$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: JzKat2IE281wktiL2Ioy7g+31AdoWAr/2ayE45gBVZE= Subject key identifier: DA:B8:D9:A8:80:8C:95:EF:A6:2B:8D:CE:D7:3E:97:3B:21:2A:AD:BD Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 0108 Signing time: Tue 23 Jun 2026 15:35:26 +0000 Manifest this update: Tue 23 Jun 2026 15:35:26 +0000 Manifest next update: Tue 30 Jun 2026 15:35:26 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: KZScDjF6kDVrpnEwV9qPc5mgJuNNVstT3PlXtJd9C4U=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: nAHCMgXlFjsXxfaXU62u6UPJaY6Jsa3QgldOcoqtVzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 15:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Jun 23 15:35:26 2026 GMT Not After : Jun 30 15:35:26 2026 GMT Subject: CN=6a3aa7be-9cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:b6:1d:dd:b9:e0:2c:ce:6f:a1:36:b5:31: 9b:3d:3b:b8:60:05:01:ea:15:00:08:d1:a2:d1:c7: c2:54:09:fe:61:f6:92:1d:da:58:2f:81:72:57:45: 5d:06:90:52:27:1b:a5:16:8c:6d:85:ca:54:c6:15: d5:9e:99:a1:10:1e:de:8d:ae:f6:21:89:b3:55:83: 9d:ff:97:1e:32:93:7b:dd:f4:71:97:dc:62:e8:c2: a7:2b:de:a4:39:57:43:49:03:96:2f:ec:ca:63:73: 0c:b4:29:7d:84:c7:45:7b:1b:1e:75:7d:5c:21:4d: 83:bd:03:d5:81:88:66:b4:d1:1e:53:ad:47:c8:d0: 8d:c9:0d:27:5b:77:80:bc:5e:2f:5a:2a:2a:d2:e8: 0b:1b:af:82:41:5a:85:7f:af:47:81:75:f2:04:ee: 42:f6:e6:8f:2a:f8:c4:59:2f:bd:99:6a:0e:70:51: 1e:49:99:de:82:39:b5:32:75:66:0c:98:4d:cd:98: 82:db:9c:77:f1:44:ac:5f:df:d5:57:4b:29:68:11: 3a:8c:fc:a0:70:b4:d9:62:e6:43:f7:67:cd:85:9a: bd:ae:98:53:f7:50:15:89:95:d6:91:61:d2:47:0f: d4:30:53:59:9b:4b:23:1a:da:e4:a1:e0:68:43:fc: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B8:D9:A8:80:8C:95:EF:A6:2B:8D:CE:D7:3E:97:3B:21:2A:AD:BD X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:21:6a:0c:f4:ab:fc:53:ff:1e:db:b2:47:2f:64:ae:56:ef: b3:3d:35:29:59:a3:ea:78:22:ca:6e:73:0a:71:04:a7:8e:bb: 7b:d6:c7:16:da:90:15:c0:23:2a:dc:53:d9:a9:1a:d9:e1:2a: 9b:ee:27:e9:50:5c:b2:3d:be:12:92:eb:71:6f:a0:3d:14:bf: 30:c4:84:d2:67:40:6a:ff:52:b0:08:70:27:03:8f:72:75:cb: cf:fd:fe:be:79:69:0c:39:5c:dc:f8:78:4b:cf:fd:18:78:1a: 2b:fb:c1:27:50:89:44:1d:b5:53:47:41:46:5f:50:47:31:36: 72:79:97:f0:80:9f:a9:a8:29:8e:8d:e4:25:84:ba:66:95:b8: 4b:d0:ea:aa:39:14:f5:79:30:cd:28:44:d1:44:86:f9:4d:a1: 9a:88:c5:7c:2b:d7:9c:4a:ba:4e:1e:31:07:29:41:71:00:46: b5:76:a6:79:73:e1:22:85:87:f5:d0:40:38:9e:f6:d7:f7:8d: 46:17:ee:68:80:05:ed:14:c1:fe:b7:25:0f:99:f8:f8:b4:f0: 78:9e:96:72:d0:15:6f:67:46:39:4a:d5:28:ec:d2:b5:3d:fe: f8:9c:c3:67:ab:74:38:99:16:74:b9:2c:b0:c7:07:36:6d:20: 8f:57:5f:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz QjUzQzcyRkEwHhcNMjYwNjIzMTUzNTI2WhcNMjYwNjMwMTUzNTI2WjAYMRYwFAYD VQQDEw02YTNhYTdiZS05Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr962Hd254CzOb6E2tTGbPTu4YAUB6hUACNGi0cfCVAn+YfaSHdpYL4FyV0Vd BpBSJxulFoxthcpUxhXVnpmhEB7eja72IYmzVYOd/5ceMpN73fRxl9xi6MKnK96k OVdDSQOWL+zKY3MMtCl9hMdFexsedX1cIU2DvQPVgYhmtNEeU61HyNCNyQ0nW3eA vF4vWioq0ugLG6+CQVqFf69HgXXyBO5C9uaPKvjEWS+9mWoOcFEeSZnegjm1MnVm DJhNzZiC25x38USsX9/VV0spaBE6jPygcLTZYuZD92fNhZq9rphT91AViZXWkWHS Rw/UMFNZm0sjGtrkoeBoQ/yXswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNq42aiA jJXvpiuNztc+lzshKq29MB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0 QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy LTU0WEhXWlktUFE3VThjdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyFqDPSr/FP/HtuyRy9krlbvsz01KVmj6ngiym5zCnEEp467e9bHFtqQFcAj KtxT2aka2eEqm+4n6VBcsj2+EpLrcW+gPRS/MMSE0mdAav9SsAhwJwOPcnXLz/3+ vnlpDDlc3Ph4S8/9GHgaK/vBJ1CJRB21U0dBRl9QRzE2cnmX8ICfqagpjo3kJYS6 ZpW4S9DqqjkU9XkwzShE0USG+U2hmojFfCvXnEq6Th4xBylBcQBGtXameXPhIoWH 9dBAOJ721/eNRhfuaIAF7RTB/rclD5n4+LTweJ6WctAVb2dGOUrVKOzStT3++JzD Z6t0OJkWdLkssMcHNm0gj1df1w== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:17 2026 by rpki-client