$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: jEmRHaPdcUs3tddF+QxaMZSF5nJjj/sNGM8fwbwVF2I= Subject key identifier: 1E:80:1D:BF:28:6F:D9:5A:F8:C8:68:72:48:7E:CB:C7:7C:85:3E:2B Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E53 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0DAB Signing time: Sun 26 Jul 2026 16:56:39 +0000 Manifest this update: Sun 26 Jul 2026 16:56:39 +0000 Manifest next update: Sun 02 Aug 2026 16:56:39 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: W38hE/rT1eKPgmw/TXY6jFQ8szwmlBebIC/RhXwz2G4=) 2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=) 4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 16:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3667 (0xe53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jul 26 16:56:39 2026 GMT Not After : Aug 2 16:56:39 2026 GMT Subject: CN=6a663c47-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:69:87:be:f1:98:44:8f:06:48:ab:c0:07: 00:14:ce:a3:ad:c0:0b:52:93:59:06:0a:83:75:7c: 48:b4:af:5c:d0:52:93:67:35:32:a9:b2:98:07:a0: 63:c2:85:4e:ea:5e:13:67:2a:73:d4:a3:9c:8e:87: 2a:f1:4b:af:41:a0:93:77:59:5d:72:e4:8a:b5:43: 42:d8:fb:a0:33:a9:db:b4:80:44:2a:bd:35:53:5a: 48:c8:8b:7c:0b:5d:e8:3f:5c:fd:ed:83:d5:35:cb: 54:ee:65:2f:ae:68:f2:81:5f:66:16:7f:d8:bf:6d: 47:a4:68:6b:52:33:58:c5:7a:73:93:02:76:a1:39: c4:2d:bc:4f:00:3b:fa:cf:d1:28:97:3f:44:05:ed: f3:a1:a0:59:ac:ea:e1:91:f3:4a:b5:d5:3c:d8:cb: e2:08:f5:53:ea:ca:e2:8d:3f:00:df:10:22:0f:1c: 7a:01:40:ef:31:40:d6:56:fa:de:12:6e:54:8b:2d: 9d:28:d4:5a:5e:2e:42:b8:86:68:aa:1c:73:6a:fe: 21:33:dc:ef:29:19:65:c7:72:b5:5e:3b:ed:cf:86: bf:11:c1:d7:12:ba:ea:4d:65:b1:cc:2a:16:cc:c7: 24:81:e9:c9:ff:55:e1:03:81:2e:f7:82:f2:a4:8d: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:80:1D:BF:28:6F:D9:5A:F8:C8:68:72:48:7E:CB:C7:7C:85:3E:2B X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:ef:7e:fa:b0:ab:4c:24:f9:16:54:23:83:6f:12:a6:21: d6:fc:4a:7c:4d:bf:d9:ec:b2:0d:44:f6:62:05:e4:c5:88:43: 85:db:08:c1:d3:22:73:ed:d2:ca:1a:7a:7f:3e:79:5b:88:b5: a4:79:2f:87:e5:c1:2a:ed:89:45:64:71:ad:b0:b7:2b:e6:21: 71:f0:d1:6d:27:3e:93:ee:56:42:e8:ec:5f:f1:5c:f5:97:02: e0:2b:0c:81:cc:52:5e:73:23:c3:ec:7b:0c:5c:9f:b2:8a:e2: 1a:b4:ec:94:cd:17:03:70:51:e7:bc:a1:1d:3b:8f:f0:af:a0: c4:5e:da:5e:87:91:ed:74:ff:2f:55:ad:49:9b:1a:d0:42:13: 40:70:74:ab:98:6a:67:d2:44:aa:27:ea:bb:b5:f5:1d:ec:d7: 17:af:23:2d:bf:01:1f:07:cb:7b:ec:76:df:c2:ad:51:ff:c5: 56:55:68:2a:44:91:92:36:60:3e:d7:0c:a7:01:5a:ea:b8:c8: 92:8d:7d:03:72:1b:1c:55:fa:16:68:52:4c:dc:2a:ff:e8:cf: 94:72:96:09:1d:5d:1d:2b:a2:e1:61:40:86:4f:22:7c:34:42: 12:29:c0:a8:40:12:25:46:be:06:17:61:6a:c2:2c:84:cc:78: 77:57:9d:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwNzI2MTY1NjM5WhcNMjYwODAyMTY1NjM5WjAYMRYwFAYD VQQDEw02YTY2M2M0Ny1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzlph77xmESPBkirwAcAFM6jrcALUpNZBgqDdXxItK9c0FKTZzUyqbKYB6Bj woVO6l4TZypz1KOcjocq8UuvQaCTd1ldcuSKtUNC2PugM6nbtIBEKr01U1pIyIt8 C13oP1z97YPVNctU7mUvrmjygV9mFn/Yv21HpGhrUjNYxXpzkwJ2oTnELbxPADv6 z9Eolz9EBe3zoaBZrOrhkfNKtdU82MviCPVT6srijT8A3xAiDxx6AUDvMUDWVvre Em5Uiy2dKNRaXi5CuIZoqhxzav4hM9zvKRllx3K1Xjvtz4a/EcHXErrqTWWxzCoW zMckgenJ/1XhA4Eu94LypI2Y3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6AHb8o b9la+Mhockh+y8d8hT4rMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGV7vfvqwq0wk+RZUI4NvEqYh1vxKfE2/2eyyDUT2YgXkxYhDhdsIwdMic+3S yhp6fz55W4i1pHkvh+XBKu2JRWRxrbC3K+YhcfDRbSc+k+5WQujsX/Fc9ZcC4CsM gcxSXnMjw+x7DFyfsoriGrTslM0XA3BR57yhHTuP8K+gxF7aXoeR7XT/L1WtSZsa 0EITQHB0q5hqZ9JEqifqu7X1HezXF68jLb8BHwfLe+x238KtUf/FVlVoKkSRkjZg PtcMpwFa6rjIko19A3IbHFX6FmhSTNwq/+jPlHKWCR1dHSui4WFAhk8ifDRCEinA qEASJUa+BhdhasIshMx4d1ednA== -----END CERTIFICATE-----Generated at Mon Jul 27 11:35:07 2026 by rpki-client