYwFAYD VQQDEw02YTY2NTQwYS00YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM3oUr+bHI/SYMO1vCSQ64FdmyRDzkI2VyXeOQoRYDOQrHiFeHZja6xVzlI6 6BC/UqldpyLhu7qsm00fqSzaQRTGjCScnuhUtaKC7hVR38CTQLuXN4Jh9YvYdHij U8BwH2nFeP+5iJHKFQb/rtrMju/462CwGW9jQFvN49gzRuvOqz+pwzO+vIHYahve w0+MGrIeZs5DVY0A32QOEj2cRHDTB7bdfeBI+rePq4bWeTlrPKIuAbRy4J6FyMk7 jj+4EHOcFZcjdpVjfSW+p0ROykP85ncVo4EDH6VCS+8pC4+9uU2An5lZSEwVlyOg 5vVUQgPhLjDmfrOs7RxwtwWq9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqlaW1L t/JVqk/Kuuu3TUOmAk88MB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVmHVtSWw3dOiEcrRMIiFVBT3wXKu26IwmLGOn6FFuRxwzJZ8E9FkDYvhftDe 2C4n7hM6Ve2jS6WYgK5jIazblfDNYkMObDACdirej+KzVz1/k8ew8c0lq9dH6Tor WKt9og/lpH4wqHhiXAosCdXtFE2g/Gjqn66JSb0+PpNldwfodOs9vRkeBniBQFCd 4EwB5xEJiIqDYkj6Kk3elqCkwCoAN8ntbMYniLh4RvsTb+hERU2j8WlcbQ1Zevph MCoO8n0iJCpe44WJHqd9Ulk64u4f+XJtlOeJBxwrhf0AHMENTHWsFOUdh2kaNZ3l IikU4IicwrSFSnE7Voz44JOIUA== -----END CERTIFICATE-----Generated at Mon Jul 27 22:55:11 2026 by rpki-client