$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: IK1UIH+/VX0qQlD/0WLxwBNOuN3hhoD9hcMO8BC7uBY= Subject key identifier: E0:4B:9C:97:7E:F5:12:0C:DC:6A:10:00:2A:E8:FF:8E:98:6A:DF:77 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1AF7 Signing time: Mon 20 Jul 2026 16:24:34 +0000 Manifest this update: Mon 20 Jul 2026 16:24:33 +0000 Manifest next update: Mon 27 Jul 2026 16:24:33 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: UpBeIXb/s80pjGRFiIA0usKMf5XezUZeQ36Q6BgZGVQ=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6937 (0x1b19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Jul 20 16:24:33 2026 GMT Not After : Jul 27 16:24:33 2026 GMT Subject: CN=6a5e4bc2-6857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:3f:12:82:38:2e:0f:62:14:9f:fa:84:6b: 07:07:17:21:67:b6:61:66:1e:6c:38:88:b2:49:3c: 1b:1d:e6:79:b5:ec:d4:87:c1:9e:15:52:57:e1:5c: 88:7b:82:31:42:52:06:2a:1f:e0:48:46:c9:8c:cf: e7:a6:74:8f:12:a5:60:47:2a:81:00:02:f0:79:27: 86:ad:fd:d5:e0:ec:55:1a:a7:04:23:ba:17:39:be: ac:8a:60:15:07:1a:6a:62:bd:60:06:f7:be:4e:0b: 3b:48:f5:20:b3:e7:12:3e:53:14:46:aa:14:de:1b: 79:cc:c4:cd:ec:57:9d:44:6d:31:ae:03:8f:4f:f5: ac:2d:f5:bf:32:0d:d9:c0:8a:ef:8a:7c:e6:d5:85: f0:f1:63:21:5b:6b:7e:0f:fb:81:08:c6:ec:9c:9a: f7:e5:cd:73:53:03:be:cb:31:74:a4:d6:4e:62:6d: 56:d0:10:f6:65:54:cb:70:92:17:05:40:3e:07:91: 3c:c5:35:61:9f:80:af:d0:79:01:3e:f7:80:4b:64: f6:7d:f5:68:b7:f8:88:94:51:33:aa:94:b4:1b:89: e9:e0:19:c9:ec:f3:8e:00:7a:d8:5f:64:23:bd:03: 2c:22:0d:1f:6f:57:a0:6d:28:ae:6d:1f:be:d9:c5: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4B:9C:97:7E:F5:12:0C:DC:6A:10:00:2A:E8:FF:8E:98:6A:DF:77 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:1c:1d:9e:e7:06:e4:59:ea:ce:aa:90:3d:ed:8a:88:3d:34: cc:07:bf:f7:4a:0b:3d:39:f0:d1:16:b7:16:0e:f9:2d:2c:b9: 44:c8:96:54:27:55:6a:b4:e5:4a:81:bf:05:68:35:c5:53:c6: b4:8a:80:f6:36:d8:ef:f1:be:8e:df:f0:98:9d:a2:5e:5d:da: c8:3a:91:e8:bc:b1:cb:36:0c:51:81:25:5a:90:ed:62:97:1e: 6d:e7:55:fb:64:2d:fb:7d:37:62:7a:b1:8d:ba:89:9e:28:67: 00:96:15:8c:72:6c:24:f0:d6:e7:28:60:c4:9f:74:16:bc:d7: b9:f8:f1:33:57:bc:9b:63:c4:d8:3d:07:5b:58:a1:c8:6b:00: 88:52:70:b2:64:92:a8:5f:86:b2:14:b0:d7:32:aa:94:16:d4: 74:56:67:bd:13:f4:03:ce:60:b1:9c:49:d7:ad:0b:7b:62:38: 51:83:f4:14:44:ab:66:76:d1:02:fd:f7:42:d1:a1:c2:fc:76: 3b:2f:87:69:ad:7b:7e:78:d7:e9:ce:30:14:e5:5b:77:f1:ce: ec:56:ec:d9:a9:b7:57:f0:49:44:14:28:de:a1:e5:06:1f:13: 81:89:07:91:bd:c7:5c:e8:b5:b6:ed:be:ac:91:b0:5b:12:04: e4:04:4b:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwNzIwMTYyNDMzWhcNMjYwNzI3MTYyNDMzWjAYMRYwFAYD VQQDEw02YTVlNGJjMi02ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK4/EoI4Lg9iFJ/6hGsHBxchZ7ZhZh5sOIiySTwbHeZ5tezUh8GeFVJX4VyI e4IxQlIGKh/gSEbJjM/npnSPEqVgRyqBAALweSeGrf3V4OxVGqcEI7oXOb6simAV BxpqYr1gBve+Tgs7SPUgs+cSPlMURqoU3ht5zMTN7FedRG0xrgOPT/WsLfW/Mg3Z wIrvinzm1YXw8WMhW2t+D/uBCMbsnJr35c1zUwO+yzF0pNZOYm1W0BD2ZVTLcJIX BUA+B5E8xTVhn4Cv0HkBPveAS2T2ffVot/iIlFEzqpS0G4np4BnJ7POOAHrYX2Qj vQMsIg0fb1egbSiubR++2cWm3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBLnJd+ 9RIM3GoQACro/46Yat93MB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzBwdnucG5FnqzqqQPe2KiD00zAe/90oLPTnw0Ra3Fg75LSy5RMiWVCdVarTl SoG/BWg1xVPGtIqA9jbY7/G+jt/wmJ2iXl3ayDqR6LyxyzYMUYElWpDtYpcebedV +2Qt+303YnqxjbqJnihnAJYVjHJsJPDW5yhgxJ90FrzXufjxM1e8m2PE2D0HW1ih yGsAiFJwsmSSqF+GshSw1zKqlBbUdFZnvRP0A85gsZxJ160Le2I4UYP0FESrZnbR Av33QtGhwvx2Oy+Haa17fnjX6c4wFOVbd/HO7Fbs2am3V/BJRBQo3qHlBh8TgYkH kb3HXOi1tu2+rJGwWxIE5ARLww== -----END CERTIFICATE-----Generated at Tue Jul 21 17:05:31 2026 by rpki-client