$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: 8O25HBmNxSqJy8vK80K6S0wMKT9wQBPG0ViNcrYIpio= Subject key identifier: AA:C4:05:86:BB:7A:8B:30:BF:07:AC:51:B9:D1:28:59:6C:B7:16:C7 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 35A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 3580 Signing time: Sat 04 Jul 2026 14:45:48 +0000 Manifest this update: Sat 04 Jul 2026 14:45:48 +0000 Manifest next update: Sat 11 Jul 2026 14:45:48 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: sOnnct/muqh7VhvRYXYonMME9yLMFZFkgA9QPaQkGqw=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 14:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13734 (0x35a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Jul 4 14:45:48 2026 GMT Not After : Jul 11 14:45:48 2026 GMT Subject: CN=6a491c9c-867b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:e9:d3:66:2a:e7:30:90:02:b9:66:b1:7b: b7:0b:fc:35:ce:13:57:39:a3:30:11:f5:be:2c:45: f3:d6:cb:65:a9:ab:df:47:a9:80:d9:59:b8:22:f2: 7c:a4:63:6d:4a:78:42:a3:20:38:5b:d4:55:81:3e: 9d:ec:d6:07:4d:2d:49:ac:ec:5c:85:5f:a2:e9:52: ac:e6:8a:5b:fb:e2:f4:0e:91:33:f6:d4:b4:32:fa: ac:c2:6f:c9:8c:83:3f:f4:86:48:4e:01:cc:94:c3: 94:c1:90:54:a3:43:60:94:ea:18:cd:93:7d:e9:98: d5:69:e0:b6:8f:36:bb:85:21:47:b5:2c:37:98:7e: 99:0a:26:ef:3a:43:15:9d:0b:2d:8e:4e:a9:94:c9: e8:ce:07:b7:91:06:f5:28:c9:bc:4f:76:31:ad:76: e3:fb:f3:6d:f6:86:fd:da:0e:07:a6:14:2f:60:a6: 90:32:bb:49:a0:9f:c6:f7:00:59:28:98:d1:42:36: fa:1e:f7:fb:ea:81:87:d5:4a:93:57:21:1e:df:68: 48:34:7e:de:c3:b0:86:ee:64:a4:62:9d:4b:4c:84: 51:4d:08:46:a2:6b:3a:91:6f:f2:40:4e:cc:4d:f2: d6:a4:9b:80:ff:fd:e9:31:58:04:54:0c:30:c1:75: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C4:05:86:BB:7A:8B:30:BF:07:AC:51:B9:D1:28:59:6C:B7:16:C7 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f2:7e:0d:08:21:29:73:ce:b5:06:81:83:88:bb:76:40:a4: c6:8a:24:fe:0e:ab:f9:42:2d:08:94:60:d7:22:ea:ee:6a:bc: c2:76:9c:8b:ce:90:47:8c:9c:39:d4:37:60:04:b3:62:00:8b: 1e:ce:8b:3d:ee:b8:04:14:96:ac:3e:87:a2:05:e7:a8:ab:98: 90:c5:0d:19:35:6e:13:ee:a7:22:7c:8f:fd:25:ec:38:c7:4a: c7:f6:56:bd:95:07:9f:2c:15:c7:d1:58:2e:13:6a:8a:85:71: c1:bc:37:7d:1c:a1:d6:0e:98:16:48:78:f3:c0:79:cc:d8:df: 70:0f:b7:d2:8c:06:42:ad:ba:28:3c:14:20:bc:95:0a:68:b4: de:18:d7:38:74:b5:fd:58:ab:c7:f7:9c:09:cf:69:09:22:da: 8c:da:ae:9f:c4:70:82:46:77:df:d0:eb:0a:44:02:c8:fc:c0: 12:ed:92:72:f8:da:66:6f:01:d8:11:f4:e5:73:3e:71:ba:2b: 14:80:8d:7c:95:46:5c:56:45:15:cc:f5:17:54:37:b3:06:1f: 0e:fa:84:34:d9:29:61:7c:45:b3:9a:85:18:43:5e:ff:f4:e3: e4:8d:52:aa:5f:88:fa:67:bc:f2:fe:bf:05:90:45:76:0b:8e: f5:7d:c9:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjYwNzA0MTQ0NTQ4WhcNMjYwNzExMTQ0NTQ4WjAYMRYwFAYD VQQDEw02YTQ5MWM5Yy04NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2Hp02Yq5zCQArlmsXu3C/w1zhNXOaMwEfW+LEXz1stlqavfR6mA2Vm4IvJ8 pGNtSnhCoyA4W9RVgT6d7NYHTS1JrOxchV+i6VKs5opb++L0DpEz9tS0Mvqswm/J jIM/9IZITgHMlMOUwZBUo0NglOoYzZN96ZjVaeC2jza7hSFHtSw3mH6ZCibvOkMV nQstjk6plMnozge3kQb1KMm8T3YxrXbj+/Nt9ob92g4HphQvYKaQMrtJoJ/G9wBZ KJjRQjb6Hvf76oGH1UqTVyEe32hINH7ew7CG7mSkYp1LTIRRTQhGoms6kW/yQE7M TfLWpJuA//3pMVgEVAwwwXXr7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrEBYa7 eoswvwesUbnRKFlstxbHMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn/J+DQghKXPOtQaBg4i7dkCkxook/g6r+UItCJRg1yLq7mq8wnaci86QR4yc OdQ3YASzYgCLHs6LPe64BBSWrD6HogXnqKuYkMUNGTVuE+6nInyP/SXsOMdKx/ZW vZUHnywVx9FYLhNqioVxwbw3fRyh1g6YFkh488B5zNjfcA+30owGQq26KDwUILyV Cmi03hjXOHS1/Virx/ecCc9pCSLajNqun8RwgkZ339DrCkQCyPzAEu2ScvjaZm8B 2BH05XM+cborFICNfJVGXFZFFcz1F1Q3swYfDvqENNkpYXxFs5qFGENe//Tj5I1S ql+I+me88v6/BZBFdguO9X3JVw== -----END CERTIFICATE-----Generated at Sun Jul 5 08:37:44 2026 by rpki-client