$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: Bk2FPqPr+9YLw/4D7I/zpLr2/LhT7U7C3byh4xLOvNk= Subject key identifier: EC:0B:31:46:1A:6C:35:96:3A:7E:90:5D:72:5B:15:B9:D2:5D:F1:CB Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0221 Signing time: Thu 23 Jul 2026 04:09:34 +0000 Manifest this update: Thu 23 Jul 2026 04:09:33 +0000 Manifest next update: Thu 30 Jul 2026 04:09:33 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: 7SPnS3dlGwlvBCIt5WEmgBpErgNYkM0hulYjzu1nzq4=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Jul 23 04:09:33 2026 GMT Not After : Jul 30 04:09:33 2026 GMT Subject: CN=6a6193fe-3f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:be:cb:1d:c0:96:e1:b2:8a:57:88:21:17: eb:63:35:8d:3e:36:0d:4f:24:56:75:48:bf:48:55: f6:4b:ad:0a:8b:b6:4d:fb:e0:8f:ef:25:63:cd:66: 29:48:bf:3c:83:70:a6:9f:dd:dd:23:ce:f8:da:6a: da:fc:5e:e9:a3:b4:0e:0c:af:33:1b:3e:9b:35:82: 35:3c:c6:1f:65:9b:5e:33:d6:8d:00:01:ee:fa:da: 71:9d:ad:c7:80:d2:c1:96:5b:6a:d1:42:ff:79:97: f1:dc:ea:7e:31:b5:77:d5:19:7c:58:76:d9:51:97: 52:8a:94:00:26:70:e1:92:68:3b:7b:79:27:5a:a2: 79:c4:72:72:a1:02:fd:a7:a7:83:70:41:3f:92:f6: 86:e0:36:be:7c:d1:d5:08:a0:80:6d:6c:83:1c:e8: 81:6b:e6:5b:ed:1c:19:01:a1:c6:c5:af:36:d0:9a: 07:42:72:ea:ad:b2:69:bb:c6:6c:f3:82:d6:bf:51: c8:7e:02:96:ac:f7:98:81:23:7c:57:1a:5e:8e:8c: 37:9f:e4:86:0e:3e:2b:84:e7:0e:a1:39:cb:e2:c5: cb:18:9e:01:1f:56:e1:df:89:34:3e:62:e5:75:0f: 6a:eb:04:b6:12:57:c0:c8:1c:05:6c:0b:4b:ab:d5: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:31:46:1A:6C:35:96:3A:7E:90:5D:72:5B:15:B9:D2:5D:F1:CB X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d5:e0:12:a8:13:3a:a4:9b:a3:e9:3d:cb:1b:7a:53:89:55: 49:3f:68:21:9e:18:fa:99:40:16:bb:51:95:db:e2:d0:12:ec: 0e:13:30:35:a1:f2:38:2e:77:ac:12:46:c2:b4:8e:d4:6b:59: 33:4c:8f:82:7d:3b:3a:cf:ea:5a:56:42:18:1c:4f:83:fa:1b: ef:a2:ee:b4:53:5d:0f:af:15:84:fb:38:e7:43:8b:fb:f0:d2: b4:d6:96:5b:ce:92:6b:ed:cf:a0:de:c0:0e:0f:b0:f2:11:40: 81:6b:33:a2:c4:a7:8e:dd:ab:ff:37:fa:8c:29:9b:e3:c6:89: 1a:14:14:76:5e:99:3c:93:ff:49:5b:a3:1a:42:e4:a4:97:31: db:e9:9b:6c:4a:03:0b:c0:3d:52:7e:23:bd:80:5e:9f:79:26: b9:e8:b4:74:3f:83:4d:9e:47:66:1f:39:3e:dd:4c:ed:60:03: dc:0e:e6:4d:01:bc:14:80:ef:02:0a:80:d2:94:16:12:94:0b: 22:76:48:77:5c:c5:c0:08:a7:fb:0a:48:00:f6:50:02:1c:32: 40:a1:f1:91:69:73:18:4c:69:34:4e:cd:05:e4:ab:49:c5:c6: a9:d2:29:c2:38:19:d1:d4:86:75:94:76:03:28:8d:1f:46:ad: 44:52:c5:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwNzIzMDQwOTMzWhcNMjYwNzMwMDQwOTMzWjAYMRYwFAYD VQQDEw02YTYxOTNmZS0zZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluu+yx3AluGyileIIRfrYzWNPjYNTyRWdUi/SFX2S60Ki7ZN++CP7yVjzWYp SL88g3Cmn93dI8742mra/F7po7QODK8zGz6bNYI1PMYfZZteM9aNAAHu+tpxna3H gNLBlltq0UL/eZfx3Op+MbV31Rl8WHbZUZdSipQAJnDhkmg7e3knWqJ5xHJyoQL9 p6eDcEE/kvaG4Da+fNHVCKCAbWyDHOiBa+Zb7RwZAaHGxa820JoHQnLqrbJpu8Zs 84LWv1HIfgKWrPeYgSN8Vxpejow3n+SGDj4rhOcOoTnL4sXLGJ4BH1bh34k0PmLl dQ9q6wS2ElfAyBwFbAtLq9UxXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwLMUYa bDWWOn6QXXJbFbnSXfHLMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAtXgEqgTOqSbo+k9yxt6U4lVST9oIZ4Y+plAFrtRldvi0BLsDhMwNaHyOC53 rBJGwrSO1GtZM0yPgn07Os/qWlZCGBxPg/ob76LutFNdD68VhPs450OL+/DStNaW W86Sa+3PoN7ADg+w8hFAgWszosSnjt2r/zf6jCmb48aJGhQUdl6ZPJP/SVujGkLk pJcx2+mbbEoDC8A9Un4jvYBen3kmuei0dD+DTZ5HZh85Pt1M7WAD3A7mTQG8FIDv AgqA0pQWEpQLInZId1zFwAin+wpIAPZQAhwyQKHxkWlzGExpNE7NBeSrScXGqdIp wjgZ0dSGdZR2AyiNH0atRFLFNw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:03:41 2026 by rpki-client