$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json) Hash identifier: Lzd6gazGb/RybJKVf0QyvhEiK7JueoT3EiZj9gNzZRw= Subject key identifier: C7:7B:A6:59:F6:D7:24:9B:AD:A8:8E:DD:83:D6:35:3D:5C:2D:29:D7 Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft Manifest number: 09 Signing time: Tue 21 Jul 2026 11:04:44 +0000 Manifest this update: Tue 21 Jul 2026 11:04:44 +0000 Manifest next update: Tue 28 Jul 2026 11:04:44 +0000 Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: /zwfif47/zP3U+/bPgHY2gF0JP8H1Tgjrv2cVvf9Guc=) 2: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=) 3: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 11:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1 Validity Not Before: Jul 21 11:04:44 2026 GMT Not After : Jul 28 11:04:44 2026 GMT Subject: CN=6a5f524c-f713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:ae:46:a6:5c:a5:37:a9:d0:05:7b:70:b0: 93:a7:08:c3:af:b5:58:5b:7a:41:c3:73:cb:19:44: 18:a3:2f:04:28:3a:c1:0d:82:5a:d1:6f:4c:43:25: f4:1c:ab:ec:2d:23:75:a4:a3:89:f0:66:cf:d4:93: dc:a8:df:da:1c:18:9c:c4:68:70:29:42:a4:ee:b5: fc:87:8e:02:79:4b:e8:21:8f:01:26:bd:fa:cb:9c: 0d:44:cd:eb:b9:7c:7d:4d:6f:d8:87:62:77:ec:8b: b9:43:10:e5:e2:39:7f:42:73:11:96:fa:ca:e6:ea: 53:bd:03:61:69:a6:d4:8f:99:aa:16:83:fd:e6:d4: c7:c8:d7:19:a8:1a:c5:2a:7f:9b:a1:17:4f:fa:f8: 3b:b2:24:36:87:3a:9b:81:6d:9f:72:19:66:02:1a: e6:f7:6c:f5:be:ca:c1:65:95:49:06:4e:a1:ac:29: 7f:43:79:c2:01:b0:38:5b:bc:4f:56:d0:59:88:fa: e1:04:98:ef:c2:33:a3:64:49:80:92:c0:96:46:19: 94:2b:92:a5:2a:c2:2e:80:8f:bc:a9:71:59:54:cd: 7a:d0:91:89:9c:50:93:93:d2:68:8c:1d:fc:ec:e7: bd:d9:94:6d:b7:3a:d4:76:da:a2:fb:b4:2d:31:ae: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:A6:59:F6:D7:24:9B:AD:A8:8E:DD:83:D6:35:3D:5C:2D:29:D7 X509v3 Authority Key Identifier: keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:be:6a:67:ff:1d:a0:5b:79:c2:c6:09:46:e2:92:d1:33:22: 19:93:d6:1f:71:1a:2a:46:03:81:73:f8:b2:e1:3e:32:2b:e8: 68:e9:dc:ad:1d:ff:6d:0c:83:40:f2:0f:4c:e3:b0:54:a6:35: a0:a5:29:a7:b0:66:9f:a4:a2:fa:a1:f8:9b:59:8f:04:b7:4e: 08:fe:1c:c1:b3:a1:2d:2b:3d:81:51:b5:09:2c:11:a6:73:bd: dc:6a:de:70:aa:ad:13:a4:b2:66:1b:3f:22:4b:dc:9e:54:08: 43:2d:7e:ca:b8:30:98:53:60:5d:8f:c8:24:02:8b:a0:b1:db: 43:c9:b8:ba:83:cb:88:cc:6a:ca:86:ad:d6:9c:e1:ce:68:46: 18:f5:73:20:ef:09:5e:2d:e3:32:5b:d1:ca:8b:28:89:94:30: 21:fc:e4:48:64:6a:fd:e2:79:11:c6:e7:f9:bb:4d:ed:7b:60: 81:1f:e7:47:e1:f0:95:ee:c7:ac:e6:99:7e:18:6a:c2:55:e4: 43:83:7a:3d:5c:6b:7c:76:f3:6e:ac:4f:41:cf:c3:6c:22:d5: 20:41:e6:34:89:9d:54:a4:f3:8a:ec:78:07:53:db:23:d9:46: 1b:eb:93:55:aa:92:47:06:89:d4:1b:8c:c5:43:ee:2b:ce:85: 96:65:02:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjU2NDExMC8GA1UEBRMoNkQ5NDgwQ0YzMjg0RDAwMkI1OTFGNUUyMURCMTEyMDk3 RkNFNzBCMTAeFw0yNjA3MjExMTA0NDRaFw0yNjA3MjgxMTA0NDRaMBgxFjAUBgNV BAMTDTZhNWY1MjRjLWY3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOFq5GplylN6nQBXtwsJOnCMOvtVhbekHDc8sZRBijLwQoOsENglrRb0xDJfQc q+wtI3Wko4nwZs/Uk9yo39ocGJzEaHApQqTutfyHjgJ5S+ghjwEmvfrLnA1Ezeu5 fH1Nb9iHYnfsi7lDEOXiOX9CcxGW+srm6lO9A2FpptSPmaoWg/3m1MfI1xmoGsUq f5uhF0/6+DuyJDaHOpuBbZ9yGWYCGub3bPW+ysFllUkGTqGsKX9DecIBsDhbvE9W 0FmI+uEEmO/CM6NkSYCSwJZGGZQrkqUqwi6Aj7ypcVlUzXrQkYmcUJOT0miMHfzs 573ZlG23OtR22qL7tC0xrmN/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx3umWfbX JJutqI7dg9Y1PVwtKdcwHwYDVR0jBBgwFoAUbZSAzzKE0AK1kfXiHbESCX/OcLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCNTY0L0E4NzVEMDBBN0E0 OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFLMWtmWGlIYkVTQ1hfT2NM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpTQXp6S0UwQUsxa2ZYaUhiRVNDWF9PY0xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC NTY0L0E4NzVEMDBBN0E0OTExRjE5N0ZCMzI2ODg1QTMwRkJDL2JaU0F6ektFMEFL MWtmWGlIYkVTQ1hfT2NMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPvmpn/x2gW3nCxglG4pLRMyIZk9YfcRoqRgOBc/iy4T4yK+ho6dytHf9tDINA 8g9M47BUpjWgpSmnsGafpKL6ofibWY8Et04I/hzBs6EtKz2BUbUJLBGmc73cat5w qq0TpLJmGz8iS9yeVAhDLX7KuDCYU2Bdj8gkAougsdtDybi6g8uIzGrKhq3WnOHO aEYY9XMg7wleLeMyW9HKiyiJlDAh/ORIZGr94nkRxuf5u03te2CBH+dH4fCV7ses 5pl+GGrCVeRDg3o9XGt8dvNurE9Bz8NsItUgQeY0iZ1UpPOK7HgHU9sj2UYb65NV qpJHBonUG4zFQ+4rzoWWZQKd -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:48 2026 by rpki-client