$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: znIfnUP5d30VKqCOr7C/LgsaGKhnEO6k8ftgdyuazHc= Subject key identifier: 95:B5:5C:95:AC:E0:59:CE:F0:DB:D1:E7:C1:B0:A4:EC:B8:3E:08:2D Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 7D Signing time: Thu 03 Sep 2026 08:00:49 +0000 Manifest this update: Thu 03 Sep 2026 08:00:49 +0000 Manifest next update: Thu 10 Sep 2026 08:00:49 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: 7BNg/B3OG5a7btjNY715uBqg+/9QzX6IhRdmIvNMsE8=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Sep 3 08:00:49 2026 GMT Not After : Sep 10 08:00:49 2026 GMT Subject: CN=6a992931-7dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:4e:55:9f:63:47:e7:fc:1a:55:13:a2:df: c4:75:63:3e:24:c0:dc:92:e9:f1:ad:2e:4a:04:a0: c1:76:fc:f3:f1:fb:bf:1f:06:37:72:4a:49:39:07: f9:be:80:c8:44:d2:3f:3b:4a:17:40:89:16:81:f2: ba:9b:8d:e1:d6:d4:f7:6f:8c:d9:8a:bb:4b:45:4a: 5d:db:85:d6:2f:72:dd:2b:69:01:f2:31:1a:7f:3a: ca:9e:16:a1:7e:76:83:7f:5c:ef:a1:43:2d:a9:dd: 45:dd:b7:5d:cc:3a:a1:c6:bb:82:ec:82:35:90:a2: b0:c1:2f:cd:f5:1d:46:5d:de:aa:9d:27:da:37:3b: 10:91:7b:f5:82:82:a3:c5:07:5a:eb:f1:93:a2:3e: a1:cf:82:0a:72:a2:f2:16:f2:fb:d7:42:48:66:80: d5:b7:53:49:ba:4f:c7:40:09:39:10:df:9a:da:9f: ec:51:e2:be:08:0c:33:f9:1b:7f:fc:38:77:4f:db: 81:c6:b6:f2:82:16:82:0b:78:56:a2:e5:c8:0d:a8: 85:b6:a9:0f:2d:33:ff:48:5b:53:93:f0:ed:e3:81: 69:48:94:58:6e:33:4c:49:e0:dd:9a:c9:5c:ae:3b: e0:29:79:b4:e0:7f:1f:6b:91:22:14:61:49:dd:66: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B5:5C:95:AC:E0:59:CE:F0:DB:D1:E7:C1:B0:A4:EC:B8:3E:08:2D X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:9c:16:44:3e:1e:7b:09:ed:a2:b6:1a:0c:af:01:4b:0a: ef:96:a8:68:a5:f8:1f:29:9a:f1:fc:ce:fa:82:d3:43:9d:41: 23:36:2b:3b:04:a1:35:97:c2:9f:8e:f1:2f:9d:e5:f0:8c:d7: e9:18:b8:6a:a0:9f:14:f8:94:40:49:c4:7d:e0:86:92:8c:61: 5e:7c:eb:f6:87:06:ff:32:fb:36:6c:3c:3d:82:66:3b:0a:2e: 24:d8:76:35:4e:ea:aa:53:14:66:56:a4:5f:f8:8e:96:03:fa: bc:5c:32:b4:6e:f3:c3:7b:5e:cd:87:14:79:e4:6d:cc:32:1b: ef:b1:4e:b0:db:0e:ed:a0:b5:75:a2:33:70:c2:14:bf:cc:ff: 2f:1d:a1:25:c2:7d:3c:3d:5a:4d:58:fb:09:16:a5:df:b2:8c: af:09:e4:cd:25:68:a9:c0:c9:7a:78:c1:ff:62:3c:eb:92:95: 58:59:8d:31:c5:20:59:5a:08:8d:81:69:54:68:9e:14:c2:1a: 44:1b:ff:06:e9:f2:90:b8:20:85:39:83:b1:f4:b7:e1:ea:5a: 40:f4:b3:ae:42:a1:2f:ae:cd:2e:e0:af:e5:ea:1c:d5:1e:55: 85:5b:e4:66:c3:0f:51:79:cb:16:77:0f:67:9a:a8:6a:d5:10: 5c:0f:e2:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA5MDMwODAwNDlaFw0yNjA5MTAwODAwNDlaMBgxFjAUBgNV BAMTDTZhOTkyOTMxLTdkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvHU5Vn2NH5/waVROi38R1Yz4kwNyS6fGtLkoEoMF2/PPx+78fBjdySkk5B/m+ gMhE0j87ShdAiRaB8rqbjeHW1PdvjNmKu0tFSl3bhdYvct0raQHyMRp/OsqeFqF+ doN/XO+hQy2p3UXdt13MOqHGu4LsgjWQorDBL831HUZd3qqdJ9o3OxCRe/WCgqPF B1rr8ZOiPqHPggpyovIW8vvXQkhmgNW3U0m6T8dACTkQ35ran+xR4r4IDDP5G3/8 OHdP24HGtvKCFoILeFai5cgNqIW2qQ8tM/9IW1OT8O3jgWlIlFhuM0xJ4N2ayVyu O+ApebTgfx9rkSIUYUndZq03AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlbVclazg Wc7w29HnwbCk7Lg+CC0wHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAt4pwWRD4eewntorYaDK8BSwrvlqhopfgfKZrx/M76gtNDnUEjNis7BKE1l8Kf jvEvneXwjNfpGLhqoJ8U+JRAScR94IaSjGFefOv2hwb/Mvs2bDw9gmY7Ci4k2HY1 TuqqUxRmVqRf+I6WA/q8XDK0bvPDe17NhxR55G3MMhvvsU6w2w7toLV1ojNwwhS/ zP8vHaElwn08PVpNWPsJFqXfsoyvCeTNJWipwMl6eMH/YjzrkpVYWY0xxSBZWgiN gWlUaJ4UwhpEG/8G6fKQuCCFOYOx9Lfh6lpA9LOuQqEvrs0u4K/l6hzVHlWFW+Rm ww9RecsWdw9nmqhq1RBcD+Kp -----END CERTIFICATE-----Generated at Fri Sep 4 23:24:10 2026 by rpki-client