$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: JsojUeRk8lBHkX772fzKY/M3nzNFU91ocDw03zDiWlk= Subject key identifier: D2:75:10:FE:E2:2A:5D:B9:EC:CA:03:F1:90:B4:5B:ED:B7:9A:C8:7F Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0244 Signing time: Tue 23 Jun 2026 02:42:53 +0000 Manifest this update: Tue 23 Jun 2026 02:42:53 +0000 Manifest next update: Tue 30 Jun 2026 02:42:53 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: fqz8qT2TZIHN0L7sA8usS6crtydjTMhc+VO4VNJS1a8=) 2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: XjXcCi2v5LhOi6H+CcgSm46oBwz6y5FjSkvJ1fRJvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Jun 23 02:42:53 2026 GMT Not After : Jun 30 02:42:53 2026 GMT Subject: CN=6a39f2ad-ad5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:ed:0e:75:b2:c2:70:be:c3:bd:de:e2:6c: 33:3c:60:7f:24:65:5c:d3:cd:0b:82:a7:a6:78:2f: 90:aa:88:7a:e3:53:f2:cc:4d:7e:65:56:16:a4:d9: 1e:d2:e8:8f:d2:51:84:c3:d4:8b:5c:a2:17:42:4b: 35:38:d6:65:8b:1c:bc:ff:37:74:c6:ef:38:45:25: cd:29:fd:83:92:f9:e5:1e:ae:92:28:8d:5f:a4:43: 15:8f:bd:a9:3f:d8:ef:94:8d:5a:a7:c1:3d:de:38: 91:11:08:13:22:42:80:41:a1:81:8b:bb:6d:c2:df: d8:ed:51:0e:ec:ad:40:c7:2e:56:44:2c:d6:bd:e7: 95:1f:30:ba:fc:7a:29:5b:88:be:6a:80:dc:8b:a5: 26:f1:74:e2:00:da:4d:ee:ea:c4:04:05:f9:fa:00: 04:3f:16:4b:47:79:64:68:5a:07:30:a9:0f:ab:7f: a3:70:66:45:2c:27:bc:f8:2e:95:cd:a4:d5:1a:08: 12:ee:c6:c3:23:f8:6f:61:8c:2f:f9:b3:55:0c:b8: ba:3c:74:96:e4:a8:1f:21:18:41:7c:4f:24:e0:a3: ff:74:b3:e1:5e:da:f3:c1:bd:90:2e:57:5e:4c:ac: 2e:33:0f:b5:70:4c:9d:76:0a:2e:cf:b7:17:d3:43: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:10:FE:E2:2A:5D:B9:EC:CA:03:F1:90:B4:5B:ED:B7:9A:C8:7F X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2f:ef:29:58:5c:e1:35:8b:ca:33:12:ad:3a:31:ae:f1:45: d2:f7:df:f6:c7:4c:3d:70:57:04:ec:97:b6:4f:54:bc:95:5b: a0:1f:4c:8e:8f:f5:8d:8f:e4:06:d1:41:e0:28:51:cb:c7:84: f7:94:60:a2:9f:35:bc:e0:04:ed:23:b6:6a:5c:79:44:0d:0d: 24:35:c3:b7:78:a7:a9:57:21:ec:5b:99:d2:eb:8a:a5:4d:4c: 2d:f4:00:07:62:30:43:6c:21:7a:ce:43:19:d1:88:87:32:f9: b1:91:1d:06:25:70:f5:d8:62:30:12:4a:d8:45:ad:3a:2e:c5: 48:30:9d:4f:75:30:2b:5d:0b:c7:4e:8b:ef:d1:9b:fd:7e:39: 01:3d:44:e8:2d:d0:c2:10:ed:e2:51:9e:d0:e8:59:01:55:f8: 58:bd:aa:14:76:66:95:6d:75:ad:8c:54:d5:37:50:b3:f4:01: 15:cf:8c:5a:78:84:27:e0:1f:4d:76:35:e2:4d:d1:44:9a:23: e2:29:c1:7e:8f:20:82:4e:1a:e8:fd:7c:f9:38:09:ae:cc:1b: 41:35:4d:c8:a0:8d:3e:4f:e8:a0:27:ab:6e:15:92:8b:5b:bc: 09:bd:67:04:a1:04:3c:68:1f:42:84:a1:52:cd:fe:1c:48:d6: 5b:be:e4:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwNjIzMDI0MjUzWhcNMjYwNjMwMDI0MjUzWjAYMRYwFAYD VQQDEw02YTM5ZjJhZC1hZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmXtDnWywnC+w73e4mwzPGB/JGVc080LgqemeC+Qqoh641PyzE1+ZVYWpNke 0uiP0lGEw9SLXKIXQks1ONZlixy8/zd0xu84RSXNKf2DkvnlHq6SKI1fpEMVj72p P9jvlI1ap8E93jiREQgTIkKAQaGBi7ttwt/Y7VEO7K1Axy5WRCzWveeVHzC6/Hop W4i+aoDci6Um8XTiANpN7urEBAX5+gAEPxZLR3lkaFoHMKkPq3+jcGZFLCe8+C6V zaTVGggS7sbDI/hvYYwv+bNVDLi6PHSW5KgfIRhBfE8k4KP/dLPhXtrzwb2QLlde TKwuMw+1cEyddgouz7cX00ME6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJ1EP7i Kl257MoD8ZC0W+23msh/MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeC/vKVhc4TWLyjMSrToxrvFF0vff9sdMPXBXBOyXtk9UvJVboB9Mjo/1jY/k BtFB4ChRy8eE95Rgop81vOAE7SO2alx5RA0NJDXDt3inqVch7FuZ0uuKpU1MLfQA B2IwQ2whes5DGdGIhzL5sZEdBiVw9dhiMBJK2EWtOi7FSDCdT3UwK10Lx06L79Gb /X45AT1E6C3QwhDt4lGe0OhZAVX4WL2qFHZmlW11rYxU1TdQs/QBFc+MWniEJ+Af TXY14k3RRJoj4inBfo8ggk4a6P18+TgJrswbQTVNyKCNPk/ooCerbhWSi1u8Cb1n BKEEPGgfQoShUs3+HEjWW77kqQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:18:48 2026 by rpki-client