$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: 0VSMBR/gUz0Hcatw3AKk8HBBPx6gQ4g0c620IcHufMw= Subject key identifier: 48:5A:AC:7F:FB:7C:33:B7:A0:D6:F9:A4:C2:AE:A3:DE:4A:EC:40:61 Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 0A97 Signing time: Wed 22 Jul 2026 19:54:01 +0000 Manifest this update: Wed 22 Jul 2026 19:54:00 +0000 Manifest next update: Wed 29 Jul 2026 19:54:00 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: 4WPHpPszFDprGwHDolf047x9kkvqsDVdPZVU/Ol/R3M=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: PxOmvDmrB3CEdW6KhDSMOQWoDMH93at+hpnwpbEaqbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Jul 22 19:54:00 2026 GMT Not After : Jul 29 19:54:00 2026 GMT Subject: CN=6a611fd9-0e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:b8:90:b0:f1:2e:c9:f2:6a:a0:0b:b2:ba: 99:48:5f:04:f5:37:a7:d9:52:e8:11:7c:6d:7e:f0: d1:c4:e5:b1:b5:7a:90:38:f9:62:ee:63:cd:62:84: 91:a0:c5:40:d3:0b:c8:5c:70:1d:d9:b0:73:66:43: b9:e1:a6:23:03:0e:bc:0f:cb:51:a0:97:c4:6d:9c: 41:17:46:74:9e:f2:5a:f5:dd:ce:a6:74:8a:be:d1: 1f:3e:36:79:a5:46:36:f4:10:f8:43:60:47:09:d6: bc:f2:80:d3:92:3e:86:9c:39:ae:7b:7f:8c:5d:54: b5:73:be:bc:7b:86:a5:a7:0f:97:c9:49:f3:e1:d7: 89:7d:2f:76:4a:0b:e7:10:22:13:7f:d5:41:a9:03: a1:bf:bb:23:d4:47:3d:fd:c7:69:95:fe:7f:5a:01: f1:d0:33:a9:6d:9b:66:09:29:16:05:97:e0:e7:cd: 39:25:68:d0:2a:55:9a:dc:3e:aa:aa:f0:42:83:9a: 6a:5c:c3:3c:38:a3:8e:f1:f2:df:1b:d3:89:46:24: e7:78:64:69:2b:83:3b:fe:82:f5:5a:d6:43:1b:81: 02:65:e0:6f:6f:41:41:bc:aa:cc:2d:05:94:78:17: 3b:f2:b6:56:7b:63:db:49:df:b9:f3:2e:d3:77:37: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5A:AC:7F:FB:7C:33:B7:A0:D6:F9:A4:C2:AE:A3:DE:4A:EC:40:61 X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:4f:f2:68:db:7f:b6:04:05:65:47:bb:bf:71:8a:fe:90:f2: bb:7c:70:41:d0:37:41:bd:7b:00:fe:78:fa:55:6e:fe:1c:a8: 0d:f5:49:20:8e:4b:38:d4:b4:9f:af:79:f7:a5:ef:5f:02:e1: c6:be:65:ad:08:77:3d:93:ea:2b:e2:60:a3:cf:e3:52:97:9a: 7e:f6:f2:79:f2:4b:4b:fb:12:19:40:bf:9c:82:70:a0:fb:5f: 46:21:10:7e:2d:32:45:d7:30:d7:dc:c9:91:bc:60:3a:b4:ba: 9c:2c:97:45:32:a4:f6:89:19:4c:af:5c:cd:50:96:da:74:06: 6d:5d:b0:a1:f3:a9:94:e3:ae:a2:6e:00:83:02:74:15:4c:ec: 6c:f4:81:45:75:93:53:d8:17:4d:ad:09:23:16:37:ac:e0:60: 20:59:e5:c5:34:f3:e6:84:76:f3:be:65:dd:ca:3b:75:a9:a0: 3d:13:f9:e1:81:a9:a5:c2:57:3f:7a:18:cc:68:ee:cb:e6:f8: 42:cd:9d:86:eb:20:59:9b:76:fc:93:25:84:9f:a5:6c:87:9f: f5:62:4c:ba:3b:9e:b9:ad:de:54:c5:ea:ae:a0:68:63:db:a4: 58:2e:30:b2:6f:8c:e2:34:fc:5c:61:df:82:e6:a2:f3:98:7e: 68:c6:2e:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjYwNzIyMTk1NDAwWhcNMjYwNzI5MTk1NDAwWjAYMRYwFAYD VQQDEw02YTYxMWZkOS0wZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpW4kLDxLsnyaqALsrqZSF8E9Ten2VLoEXxtfvDRxOWxtXqQOPli7mPNYoSR oMVA0wvIXHAd2bBzZkO54aYjAw68D8tRoJfEbZxBF0Z0nvJa9d3OpnSKvtEfPjZ5 pUY29BD4Q2BHCda88oDTkj6GnDmue3+MXVS1c768e4alpw+XyUnz4deJfS92Sgvn ECITf9VBqQOhv7sj1Ec9/cdplf5/WgHx0DOpbZtmCSkWBZfg5805JWjQKlWa3D6q qvBCg5pqXMM8OKOO8fLfG9OJRiTneGRpK4M7/oL1WtZDG4ECZeBvb0FBvKrMLQWU eBc78rZWe2PbSd+58y7TdzeVNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEharH/7 fDO3oNb5pMKuo95K7EBhMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGU/yaNt/tgQFZUe7v3GK/pDyu3xwQdA3Qb17AP54+lVu/hyoDfVJII5LONS0 n69596XvXwLhxr5lrQh3PZPqK+Jgo8/jUpeafvbyefJLS/sSGUC/nIJwoPtfRiEQ fi0yRdcw19zJkbxgOrS6nCyXRTKk9okZTK9czVCW2nQGbV2wofOplOOuom4AgwJ0 FUzsbPSBRXWTU9gXTa0JIxY3rOBgIFnlxTTz5oR2875l3co7damgPRP54YGppcJX P3oYzGjuy+b4Qs2dhusgWZt2/JMlhJ+lbIef9WJMujueua3eVMXqrqBoY9ukWC4w sm+M4jT8XGHfguai85h+aMYuIw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:26:36 2026 by rpki-client