$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: hbxNMzVxGtrPDnuwhJh09nzK3l4zRsiOsS0ceTTj5BQ= Subject key identifier: 1E:6B:EA:04:E1:1D:4E:5D:31:EA:A4:FC:4F:4E:F3:8F:9D:73:AE:D6 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 01FF Signing time: Thu 09 Jul 2026 05:02:13 +0000 Manifest this update: Thu 09 Jul 2026 05:02:13 +0000 Manifest next update: Thu 16 Jul 2026 05:02:13 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: fOz9kjBwR+w1YiCd0sNTvd/yMUivJIex4azky18+GIY=) 2: BD8B68BA42CC11F1BD2C946EC6833773.roa (hash: DBXb6/VeFR/zv0bPvOEf3LFvbD14Qt+KDwY55i+OIyk=) 3: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=) 4: DD822DE842CC11F18C82326FC6833773.roa (hash: k2rUg/X8WAE8IJpYMJbr70n/z6HpIadKYDYrSsSt/+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Jul 2026 05:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Jul 9 05:02:13 2026 GMT Not After : Jul 16 05:02:13 2026 GMT Subject: CN=6a4f2b55-4de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:31:ab:3a:9a:ab:12:98:71:26:d0:bc:a5: 81:de:a1:c6:a1:98:22:ce:fa:55:1d:b0:d0:3b:0d: 86:c0:94:fc:9a:09:83:fa:6d:e6:c0:ec:36:3f:b7: 34:a8:37:e2:b3:56:6a:4b:b8:1b:ff:0d:f5:cf:6e: c5:1d:bb:9b:10:a9:a1:f6:6b:56:fd:56:75:a7:4c: 86:4a:fb:57:58:19:4b:c4:24:c1:27:c9:47:6e:5d: 5a:2e:9c:08:6a:ae:5d:90:af:df:7d:36:23:35:43: c0:7c:0d:4f:d9:8c:5c:7f:99:d7:40:55:b3:5f:f3: 57:fc:0e:89:26:34:bb:bf:e6:fe:12:cd:71:fb:e6: 46:8e:35:e7:40:17:bb:bb:cd:6e:b3:3d:1b:ed:4d: 52:43:76:b0:98:3d:74:fa:d3:3c:62:86:67:15:6a: f6:13:78:9a:45:85:a3:7b:c0:7e:ab:94:78:f8:9b: 6b:1f:62:32:8a:8b:9b:0b:40:de:7b:b0:d8:b8:38: 37:3f:b7:a8:38:13:3b:17:ba:60:12:8b:d6:9a:b5: 38:d0:db:d1:c9:b7:2c:18:cd:74:ec:c2:bb:c9:fa: 9f:ed:b4:06:79:24:bb:e0:67:28:9d:0c:27:07:79: e8:a5:28:62:e3:62:2b:2f:cc:ad:fa:46:72:fd:9e: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:EA:04:E1:1D:4E:5D:31:EA:A4:FC:4F:4E:F3:8F:9D:73:AE:D6 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:6f:e6:ff:be:81:ab:fc:56:14:54:d9:dc:31:1a:18:57:0c: 01:f9:d8:25:43:a8:fc:02:e1:82:98:16:1c:a3:1f:72:e9:81: 35:da:76:65:17:b1:62:08:ff:cd:33:41:2a:7e:c4:55:d8:ba: 93:5a:bc:e7:e8:10:a9:0c:cc:ec:c9:bc:de:9b:93:f7:d0:08: 8c:f9:b4:4d:9f:a9:23:b0:a8:41:41:d0:33:f0:34:60:67:40: 51:cc:a3:04:3a:63:74:1f:f4:6a:66:8a:34:6d:d6:5d:41:36: 7e:96:6c:50:7d:40:ea:e0:fe:10:1e:f0:25:42:50:82:e2:9a: 4a:05:d6:d4:fd:49:0a:8b:36:11:43:04:27:47:27:ed:29:56: 16:d2:52:15:ac:f2:ce:47:18:ec:3a:a0:6a:4c:c9:2e:41:92: 7f:45:26:0f:8e:bb:ba:e8:98:4b:0a:a2:85:33:e2:4e:e1:33: 22:a7:69:2d:a4:b9:1c:a7:b6:19:43:e4:d6:e4:a6:f7:3f:d6: 2d:03:b8:bc:f2:bb:cc:ae:9d:2a:91:ca:d0:05:69:5a:9e:04: cb:52:b1:4a:0b:9f:77:4b:53:e5:7a:f8:7e:6d:d4:2e:27:1a: 62:53:51:b3:15:e0:56:0a:0c:38:62:c5:4c:43:0f:b5:a5:b4: a2:a6:b6:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjYwNzA5MDUwMjEzWhcNMjYwNzE2MDUwMjEzWjAYMRYwFAYD VQQDEw02YTRmMmI1NS00ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeYxqzqaqxKYcSbQvKWB3qHGoZgizvpVHbDQOw2GwJT8mgmD+m3mwOw2P7c0 qDfis1ZqS7gb/w31z27FHbubEKmh9mtW/VZ1p0yGSvtXWBlLxCTBJ8lHbl1aLpwI aq5dkK/ffTYjNUPAfA1P2Yxcf5nXQFWzX/NX/A6JJjS7v+b+Es1x++ZGjjXnQBe7 u81usz0b7U1SQ3awmD10+tM8YoZnFWr2E3iaRYWje8B+q5R4+JtrH2IyioubC0De e7DYuDg3P7eoOBM7F7pgEovWmrU40NvRybcsGM107MK7yfqf7bQGeSS74GconQwn B3nopShi42IrL8yt+kZy/Z7xMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5r6gTh HU5dMeqk/E9O84+dc67WMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1W/m/76Bq/xWFFTZ3DEaGFcMAfnYJUOo/ALhgpgWHKMfcumBNdp2ZRexYgj/ zTNBKn7EVdi6k1q85+gQqQzM7Mm83puT99AIjPm0TZ+pI7CoQUHQM/A0YGdAUcyj BDpjdB/0amaKNG3WXUE2fpZsUH1A6uD+EB7wJUJQguKaSgXW1P1JCos2EUMEJ0cn 7SlWFtJSFazyzkcY7DqgakzJLkGSf0UmD467uuiYSwqihTPiTuEzIqdpLaS5HKe2 GUPk1uSm9z/WLQO4vPK7zK6dKpHK0AVpWp4Ey1KxSgufd0tT5Xr4fm3ULicaYlNR sxXgVgoMOGLFTEMPtaW0oqa2GA== -----END CERTIFICATE-----Generated at Fri Jul 10 20:38:21 2026 by rpki-client