$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json) Hash identifier: vFSmLE7Itf2bq9Kvj00ZWmATlAl6J/t/+jab8JXD20A= Subject key identifier: 53:89:16:26:48:A7:85:B1:0B:4E:81:6B:2D:8C:DB:D9:B9:F6:77:76 Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft Manifest number: 0847 Signing time: Mon 20 Jul 2026 21:32:17 +0000 Manifest this update: Mon 20 Jul 2026 21:32:17 +0000 Manifest next update: Mon 27 Jul 2026 21:32:17 +0000 Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: hR4ruNh0l0GKVzRBcZWSxHjGD9pXt4+wjn1EHAJSks0=) 2: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: mvrD5QWvYKdwFr7tS3PDXY6y+EhDGbDH0RckK+Dej1Q=) 3: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: GobLIlYBkGNU9uPWpdV+qAlmLQ7h40rrOVM904qVtaE=) 4: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: NBqcYaP1mLGHLtPIUim7xHYRFSA/kjEWSIQ+kAnV1V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Validity Not Before: Jul 20 21:32:17 2026 GMT Not After : Jul 27 21:32:17 2026 GMT Subject: CN=6a5e93e1-7b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:d8:18:14:77:3d:ec:65:7f:6d:4a:8a:a7: bf:d1:c2:88:2a:c2:10:cb:f3:78:e4:35:e1:92:98: e5:31:4a:ce:43:78:c0:57:7a:d3:15:b9:58:8b:6c: ed:38:2a:f6:c5:1f:78:de:1c:47:11:70:c2:a2:0c: 73:13:d6:9e:77:5e:61:eb:14:73:d0:0e:df:d7:b1: 7d:da:4c:9a:98:4f:98:e3:40:86:f4:21:aa:2d:01: 6e:b3:9d:5c:f5:11:0f:7b:59:96:44:d3:4b:69:38: 5b:f3:08:1d:2e:fb:b5:20:e5:bc:fb:1a:3a:2a:d6: 8b:77:ff:18:48:e2:2c:6c:60:53:99:bd:f9:98:8a: 47:79:eb:80:d5:b8:67:6d:e8:25:b1:53:5c:c5:71: a0:b2:ef:53:ba:af:f1:1b:9e:a6:85:a2:49:75:09: 17:8e:6a:e7:61:d0:dc:87:95:5d:b0:46:9c:17:9e: d8:3d:be:e6:12:a5:de:a1:d7:28:32:4c:36:fa:b7: 8d:c5:8c:d9:ac:bd:2f:d7:4b:a4:fc:84:3d:d3:f8: 58:8d:7f:2e:3f:10:0d:f0:bf:aa:16:ad:40:7a:e2: 9f:34:a7:cf:87:0b:ad:73:40:98:b2:5f:c6:c4:6c: ee:c6:2b:17:de:0b:a4:87:fa:04:fa:10:5f:6d:ca: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:16:26:48:A7:85:B1:0B:4E:81:6B:2D:8C:DB:D9:B9:F6:77:76 X509v3 Authority Key Identifier: keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f5:c2:12:b0:c4:0a:8a:ea:76:8f:d8:76:e3:a2:e4:0c:95: c1:2e:15:29:6f:76:90:ac:88:aa:83:b6:d8:05:27:8d:ee:24: 4d:68:5b:56:63:69:e3:64:4e:19:31:eb:3e:45:ed:9f:7f:72: c3:de:1b:7c:06:85:ac:f1:1e:9c:1b:fc:a7:01:de:90:d9:30: 56:1e:0d:ac:b1:17:ff:5d:33:45:18:b8:67:c2:10:bf:fa:45: 2f:28:02:39:ed:87:42:5b:53:b1:5d:93:90:76:f4:3b:e7:30: 10:7c:07:de:7c:36:c2:89:ad:a8:0d:2c:b4:ed:45:a1:1b:44: 17:44:37:d9:d4:1b:e3:28:26:11:63:09:3b:97:9e:2c:9e:ec: ca:c5:28:1f:08:a3:aa:2f:28:eb:b7:9e:63:d8:e5:79:24:63: 74:b3:7c:8c:3d:0a:fd:e5:f2:dd:93:55:84:a7:98:e1:b5:a8: b6:e8:bd:d2:89:70:27:0d:cb:d1:d0:ac:67:80:11:ae:a0:60: 3a:32:4f:18:18:96:f4:05:c4:88:be:a7:11:3b:18:96:2c:83: 43:43:94:ba:37:3f:17:4e:0b:31:97:8b:3f:c8:81:83:a2:2c: 39:82:4d:38:44:c3:b5:fb:8c:20:69:d8:72:ff:ca:e3:95:41: 03:12:e2:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3 RUFFRkExNjgwHhcNMjYwNzIwMjEzMjE3WhcNMjYwNzI3MjEzMjE3WjAYMRYwFAYD VQQDEw02YTVlOTNlMS03YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBrYGBR3Pexlf21Kiqe/0cKIKsIQy/N45DXhkpjlMUrOQ3jAV3rTFblYi2zt OCr2xR943hxHEXDCogxzE9aed15h6xRz0A7f17F92kyamE+Y40CG9CGqLQFus51c 9REPe1mWRNNLaThb8wgdLvu1IOW8+xo6KtaLd/8YSOIsbGBTmb35mIpHeeuA1bhn beglsVNcxXGgsu9Tuq/xG56mhaJJdQkXjmrnYdDch5VdsEacF57YPb7mEqXeodco Mkw2+reNxYzZrL0v10uk/IQ90/hYjX8uPxAN8L+qFq1AeuKfNKfPhwutc0CYsl/G xGzuxisX3gukh/oE+hBfbcqbrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOJFiZI p4WxC06Bay2M29m59nd2MB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5 OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApvXCErDECorqdo/YduOi5AyVwS4VKW92kKyIqoO22AUnje4kTWhbVmNp42RO GTHrPkXtn39yw94bfAaFrPEenBv8pwHekNkwVh4NrLEX/10zRRi4Z8IQv/pFLygC Oe2HQltTsV2TkHb0O+cwEHwH3nw2womtqA0stO1FoRtEF0Q32dQb4ygmEWMJO5ee LJ7sysUoHwijqi8o67eeY9jleSRjdLN8jD0K/eXy3ZNVhKeY4bWotui90olwJw3L 0dCsZ4ARrqBgOjJPGBiW9AXEiL6nETsYliyDQ0OUujc/F04LMZeLP8iBg6IsOYJN OETDtfuMIGnYcv/K45VBAxLiaQ== -----END CERTIFICATE-----Generated at Tue Jul 21 09:56:03 2026 by rpki-client