$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: 5nNHoBky3SzSPDxKqffmyRMmPh3yH+g0YACh+0S52mo= Subject key identifier: BC:48:40:86:02:6C:51:3D:CD:56:57:88:44:F8:5F:AE:13:BC:91:0A Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 66 Signing time: Tue 21 Jul 2026 09:52:56 +0000 Manifest this update: Tue 21 Jul 2026 09:52:56 +0000 Manifest next update: Tue 28 Jul 2026 09:52:56 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: +HC0t+JBSEU4YgjKA6fAFen17r7X41wooqSJgGU3AeU=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 09:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Jul 21 09:52:56 2026 GMT Not After : Jul 28 09:52:56 2026 GMT Subject: CN=6a5f4178-aafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:cd:16:d4:90:cf:20:d4:6c:66:9c:57:93: dc:ab:9d:c8:98:fb:84:64:91:03:da:12:52:0a:b8: eb:f5:7d:69:8b:f2:71:62:0f:35:c0:ca:f6:08:00: 1d:68:3d:13:c0:02:0f:0f:d5:4b:e1:7b:30:03:9d: 51:22:3b:14:fd:63:9f:27:32:8b:79:9a:9d:78:52: e9:5b:34:4a:e8:36:da:b1:ba:13:81:a0:5e:bd:50: 0f:a3:57:dd:90:b1:a6:27:47:ea:ea:54:68:b2:a4: dd:3c:0b:21:df:0c:96:5f:65:9f:fc:de:20:00:65: ab:ad:24:e7:0a:de:78:df:7b:e5:7c:34:f7:db:70: 8d:3c:2a:65:2b:b6:a0:f9:77:64:44:25:a9:6e:c2: c6:ad:0b:a4:a9:bc:52:42:d3:d7:1a:a4:8f:82:96: d3:48:94:15:83:f8:78:89:51:c6:ee:16:55:95:ed: 40:40:48:7a:00:d6:b1:2d:9d:5a:e3:79:3f:c9:3e: 8e:92:6c:ee:72:d5:cf:aa:9a:8a:d1:4b:fd:ed:7f: c9:a0:9d:97:e9:28:a1:31:67:ab:21:8f:27:91:a5: aa:9a:43:a1:e3:dd:b3:2b:67:0e:0d:3b:b7:2a:54: 3a:73:b7:88:23:7f:6b:bb:37:81:0c:94:fb:7e:6b: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:40:86:02:6C:51:3D:CD:56:57:88:44:F8:5F:AE:13:BC:91:0A X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:96:d5:c6:81:9e:53:5b:32:97:87:64:40:a0:3b:5d:f7: 0d:b3:69:97:c9:bf:0e:8c:10:9d:d3:04:ac:95:83:f8:b8:a1: 17:a2:46:b0:d4:46:05:85:26:f5:25:8b:63:cd:83:7e:c3:5f: 64:25:2a:3d:8b:18:f7:ac:32:4d:82:cf:78:27:13:27:a4:8c: 43:ea:69:3c:ec:59:fd:b0:0a:7b:3b:fc:dc:04:5f:9d:63:71: 6b:13:c4:ea:8b:2d:4b:ad:f5:6f:4b:78:96:c9:17:ce:48:27: 8f:b9:a7:8c:c5:23:fe:6b:5b:22:78:f5:75:71:46:5f:a5:66: 43:b1:4e:d0:1c:9c:8e:9a:c3:dc:2e:42:47:ce:93:20:45:a7: 44:fd:c9:0a:bd:e7:a1:08:28:fd:31:18:1c:36:40:7d:f7:12: c5:3e:50:ef:12:9e:10:92:7d:91:e6:12:7b:dd:10:f1:26:27: ec:f0:99:04:19:f0:bd:c3:a6:c7:ee:54:fd:93:98:f8:9a:fb: 9e:79:f1:5f:f1:e0:d5:a2:09:c5:b4:fb:52:83:b6:90:b6:f8: a6:7f:4d:78:06:60:e9:e9:82:f1:02:3f:57:51:ad:b8:1d:b3: 28:15:41:b4:e4:0f:aa:ae:13:0f:45:f1:ce:cf:13:65:61:be: 7b:ac:fe:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA3MjEwOTUyNTZaFw0yNjA3MjgwOTUyNTZaMBgxFjAUBgNV BAMTDTZhNWY0MTc4LWFhZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvks0W1JDPINRsZpxXk9yrnciY+4RkkQPaElIKuOv1fWmL8nFiDzXAyvYIAB1o PRPAAg8P1UvhezADnVEiOxT9Y58nMot5mp14UulbNEroNtqxuhOBoF69UA+jV92Q saYnR+rqVGiypN08CyHfDJZfZZ/83iAAZautJOcK3njfe+V8NPfbcI08KmUrtqD5 d2REJaluwsatC6SpvFJC09capI+CltNIlBWD+HiJUcbuFlWV7UBASHoA1rEtnVrj eT/JPo6SbO5y1c+qmorRS/3tf8mgnZfpKKExZ6shjyeRpaqaQ6Hj3bMrZw4NO7cq VDpzt4gjf2u7N4EMlPt+a0gjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvEhAhgJs UT3NVleIRPhfrhO8kQowHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHhpbVxoGeU1syl4dkQKA7XfcNs2mXyb8OjBCd0wSslYP4uKEXokaw1EYFhSb1 JYtjzYN+w19kJSo9ixj3rDJNgs94JxMnpIxD6mk87Fn9sAp7O/zcBF+dY3FrE8Tq iy1LrfVvS3iWyRfOSCePuaeMxSP+a1siePV1cUZfpWZDsU7QHJyOmsPcLkJHzpMg RadE/ckKveehCCj9MRgcNkB99xLFPlDvEp4Qkn2R5hJ73RDxJifs8JkEGfC9w6bH 7lT9k5j4mvueefFf8eDVognFtPtSg7aQtvimf014BmDp6YLxAj9XUa24HbMoFUG0 5A+qrhMPRfHOzxNlYb57rP6P -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:36 2026 by rpki-client