$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: Dsm4QXlp/jtfjwIU7yb4NN6Y+sWyM/upv2J7p3NWNO4= Subject key identifier: 4B:E4:ED:11:D5:5F:36:FE:45:DC:78:0F:98:48:35:1C:8A:11:04:A9 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 029D Signing time: Wed 19 Aug 2026 02:13:16 +0000 Manifest this update: Wed 19 Aug 2026 02:13:16 +0000 Manifest next update: Wed 26 Aug 2026 02:13:16 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: NGNxEU/jFGK02ZnT+YMyKdxZjlMQWYNHXEtn4t6KvC4=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5EI848Hb5POfrTR1rNhLmTqUMaQmulOL4kQXud+AYYU=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: aOKk9LCH0CUcXcS8w/DwIj3FtJbtCVyhM8kYs+mLuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 02:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Aug 19 02:13:16 2026 GMT Not After : Aug 26 02:13:16 2026 GMT Subject: CN=6a85113c-4fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:2d:28:e7:88:d8:5c:b0:27:56:d5:1d:81: 4e:84:22:5e:8e:47:69:67:a9:fa:35:0c:75:16:ff: 93:bd:e8:6e:9f:51:ef:46:27:20:79:24:5a:f3:b7: b3:9a:40:0c:7d:a8:21:2d:89:43:7d:ef:a6:73:97: 1b:00:13:5d:c6:30:ee:62:c2:24:71:65:71:45:aa: 7a:f7:8b:a5:cd:fa:14:6f:80:15:aa:b8:28:77:f3: e0:ee:2b:08:47:64:42:b6:a0:ed:45:6f:d8:81:30: 05:8e:e3:a1:f2:f3:09:b0:24:48:6d:56:e9:ae:90: 2e:59:eb:86:1b:37:49:47:77:6a:39:ee:37:e9:b3: 06:c7:ae:13:6d:61:17:71:73:29:cf:6d:7c:0f:79: 98:c3:f5:23:ae:aa:e7:93:17:71:94:bc:e2:79:a7: 5d:03:56:60:1a:ce:29:91:ac:5c:af:b6:3c:4f:f6: ba:58:5b:b0:d9:3d:98:7c:29:28:f0:2c:b4:4f:0e: 04:b3:2e:73:08:5a:8d:77:17:56:5a:23:ee:95:aa: da:31:31:f6:29:eb:05:b9:03:77:4f:b0:75:33:c6: b9:27:1f:c6:6f:1a:ab:06:e1:16:b6:31:d4:f8:67: 84:81:75:73:d8:9a:c3:c2:9f:99:8f:d9:ca:67:ed: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E4:ED:11:D5:5F:36:FE:45:DC:78:0F:98:48:35:1C:8A:11:04:A9 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:b0:6f:35:35:40:65:a4:65:c8:6c:f5:c6:27:74:8a:3c: cf:60:05:5e:2e:66:33:87:23:11:87:8a:67:b5:1b:d5:77:ff: 39:df:33:f0:be:72:2b:7b:66:04:e2:aa:e3:71:d9:00:40:23: df:6c:c0:d6:cf:c6:66:74:40:ae:af:18:76:1d:a3:fa:6f:65: 93:a9:43:65:f5:1f:bb:8c:73:4d:21:fe:20:6d:43:96:cb:69: ee:f5:43:9c:65:1d:f6:2b:c8:c5:7b:d7:8a:30:f9:d5:89:fd: 6e:0a:d9:46:48:ea:e5:b3:92:b2:4f:88:9f:e8:d5:da:84:08: 77:7d:4e:57:39:3d:62:74:0a:90:aa:60:3c:ce:84:9f:44:12: ea:84:47:6c:38:95:70:16:60:79:09:2d:94:15:5f:8a:f7:bb: 6f:c7:07:3e:07:e4:a4:62:e6:ac:22:c5:77:84:8d:a1:dd:5b: 40:50:f2:05:97:8f:9b:5b:a3:79:f4:82:f8:a5:ec:60:bc:70: aa:8e:81:8f:f9:03:5d:4d:f9:b5:a6:40:09:46:de:ac:d9:43: 71:a9:4e:58:16:df:05:af:97:8e:ee:d6:31:00:1c:8f:e8:c8: c6:c4:36:ef:83:c6:8b:56:18:a1:a5:5c:2d:6d:c5:85:19:5a: ff:43:74:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjYwODE5MDIxMzE2WhcNMjYwODI2MDIxMzE2WjAYMRYwFAYD VQQDEw02YTg1MTEzYy00ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLktKOeI2FywJ1bVHYFOhCJejkdpZ6n6NQx1Fv+Tvehun1HvRicgeSRa87ez mkAMfaghLYlDfe+mc5cbABNdxjDuYsIkcWVxRap694ulzfoUb4AVqrgod/Pg7isI R2RCtqDtRW/YgTAFjuOh8vMJsCRIbVbprpAuWeuGGzdJR3dqOe436bMGx64TbWEX cXMpz218D3mYw/UjrqrnkxdxlLzieaddA1ZgGs4pkaxcr7Y8T/a6WFuw2T2YfCko 8Cy0Tw4Esy5zCFqNdxdWWiPularaMTH2KesFuQN3T7B1M8a5Jx/GbxqrBuEWtjHU +GeEgXVz2JrDwp+Zj9nKZ+0tmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvk7RHV Xzb+Rdx4D5hINRyKEQSpMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASMawbzU1QGWkZchs9cYndIo8z2AFXi5mM4cjEYeKZ7Ub1Xf/Od8z8L5yK3tm BOKq43HZAEAj32zA1s/GZnRArq8Ydh2j+m9lk6lDZfUfu4xzTSH+IG1Dlstp7vVD nGUd9ivIxXvXijD51Yn9bgrZRkjq5bOSsk+In+jV2oQId31OVzk9YnQKkKpgPM6E n0QS6oRHbDiVcBZgeQktlBVfive7b8cHPgfkpGLmrCLFd4SNod1bQFDyBZePm1uj efSC+KXsYLxwqo6Bj/kDXU35taZACUberNlDcalOWBbfBa+Xju7WMQAcj+jIxsQ2 74PGi1YYoaVcLW3FhRla/0N0GQ== -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:16 2026 by rpki-client