$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft File: PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json) Hash identifier: V9ahZRdYO92i/ADnmiKtZKxUHAWqT37FR4SAY+hJD8Q= Subject key identifier: 8E:22:D9:85:41:CE:C6:6E:AE:1F:88:61:84:08:17:5F:EE:B7:B4:BE Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft Manifest number: F7 Signing time: Wed 19 Aug 2026 06:56:27 +0000 Manifest this update: Wed 19 Aug 2026 06:56:26 +0000 Manifest next update: Wed 26 Aug 2026 06:56:26 +0000 Files and hashes: 1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: jkWYmsE3eD6cNKiznNky7G4al8UChBvTMDDMu+IUMw4=) 2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: qCfmy29Bi59237fHQ/OkmrpMOZZuyu3nE9b50f2Lz9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Validity Not Before: Aug 19 06:56:26 2026 GMT Not After : Aug 26 06:56:26 2026 GMT Subject: CN=6a85539b-754e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:86:33:97:7a:54:c3:a0:00:f7:90:23:df: a1:da:da:0a:c3:2e:4a:5c:39:81:12:21:cb:3d:00: 08:69:cd:6f:6d:86:50:fa:64:6f:a4:d3:55:6f:ea: 71:dc:c5:0f:bc:03:8a:ab:02:cb:28:a8:66:91:d1: a0:23:bd:5c:39:b7:38:a1:26:24:09:47:62:a6:e6: 4d:2e:c1:20:de:44:03:48:7f:ce:e3:ff:de:76:38: fc:e5:d2:73:0f:d0:43:85:89:31:b9:96:29:7b:0e: 82:82:b9:1c:db:a1:1a:5e:b8:d9:c8:f2:22:bc:c1: 9c:08:86:7d:c8:b6:67:b7:12:54:21:d5:76:06:9c: d7:67:14:78:9c:49:ec:82:94:36:a7:4b:3d:93:55: 43:ae:1c:94:a8:46:01:1c:75:62:7a:48:6b:f7:60: 32:93:23:a7:b8:1d:4d:86:5d:34:e8:24:06:60:8f: 99:aa:db:d8:4b:51:16:99:10:71:f4:bb:98:a5:63: d8:ec:63:6c:e5:11:4d:e1:8d:38:34:56:ca:ab:83: a0:22:6d:0a:fd:89:2a:db:d5:08:a7:e1:cb:3c:01: c4:a4:54:0c:e7:ac:f9:69:2c:c7:bf:bb:5e:95:61: 9b:98:e5:26:c5:b8:03:34:29:49:be:8f:02:84:b8: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:22:D9:85:41:CE:C6:6E:AE:1F:88:61:84:08:17:5F:EE:B7:B4:BE X509v3 Authority Key Identifier: keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:19:50:f5:58:c5:f2:93:c7:c1:20:56:80:1e:f4:e2:6f:ab: 48:bf:e0:e8:af:2c:58:fc:b4:3b:a5:4f:b0:f7:de:02:35:cf: 12:c5:59:a1:21:4f:47:a7:be:5e:4a:d7:73:95:18:bf:72:88: 13:f7:ab:b9:36:42:c0:96:0d:25:00:b6:b2:25:32:c9:5e:63: 3e:3c:81:e3:f7:ba:fd:f9:fb:fb:65:3a:80:db:ea:4b:19:f6: a1:1e:db:c3:cb:84:64:f7:6e:56:d5:20:df:56:59:2c:eb:91: 70:ee:5f:e6:89:3d:fb:aa:79:85:68:d3:93:d8:65:86:7e:62: 90:8c:8e:37:0c:57:4e:65:bc:b3:38:38:c1:09:b5:f9:cb:08: d9:f1:dc:9b:b7:04:7d:33:2c:45:0e:75:6e:ca:7f:a5:cf:79: 42:6e:c7:36:5c:9e:d3:f1:9e:b0:c2:ef:ea:70:97:04:e3:2d: 12:4e:bf:c3:7a:36:17:04:1f:32:5f:1e:48:12:49:79:34:2d: 06:28:cf:93:27:10:35:d9:84:2a:eb:e3:b9:37:a6:95:bc:70: f0:93:1e:19:10:0c:ff:41:35:52:d3:30:13:24:0b:b1:b5:5d: ce:df:9e:98:f2:93:59:ef:6a:07:91:3f:e5:71:0b:69:1a:77: f0:a0:e8:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjIxMTAvBgNVBAUTKDNGMzFGQjVEOEVGNDdEQUQzOEREOTJFQTFBODlFODg4 NzE0MDNBMzEwHhcNMjYwODE5MDY1NjI2WhcNMjYwODI2MDY1NjI2WjAYMRYwFAYD VQQDEw02YTg1NTM5Yi03NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzqGM5d6VMOgAPeQI9+h2toKwy5KXDmBEiHLPQAIac1vbYZQ+mRvpNNVb+px 3MUPvAOKqwLLKKhmkdGgI71cObc4oSYkCUdipuZNLsEg3kQDSH/O4//edjj85dJz D9BDhYkxuZYpew6Cgrkc26EaXrjZyPIivMGcCIZ9yLZntxJUIdV2BpzXZxR4nEns gpQ2p0s9k1VDrhyUqEYBHHViekhr92AykyOnuB1Nhl006CQGYI+ZqtvYS1EWmRBx 9LuYpWPY7GNs5RFN4Y04NFbKq4OgIm0K/Ykq29UIp+HLPAHEpFQM56z5aSzHv7te lWGbmOUmxbgDNClJvo8ChLjJswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4i2YVB zsZurh+IYYQIF1/ut7S+MB8GA1UdIwQYMBaAFD8x+12O9H2tON2S6hqJ6IhxQDox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCMi9DNEYxNTQ3MjIw MTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZhMDQzWkxxR29ub2lIRkFP akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9qRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCMi9DNEYxNTQ3MjIwMTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZh MDQzWkxxR29ub2lIRkFPakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABxlQ9VjF8pPHwSBWgB704m+rSL/g6K8sWPy0O6VPsPfeAjXPEsVZoSFPR6e+ XkrXc5UYv3KIE/eruTZCwJYNJQC2siUyyV5jPjyB4/e6/fn7+2U6gNvqSxn2oR7b w8uEZPduVtUg31ZZLOuRcO5f5ok9+6p5hWjTk9hlhn5ikIyONwxXTmW8szg4wQm1 +csI2fHcm7cEfTMsRQ51bsp/pc95Qm7HNlye0/GesMLv6nCXBOMtEk6/w3o2FwQf Ml8eSBJJeTQtBijPkycQNdmEKuvjuTemlbxw8JMeGRAM/0E1UtMwEyQLsbVdzt+e mPKTWe9qB5E/5XELaRp38KDonA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:40:26 2026 by rpki-client