$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: mVcdiqpsfYhqeeUZiDMrm2KxeTNkpUuU1Euh8Nc0beI= Subject key identifier: F4:C7:56:4A:E9:65:C1:92:80:83:FC:58:E4:7E:55:0B:6B:EB:9E:D8 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 11EE Signing time: Wed 22 Jul 2026 17:16:36 +0000 Manifest this update: Wed 22 Jul 2026 17:16:35 +0000 Manifest next update: Wed 29 Jul 2026 17:16:35 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: b/FbMvVvMuOk+Pb2heK57enDXiA7QEb7k2NAaHdE58s=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4601 (0x11f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Jul 22 17:16:35 2026 GMT Not After : Jul 29 17:16:35 2026 GMT Subject: CN=6a60faf4-3c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:73:82:2f:79:84:ea:34:84:09:19:f5:6c: d5:c7:92:d0:7e:77:48:05:0b:0d:c6:53:18:8e:de: e0:d8:97:a8:72:1c:6a:73:b7:ea:8d:89:5e:96:c1: 9b:fc:f9:1c:34:4e:ba:7c:92:7f:e3:09:df:b4:05: 7a:c0:4b:eb:db:0e:e5:a6:57:35:16:a3:28:04:84: cc:ef:f5:d9:a1:75:70:b5:c0:36:4d:3b:da:a6:c0: ec:b6:8f:53:72:2d:f9:7b:2f:3d:f0:f3:f1:45:e3: 0d:fa:f6:34:7b:ad:1a:44:08:e4:5d:19:62:ce:1d: fa:16:92:e6:b7:cc:af:d8:d7:44:d3:66:b2:24:6c: 70:b9:0d:89:24:0e:b5:80:6c:14:c4:a4:76:b0:8d: 49:89:60:da:5d:2b:3b:ae:01:26:c0:60:8f:a4:c6: f8:c0:64:c4:33:c4:71:01:34:9e:5c:1e:50:71:a2: 2b:98:46:03:27:70:72:89:58:a1:12:f1:d9:04:a9: 8a:fa:95:ad:00:89:fd:06:af:59:bc:27:30:dc:d6: f9:de:44:b0:01:bd:d2:bf:ce:28:2c:e4:16:bf:76: ee:8e:5c:cf:80:fe:6f:e1:6b:6b:b9:90:20:eb:5a: c1:4b:4d:91:fa:c3:38:2c:85:b3:5b:a1:5c:da:fd: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C7:56:4A:E9:65:C1:92:80:83:FC:58:E4:7E:55:0B:6B:EB:9E:D8 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b6:1d:b3:4f:c0:6a:66:80:9f:05:93:50:b0:84:25:c2:43: 78:91:3c:75:bc:2b:56:1c:ee:3b:dc:d2:64:65:99:fc:9b:d3: e6:a4:6a:8e:c4:8f:99:2a:f7:10:d6:64:bd:45:4d:df:3e:01: 11:9e:a0:9e:b7:86:1e:02:e2:4b:43:fc:5e:53:ca:e4:a2:b5: 67:b2:11:80:c8:a4:31:df:37:77:1d:97:a7:30:b3:e1:39:d8: 61:79:38:7a:00:0d:23:e4:d3:2f:d7:b5:45:9e:ca:ad:35:aa: de:9f:22:3d:08:a2:8f:77:38:11:d3:e9:7a:1f:a5:af:a1:ff: 13:89:dd:20:5c:a4:43:fe:4e:b6:70:d3:f2:77:87:c0:73:56: ca:ab:1d:06:2a:4c:ec:96:00:2e:48:97:50:d6:99:c9:20:aa: de:43:e1:9c:d9:78:ff:74:6c:3b:56:e1:ec:ab:37:66:16:a9: 18:5d:98:b2:38:50:d0:69:65:6a:df:0d:ec:f1:68:ae:75:00: 4e:ae:62:fb:c3:e2:46:4a:0d:8b:54:cb:92:b4:46:eb:1f:7c: 8c:1e:f3:15:2a:c5:8f:dc:05:d9:38:ec:e8:96:2a:0a:85:59: 9d:bd:34:56:5a:79:3d:2e:06:e6:95:98:e0:e5:05:43:a6:5d: b5:0d:e4:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwNzIyMTcxNjM1WhcNMjYwNzI5MTcxNjM1WjAYMRYwFAYD VQQDEw02YTYwZmFmNC0zYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkCRzgi95hOo0hAkZ9WzVx5LQfndIBQsNxlMYjt7g2Jeochxqc7fqjYlelsGb /PkcNE66fJJ/4wnftAV6wEvr2w7lplc1FqMoBITM7/XZoXVwtcA2TTvapsDsto9T ci35ey898PPxReMN+vY0e60aRAjkXRlizh36FpLmt8yv2NdE02ayJGxwuQ2JJA61 gGwUxKR2sI1JiWDaXSs7rgEmwGCPpMb4wGTEM8RxATSeXB5QcaIrmEYDJ3ByiVih EvHZBKmK+pWtAIn9Bq9ZvCcw3Nb53kSwAb3Sv84oLOQWv3bujlzPgP5v4WtruZAg 61rBS02R+sM4LIWzW6Fc2v3dVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTHVkrp ZcGSgIP8WOR+VQtr657YMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP7Yds0/AamaAnwWTULCEJcJDeJE8dbwrVhzuO9zSZGWZ/JvT5qRqjsSPmSr3 ENZkvUVN3z4BEZ6gnreGHgLiS0P8XlPK5KK1Z7IRgMikMd83dx2XpzCz4TnYYXk4 egANI+TTL9e1RZ7KrTWq3p8iPQiij3c4EdPpeh+lr6H/E4ndIFykQ/5OtnDT8neH wHNWyqsdBipM7JYALkiXUNaZySCq3kPhnNl4/3RsO1bh7Ks3ZhapGF2YsjhQ0Gll at8N7PFornUATq5i+8PiRkoNi1TLkrRG6x98jB7zFSrFj9wF2Tjs6JYqCoVZnb00 Vlp5PS4G5pWY4OUFQ6ZdtQ3k+Q== -----END CERTIFICATE-----Generated at Fri Jul 24 10:29:02 2026 by rpki-client