$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: UCcTGk4exOeIYg44TY1K24jsKiqD3gTOsLbxALLGFOQ= Subject key identifier: CF:50:DC:CA:1A:95:36:60:E3:02:A4:A6:80:24:4E:85:2E:BA:EB:AB Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 02A7 Signing time: Wed 19 Aug 2026 02:05:09 +0000 Manifest this update: Wed 19 Aug 2026 02:05:08 +0000 Manifest next update: Wed 26 Aug 2026 02:05:08 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: rd9qpWVRKDuWVVPzxwTciAZzdoZ2vtwRpD2DrOoO554=) 2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) 3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Aug 19 02:05:08 2026 GMT Not After : Aug 26 02:05:08 2026 GMT Subject: CN=6a850f54-ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:5d:de:be:4d:86:a7:54:d4:db:4e:71:ad: a3:cc:37:a9:1b:10:9e:68:fd:ba:88:17:b8:93:61: ff:08:b3:d7:9b:15:b0:98:8b:79:52:5f:87:da:c3: c9:3e:33:3a:d1:a0:10:1d:e0:07:93:14:9b:6b:0b: fb:f9:4a:ac:4c:e3:45:19:84:b7:14:ac:1f:fa:ea: b5:f7:4d:23:9f:14:cb:fd:44:10:48:ae:47:dc:b4: 3d:e4:b8:c1:d8:31:00:9b:93:5e:f1:6e:5c:7e:87: ba:14:7a:b3:b0:5d:96:9d:ba:69:03:30:3b:3b:94: f7:d0:9f:b3:89:7e:90:f1:32:08:c4:8a:8a:af:1e: b6:29:70:5f:43:44:fa:01:da:c3:79:c9:e6:0b:35: ad:fe:63:ce:a6:81:26:a4:32:9e:9e:14:2c:64:77: 62:a5:99:3e:0a:bc:d8:b8:61:8a:e7:c9:49:3f:3d: 93:60:92:39:a5:0b:e2:5a:68:bf:50:79:e4:4e:15: a1:32:7b:d2:93:4b:7e:b2:a0:48:88:55:10:a9:ef: d7:46:9a:02:32:f6:d5:83:23:6f:09:78:63:cb:da: ef:d3:97:83:b9:c7:5d:3b:90:c7:76:ec:fc:b0:e0: c4:23:ef:c9:8b:10:ce:62:c8:77:31:89:38:f6:11: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:DC:CA:1A:95:36:60:E3:02:A4:A6:80:24:4E:85:2E:BA:EB:AB X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:58:21:99:ec:78:cb:96:2c:62:29:fc:90:c1:50:53:74:d9: 72:05:a0:8a:29:4c:6e:62:ae:49:c4:ca:4b:73:64:2b:89:26: ba:49:0d:c4:07:8d:dd:21:cc:e3:00:5c:c3:3f:82:fc:25:46: 0c:75:84:42:ff:6e:3a:76:1d:b6:70:32:68:15:ea:fa:39:fc: 24:81:5c:df:78:ed:03:cd:60:4a:2f:ca:fd:d0:de:bd:3c:49: 8f:6b:a0:ef:5f:07:30:98:65:43:21:49:20:c3:78:75:f0:85: dc:92:1d:a9:8d:6b:70:d5:ca:87:b2:69:d8:6f:9a:81:75:48: 3d:31:e5:09:d5:01:85:5f:6e:a7:0d:15:3e:82:27:14:3b:de: a7:54:22:9b:b7:af:a9:84:59:9a:5a:28:b3:fd:13:f3:bc:e1: 84:c8:25:c9:20:e3:6b:e2:c3:47:7b:c2:40:bb:be:a1:ab:4b: e0:d8:29:8a:f1:11:d2:39:23:36:63:d2:c0:f5:e6:4f:29:ad: 63:f0:e4:91:11:c3:8d:d2:45:2f:05:20:97:bb:d9:22:f9:68: d8:2d:d5:35:74:64:5a:0f:2f:ee:35:d7:7b:06:c0:f3:73:7b: 10:d8:b9:f4:48:71:9a:26:ec:39:a7:26:81:f4:df:01:1a:7a: 56:ce:41:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwODE5MDIwNTA4WhcNMjYwODI2MDIwNTA4WjAYMRYwFAYD VQQDEw02YTg1MGY1NC1lZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW9d3r5NhqdU1NtOca2jzDepGxCeaP26iBe4k2H/CLPXmxWwmIt5Ul+H2sPJ PjM60aAQHeAHkxSbawv7+UqsTONFGYS3FKwf+uq1900jnxTL/UQQSK5H3LQ95LjB 2DEAm5Ne8W5cfoe6FHqzsF2WnbppAzA7O5T30J+ziX6Q8TIIxIqKrx62KXBfQ0T6 AdrDecnmCzWt/mPOpoEmpDKenhQsZHdipZk+CrzYuGGK58lJPz2TYJI5pQviWmi/ UHnkThWhMnvSk0t+sqBIiFUQqe/XRpoCMvbVgyNvCXhjy9rv05eDucddO5DHduz8 sODEI+/JixDOYsh3MYk49hHITwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9Q3Moa lTZg4wKkpoAkToUuuuurMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlghmex4y5YsYin8kMFQU3TZcgWgiilMbmKuScTKS3NkK4kmukkNxAeN3SHM 4wBcwz+C/CVGDHWEQv9uOnYdtnAyaBXq+jn8JIFc33jtA81gSi/K/dDevTxJj2ug 718HMJhlQyFJIMN4dfCF3JIdqY1rcNXKh7Jp2G+agXVIPTHlCdUBhV9upw0VPoIn FDvep1Qim7evqYRZmloos/0T87zhhMglySDja+LDR3vCQLu+oatL4NgpivER0jkj NmPSwPXmTymtY/DkkRHDjdJFLwUgl7vZIvlo2C3VNXRkWg8v7jXXewbA83N7ENi5 9EhxmibsOacmgfTfARp6Vs5Byg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:51:42 2026 by rpki-client