$ rpki-client -vvf rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft File: zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft (raw, json) Hash identifier: DLhKlNWyy0Vw+pSSzvyiTELMkvMWjWsHpG0AXiNLdTk= Subject key identifier: C8:4B:14:EE:DD:C2:B1:54:40:6D:CB:3F:7B:CD:3C:6F:D9:98:60:9A Authority key identifier: CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 Certificate issuer: /CN=A91834CD/serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft Manifest number: 02 Signing time: Mon 27 Jul 2026 06:05:23 +0000 Manifest this update: Mon 27 Jul 2026 06:05:22 +0000 Manifest next update: Mon 03 Aug 2026 06:05:22 +0000 Files and hashes: 1: zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl (hash: eK02/1Ajkmyeo9PVDkhA9VJIpdvJMldCEtSzIW/BUno=) 2: 22D62D36898111F1A3670DB57111F970.roa (hash: gWYW4p/xaqTFNf7paDgnkOo/IHbmHFa68m0fAbS62oI=) 3: 2204A202898111F1A3670DB57111F970.roa (hash: P8XESHHL/HSU+GdK7TNlWrB4BhCjNy4yqbZCiNKOTvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834CD, serialNumber=CD7872AAF747BAE03A6118C8381441FF987FCD75 Validity Not Before: Jul 27 06:05:22 2026 GMT Not After : Aug 3 06:05:22 2026 GMT Subject: CN=6a66f523-01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:87:b4:8e:96:6a:16:1d:d6:9a:f6:e9:b7: 23:23:1b:6d:79:01:f9:54:35:59:bc:15:90:e6:7b: b6:7e:96:91:78:c3:1e:6d:0d:75:41:a2:e9:c0:07: 68:9c:af:82:a2:c4:28:e6:91:e8:3f:5d:80:54:e5: 61:95:b9:ab:d4:d9:17:d1:fa:cb:57:75:7d:51:e2: 4b:88:4b:fe:02:ba:ba:5f:2b:95:f5:93:04:df:2e: e3:88:71:5a:5e:58:60:b4:aa:64:64:b8:cf:bd:5e: 54:bb:86:37:63:5d:61:57:b5:d9:f6:a4:49:a1:6f: be:98:3d:5f:d1:df:6e:ee:38:d0:78:3c:60:30:06: ff:17:92:d2:38:4f:9d:ac:d5:42:f5:23:30:16:a2: 82:aa:9d:71:c7:ef:86:4d:1f:2b:3c:fa:d9:6a:63: 30:74:67:1a:4f:7d:80:84:a2:8c:81:06:08:c9:ee: b9:f2:3a:0f:9e:c1:cc:a3:5d:c6:d0:83:c2:e2:3f: 10:69:27:8b:c3:50:10:8f:6d:24:44:d6:da:07:14: cf:d7:01:07:97:47:46:cf:5f:06:12:72:1c:3c:48: c2:bb:c4:a1:75:e1:fc:bc:4b:e0:c9:e4:ef:06:c9: b5:e4:af:3d:3a:84:9d:a4:0d:7c:1f:e6:7f:54:ef: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4B:14:EE:DD:C2:B1:54:40:6D:CB:3F:7B:CD:3C:6F:D9:98:60:9A X509v3 Authority Key Identifier: keyid:CD:78:72:AA:F7:47:BA:E0:3A:61:18:C8:38:14:41:FF:98:7F:CD:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXhyqvdHuuA6YRjIOBRB_5h_zXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834CD/820F31D6898011F1B6B0EF077111F970/zXhyqvdHuuA6YRjIOBRB_5h_zXU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:96:24:b2:06:55:bb:36:3a:cc:16:05:fe:68:8d:56:37: