$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: a9NBHpmvqgtSdsjf+2NMIcRyM2791bHkDvHpICpf4hc= Subject key identifier: 63:AD:59:0F:B2:EC:30:2A:22:55:E3:DF:2E:38:A4:14:5B:EE:32:8C Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: A1 Signing time: Wed 19 Aug 2026 07:58:11 +0000 Manifest this update: Wed 19 Aug 2026 07:58:10 +0000 Manifest next update: Wed 26 Aug 2026 07:58:10 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: dwBzMs1K1uOr+4gboesC84MCDfWrlbrm/j7ysFxEqMI=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: RqCpDoo45BvdNa/Wr+sL6cLBWSatPQ0KKDjOjSMWLg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Aug 19 07:58:10 2026 GMT Not After : Aug 26 07:58:10 2026 GMT Subject: CN=6a856213-ed82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:a8:85:2c:47:86:23:c7:ce:4a:7a:fc:fa: 7f:82:7e:b9:f3:10:73:6c:b3:15:09:40:e2:04:e7: 21:36:6a:66:04:f6:4b:4a:90:20:43:a6:0a:2c:00: b4:49:21:49:60:2b:95:70:6a:1f:1c:8c:12:7c:a2: 10:1b:b5:4d:33:f9:33:5b:81:ab:8a:17:8a:bf:c5: 20:45:9b:79:07:a5:bd:c9:d0:c8:4b:a2:32:b7:5a: fa:7b:4a:78:16:3e:af:c7:ad:a9:42:21:97:96:a1: 64:b3:59:c1:9a:53:a5:5f:39:c9:4e:a2:20:96:99: 3d:74:2d:9f:99:a9:2a:70:77:78:ab:7e:a3:db:76: dc:ee:74:34:51:ac:4e:2b:6c:f2:2b:d3:ae:a5:01: 66:09:45:63:2d:90:a4:c7:a9:ed:ac:76:64:fe:03: c9:cb:fa:56:7b:9e:fa:28:60:bb:8d:1f:97:fc:0c: c4:00:a4:89:42:1b:06:c5:2e:80:40:09:ab:0a:51: 24:02:00:e7:0a:a5:b5:16:59:68:89:e8:31:fc:93: 52:da:e3:00:64:75:1b:4c:de:4d:ab:e4:36:b0:79: d5:17:0d:2a:9e:d3:b5:db:97:67:4f:50:44:bd:06: fc:1e:6f:0b:09:2d:ac:3f:6b:b6:6d:4c:a6:24:14: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:59:0F:B2:EC:30:2A:22:55:E3:DF:2E:38:A4:14:5B:EE:32:8C X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:31:c8:8e:b4:06:a5:29:af:5e:b3:21:39:be:c2:40:34:65: bd:e7:c5:10:f0:b4:07:22:75:30:bb:4e:3e:f0:29:d2:3e:a0: 37:45:25:f0:69:94:53:fe:3c:3d:e2:2a:e2:b9:43:2a:8e:f2: ea:01:4c:c5:e9:57:71:86:9f:a3:24:46:ff:56:b2:d6:e3:35: 63:0d:5c:76:fc:98:0b:bd:fb:cd:08:ca:11:fd:21:ea:07:d8: f9:dd:35:63:ee:69:dc:10:3f:c9:ce:b8:e7:d6:1c:93:b1:72: 84:b6:93:55:cc:c2:6b:e9:e0:48:ed:a4:67:6d:10:2c:c5:db: 88:17:1f:66:e1:82:af:b7:ee:8f:48:af:0b:75:62:77:9b:c1: af:60:9a:31:3b:03:c6:28:bc:3c:d3:7a:a1:62:0e:53:8d:8a: a8:13:65:3c:31:6b:96:4d:b1:14:03:ec:f5:74:44:ef:a4:a3: f2:81:8d:48:e3:37:d8:9c:e9:a4:75:6e:87:d2:e4:b8:a3:d1: c6:45:ca:bc:c3:91:90:b3:4d:55:51:61:05:bb:be:d2:e6:11: 8d:3d:dd:60:92:ed:0e:fc:c1:c7:66:f1:61:c3:e0:84:0e:6b: ea:6f:ed:17:e4:db:ab:72:67:bc:20:40:9a:46:cd:33:a3:cb: a0:d4:44:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAwMkQxMTAvBgNVBAUTKDY1NEUwMjAxMjVDMUI3NTA3ODI2RjA1RkREQTkyNEI1 Mjg3NDA4RjkwHhcNMjYwODE5MDc1ODEwWhcNMjYwODI2MDc1ODEwWjAYMRYwFAYD VQQDEw02YTg1NjIxMy1lZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxiohSxHhiPHzkp6/Pp/gn658xBzbLMVCUDiBOchNmpmBPZLSpAgQ6YKLAC0 SSFJYCuVcGofHIwSfKIQG7VNM/kzW4GriheKv8UgRZt5B6W9ydDIS6Iyt1r6e0p4 Fj6vx62pQiGXlqFks1nBmlOlXznJTqIglpk9dC2fmakqcHd4q36j23bc7nQ0UaxO K2zyK9OupQFmCUVjLZCkx6ntrHZk/gPJy/pWe576KGC7jR+X/AzEAKSJQhsGxS6A QAmrClEkAgDnCqW1Flloiegx/JNS2uMAZHUbTN5Nq+Q2sHnVFw0qntO125dnT1BE vQb8Hm8LCS2sP2u2bUymJBS7hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOtWQ+y 7DAqIlXj3y44pBRb7jKMMB8GA1UdIwQYMBaAFGVOAgElwbdQeCbwX92pJLUodAj5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDAyRC8xNDlENUI1MkFE QTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQxQjRKdkJmM2Fra3RTaDBD UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDAyRC8xNDlENUI1MkFEQTYxMUYwOUM0RjZCNEZDNEY5QUUwMi9aVTRDQVNYQnQx QjRKdkJmM2Fra3RTaDBDUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTHIjrQGpSmvXrMhOb7CQDRlvefFEPC0ByJ1MLtOPvAp0j6gN0Ul8GmUU/48 PeIq4rlDKo7y6gFMxelXcYafoyRG/1ay1uM1Yw1cdvyYC737zQjKEf0h6gfY+d01 Y+5p3BA/yc6459Yck7FyhLaTVczCa+ngSO2kZ20QLMXbiBcfZuGCr7fuj0ivC3Vi d5vBr2CaMTsDxii8PNN6oWIOU42KqBNlPDFrlk2xFAPs9XRE76Sj8oGNSOM32Jzp pHVuh9LkuKPRxkXKvMORkLNNVVFhBbu+0uYRjT3dYJLtDvzBx2bxYcPghA5r6m/t F+Tbq3JnvCBAmkbNM6PLoNREhA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:45 2026 by rpki-client