$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: 1ItHxrnGUEPpfP6OhSLl/kPlIYMxNMSi/3icUwbr1ag= Subject key identifier: A1:E6:60:26:02:27:94:EE:84:CB:32:98:7B:E1:E9:49:B1:F5:AC:BB Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 0127 Signing time: Wed 19 Aug 2026 06:28:04 +0000 Manifest this update: Wed 19 Aug 2026 06:28:04 +0000 Manifest next update: Wed 26 Aug 2026 06:28:04 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: mhJ/5U2SSq3YGr4yMfss74wMWEF0tFSIfvsLKWoyYdg=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: pme8BEo7whHw/nE985T4YJ9ukK31bkVycJriDT2MMKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Aug 19 06:28:04 2026 GMT Not After : Aug 26 06:28:04 2026 GMT Subject: CN=6a854cf4-ae60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:72:3a:79:49:45:68:f7:02:f6:42:25:53: 3d:c6:4a:a6:ad:14:24:dd:f7:5c:cf:5a:c7:48:29: 38:0d:9d:10:65:60:8e:28:43:65:ce:ac:05:81:59: 53:6d:37:ac:44:07:5e:25:e8:60:22:d5:b7:be:bb: 86:83:4e:85:c7:77:de:df:20:d1:69:1e:f2:f6:0b: bb:78:42:1b:11:68:40:6c:74:9a:5b:b3:c3:d4:82: 7c:1f:d3:22:0b:c1:5a:c7:b6:0d:2e:03:78:b9:14: c9:66:ef:d0:e4:16:72:0e:81:ea:09:f3:fd:d2:c5: 04:76:92:7e:af:b1:02:17:06:c3:92:1e:59:e2:03: 3f:6a:ad:b8:d1:a2:d0:9e:ee:ee:a7:4e:51:98:24: ac:49:3c:2a:bf:0e:98:f2:1a:25:82:eb:ef:50:38: bb:93:ef:1e:3a:c9:c5:6c:08:b0:7e:c2:e1:db:3f: 32:e3:d7:f1:0c:f1:c1:b6:b1:46:25:16:25:10:1b: 6e:3a:87:8d:5d:d7:0d:51:01:d6:d6:c4:47:9a:b1: 1f:bf:db:15:e2:92:87:b7:8f:db:00:4d:28:b0:5a: 31:70:eb:0f:ac:24:be:b3:ee:25:34:f2:5a:fa:be: 11:7f:37:0d:14:7f:78:7b:42:ae:33:73:83:d7:15: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:60:26:02:27:94:EE:84:CB:32:98:7B:E1:E9:49:B1:F5:AC:BB X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:92:9e:95:65:1b:21:66:b2:62:c0:92:42:5f:3d:36:7f:d0: 58:93:90:93:a0:d1:9f:56:1f:ff:58:b3:5c:36:e6:77:af:61: 58:4c:fc:2b:6c:6b:b5:f2:f4:c3:06:54:bb:6a:32:8c:cb:f3: f6:26:73:33:f6:3e:db:4b:d1:ef:13:d6:ce:3e:49:5e:ca:c8: e7:96:df:a0:b9:fa:e2:05:a3:80:e0:63:45:2a:e1:6f:7d:7b: 20:ae:16:e2:85:b0:3e:b3:c8:04:0a:e6:20:46:a3:58:f1:48: 51:d1:f7:c1:c5:34:f8:dc:d7:c6:72:bf:24:6a:67:97:79:73: 7c:62:52:c0:3d:ff:9e:76:82:df:2a:0f:04:12:7c:8f:34:d4: 5d:65:85:78:8f:2f:75:a3:2d:90:86:38:be:60:02:9f:c0:dc: 1d:20:7e:d9:9e:77:d5:97:f1:44:cd:9b:f6:de:dc:56:2f:72: 09:0a:86:7e:dd:09:8f:ad:cc:4f:e9:7f:ea:bd:df:08:32:33: f5:c5:4c:e1:a3:59:eb:30:6b:be:c4:de:61:96:e3:e3:59:74: 23:53:97:58:a1:4e:1e:82:ef:35:98:19:c6:29:df:32:38:14: f7:ed:4b:f7:ea:8b:ec:45:8d:8a:c7:21:88:f0:98:87:36:21: 25:b3:24:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz QjUzQzcyRkEwHhcNMjYwODE5MDYyODA0WhcNMjYwODI2MDYyODA0WjAYMRYwFAYD VQQDEw02YTg1NGNmNC1hZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7lyOnlJRWj3AvZCJVM9xkqmrRQk3fdcz1rHSCk4DZ0QZWCOKENlzqwFgVlT bTesRAdeJehgItW3vruGg06Fx3fe3yDRaR7y9gu7eEIbEWhAbHSaW7PD1IJ8H9Mi C8Fax7YNLgN4uRTJZu/Q5BZyDoHqCfP90sUEdpJ+r7ECFwbDkh5Z4gM/aq240aLQ nu7up05RmCSsSTwqvw6Y8holguvvUDi7k+8eOsnFbAiwfsLh2z8y49fxDPHBtrFG JRYlEBtuOoeNXdcNUQHW1sRHmrEfv9sV4pKHt4/bAE0osFoxcOsPrCS+s+4lNPJa +r4RfzcNFH94e0KuM3OD1xU+tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHmYCYC J5TuhMsymHvh6Umx9ay7MB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0 QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy LTU0WEhXWlktUFE3VThjdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG5KelWUbIWayYsCSQl89Nn/QWJOQk6DRn1Yf/1izXDbmd69hWEz8K2xrtfL0 wwZUu2oyjMvz9iZzM/Y+20vR7xPWzj5JXsrI55bfoLn64gWjgOBjRSrhb317IK4W 4oWwPrPIBArmIEajWPFIUdH3wcU0+NzXxnK/JGpnl3lzfGJSwD3/nnaC3yoPBBJ8 jzTUXWWFeI8vdaMtkIY4vmACn8DcHSB+2Z531ZfxRM2b9t7cVi9yCQqGft0Jj63M T+l/6r3fCDIz9cVM4aNZ6zBrvsTeYZbj41l0I1OXWKFOHoLvNZgZxinfMjgU9+1L 9+qL7EWNischiPCYhzYhJbMkLA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:20 2026 by rpki-client