$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: 22E7UX+pX217d3MA2ThK7uoMXRSDs39dhS6Bz+c/wjQ= Subject key identifier: D6:B3:74:92:01:83:7F:EB:12:4D:B3:8D:13:98:61:65:B4:B4:D4:D2 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: A3 Signing time: Mon 03 Aug 2026 08:45:28 +0000 Manifest this update: Mon 03 Aug 2026 08:45:28 +0000 Manifest next update: Mon 10 Aug 2026 08:45:28 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: v+P1i0gH/lf44zdupfrTmwUpZzX5v3+Tfex02B96E6s=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Aug 3 08:45:28 2026 GMT Not After : Aug 10 08:45:28 2026 GMT Subject: CN=6a705528-d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:32:64:3f:04:9e:a4:96:a5:c7:09:c8:a1: 36:00:09:9f:16:a4:e9:c0:b5:7d:5b:e3:09:6a:aa: 62:20:8e:ee:c7:32:fc:61:6c:57:a9:bb:84:83:1a: 9d:b6:26:d0:7f:86:c0:66:03:51:44:8b:08:a5:74: 52:53:22:62:79:30:04:19:4a:ce:ee:01:4f:49:6c: 5d:69:82:f0:d8:48:c5:10:7d:04:5b:a1:1e:25:5d: 1c:37:11:28:6d:40:2a:e4:78:ad:e9:88:56:a5:67: 3b:9b:c7:9b:d6:5a:58:cb:76:6b:55:3d:57:bd:f5: 72:00:41:c4:d1:5e:f4:a0:64:35:83:2c:dd:07:36: 93:cc:9b:93:7e:ed:9d:c2:ab:e0:3e:d2:10:d4:4f: fe:70:99:92:4a:62:00:22:f6:8e:47:56:48:8b:59: c1:04:3a:52:12:f7:2c:bf:27:5e:eb:60:e6:49:9d: fb:80:d8:46:df:ba:62:87:c2:c4:10:03:6b:fb:73: e9:45:bb:6a:4a:c5:e7:14:61:5a:75:79:1b:b7:3e: 30:44:27:aa:96:ae:86:cd:ec:cb:d8:7b:1a:5e:28: 80:9c:46:86:67:f7:b2:70:69:dd:19:01:70:be:fe: c7:db:52:99:b3:48:ce:4e:bb:7b:1c:cd:f0:25:5a: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:74:92:01:83:7F:EB:12:4D:B3:8D:13:98:61:65:B4:B4:D4:D2 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ce:24:b7:eb:34:41:48:da:76:a2:28:27:9e:97:e8:9e:9f: ec:bc:45:c7:a7:91:b6:9a:61:6c:18:5d:10:37:ff:f1:b7:ae: c5:29:cd:4f:01:f5:eb:88:69:fb:6c:79:bf:a6:aa:55:c9:41: aa:30:86:86:6b:38:18:06:76:30:75:3e:16:b4:5e:09:a6:40: e9:82:41:a7:39:d8:65:a6:b8:04:32:3d:61:49:a1:8b:bf:e1: b4:7f:58:56:b2:ed:38:fb:bb:0e:ed:50:9f:d5:a3:03:2f:7f: 31:58:9f:58:6b:1d:cb:d9:b8:e1:dd:77:2e:5a:89:f8:03:7f: 2f:1c:64:4a:15:98:45:46:2e:91:d9:8b:49:37:69:77:c5:47: 98:44:06:3d:4f:58:32:94:c7:34:c0:31:c7:0b:de:1d:3d:0c: 54:e6:24:c5:eb:04:1a:bd:06:4f:f5:2b:cc:44:cc:e9:ce:0a: 50:f3:87:3e:22:f9:9b:5b:35:85:22:e3:52:4f:60:ba:ad:e9: c9:18:be:f8:38:ec:c0:9f:22:b0:2f:d4:08:32:93:bb:ee:fe: 30:d1:e8:ca:de:38:f0:ee:15:a0:5f:6f:af:51:0d:f9:70:9c: 2c:61:69:c2:56:1a:fd:25:40:16:3c:15:e1:2c:36:87:9a:b0: 00:69:73:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTQxMTAvBgNVBAUTKEFGMzA4OTVEQ0UzQzY1QzIzQkVDNTRDQjA4OTg1OEVC QTE2MTg5Q0UwHhcNMjYwODAzMDg0NTI4WhcNMjYwODEwMDg0NTI4WjAYMRYwFAYD VQQDEw02YTcwNTUyOC1kMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/syZD8EnqSWpccJyKE2AAmfFqTpwLV9W+MJaqpiII7uxzL8YWxXqbuEgxqd tibQf4bAZgNRRIsIpXRSUyJieTAEGUrO7gFPSWxdaYLw2EjFEH0EW6EeJV0cNxEo bUAq5Hit6YhWpWc7m8eb1lpYy3ZrVT1XvfVyAEHE0V70oGQ1gyzdBzaTzJuTfu2d wqvgPtIQ1E/+cJmSSmIAIvaOR1ZIi1nBBDpSEvcsvyde62DmSZ37gNhG37pih8LE EANr+3PpRbtqSsXnFGFadXkbtz4wRCeqlq6GzezL2HsaXiiAnEaGZ/eycGndGQFw vv7H21KZs0jOTrt7HM3wJVqwWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNazdJIB g3/rEk2zjROYYWW0tNTSMB8GA1UdIwQYMBaAFK8wiV3OPGXCO+xUywiYWOuhYYnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9DN0FGQTZBMjlE QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpjSTc3RlRMQ0poWTY2Rmhp YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGljNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5NC9DN0FGQTZBMjlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpj STc3RlRMQ0poWTY2RmhpYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ84kt+s0QUjadqIoJ56X6J6f7LxFx6eRtpphbBhdEDf/8beuxSnNTwH164hp +2x5v6aqVclBqjCGhms4GAZ2MHU+FrReCaZA6YJBpznYZaa4BDI9YUmhi7/htH9Y VrLtOPu7Du1Qn9WjAy9/MVifWGsdy9m44d13LlqJ+AN/LxxkShWYRUYukdmLSTdp d8VHmEQGPU9YMpTHNMAxxwveHT0MVOYkxesEGr0GT/UrzETM6c4KUPOHPiL5m1s1 hSLjUk9guq3pyRi++DjswJ8isC/UCDKTu+7+MNHoyt448O4VoF9vr1EN+XCcLGFp wlYa/SVAFjwV4Sw2h5qwAGlzlQ== -----END CERTIFICATE-----Generated at Wed Aug 5 03:11:43 2026 by rpki-client