f6:89:53:34:8b:50:11:82:75:f6:02:40:6e:18:18:39:f8:eb: b9:9c:5f:68:d0:1a:82:78:74:04:c7:da:63:76:c7:80:2c:3a: b6:00:52:ac:c3:9e:80:31:bd:52:41:40:19:b3:1d:16:de:e2: a1:e4:d4:ca:23:9c:f4:58:94:0c:fd:7c:db:1a:e9:a7:66:2a: 2f:f6:c1:67:50:0d:4a:68:71:cc:d7:f6:39:1c:73:09:b6:d4: aa:83:62:ae:c3:05:a9:97:86:c7:c8:99:af:a4:3c:a4:ed:78: 6c:ee:91:74:45:de:a5:dd:98:e8:c2:72:f4:4a:20:24:4f:d7: 89:6f:54:a4:2a:3d:82:fd:d9:7c:25:19:58:cc:a2:99:83:1e: e6:ad:ba:b2:96:c2:38:8d:60:fb:fa:42:92:24:85:1d:0e:33: 5f:3c:6c:4c:11:aa:2c:e7:23:64:a1:1f:57:62:b8:b6:61:45: 50:e6:80:ad:23:5e:98:5f:a6:3c:0b:eb:67:a6:59:42:d4:fa: 25:4b:5e:0d:37:eb:ca:6d:86:8a:f6:1f:3a:70:41:14:ad:ad: 63:83:5d:ee:85:e9:ee:8f:0e:49:ab:e1:19:60:a8:fa:fc:58: dd:66:2e:dd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzRDRDExMC8GA1UEBRMoQ0Q3ODcyQUFGNzQ3QkFFMDNBNjExOEM4MzgxNDQxRkY5 ODdGQ0Q3NTAeFw0yNjA3MjcwNjA1MjJaFw0yNjA4MDMwNjA1MjJaMBgxFjAUBgNV BAMTDTZhNjZmNTIzLTAxZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn1Ie0jpZqFh3WmvbptyMjG215AflUNVm8FZDme7Z+lpF4wx5tDXVBounAB2ic r4KixCjmkeg/XYBU5WGVuavU2RfR+stXdX1R4kuIS/4CurpfK5X1kwTfLuOIcVpe WGC0qmRkuM+9XlS7hjdjXWFXtdn2pEmhb76YPV/R327uONB4PGAwBv8XktI4T52s 1UL1IzAWooKqnXHH74ZNHys8+tlqYzB0ZxpPfYCEooyBBgjJ7rnyOg+ewcyjXcbQ g8LiPxBpJ4vDUBCPbSRE1toHFM/XAQeXR0bPXwYSchw8SMK7xKF14fy8S+DJ5O8G ybXkrz06hJ2kDXwf5n9U79DzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyEsU7t3C sVRAbcs/e808b9mYYJowHwYDVR0jBBgwFoAUzXhyqvdHuuA6YRjIOBRB/5h/zXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNENELzgyMEYzMUQ2ODk4 MDExRjFCNkIwRUYwNzcxMTFGOTcwL3pYaHlxdmRIdXVBNllSaklPQlJCXzVoX3pY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelhoeXF2ZEh1dUE2WVJqSU9CUkJfNWhfelhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NENELzgyMEYzMUQ2ODk4MDExRjFCNkIwRUYwNzcxMTFGOTcwL3pYaHlxdmRIdXVB NllSaklPQlJCXzVoX3pYVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChRJYksgZVuzY6zBYF/miNVjf2iVM0i1ARgnX2AkBuGBg5+Ou5nF9o0BqCeHQE x9pjdseALDq2AFKsw56AMb1SQUAZsx0W3uKh5NTKI5z0WJQM/XzbGumnZiov9sFn UA1KaHHM1/Y5HHMJttSqg2KuwwWpl4bHyJmvpDyk7Xhs7pF0Rd6l3ZjownL0SiAk T9eJb1SkKj2C/dl8JRlYzKKZgx7mrbqylsI4jWD7+kKSJIUdDjNfPGxMEaos5yNk oR9XYri2YUVQ5oCtI16YX6Y8C+tnpllC1PolS14NN+vKbYaK9h86cEEUra1jg13u henujw5Jq+EZYKj6/FjdZi7d -----END CERTIFICATE-----Generated at Mon Jul 27 10:37:17 2026 by rpki-client