$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: XF5nez047Rub2SFgMNenpdR/EM6iHMNkuM3CEria0+w= Subject key identifier: 2E:CC:CA:A6:F6:45:3F:5C:7C:8E:3E:32:8F:21:FA:87:BC:65:3F:14 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 0143 Signing time: Thu 23 Jul 2026 07:02:44 +0000 Manifest this update: Thu 23 Jul 2026 07:02:44 +0000 Manifest next update: Thu 30 Jul 2026 07:02:44 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: 3F6ujEtgX0oISc7uX3tCQy4w/HwLkoufzk7xpA5tTSI=) 2: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (hash: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=) 3: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) 4: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Jul 23 07:02:44 2026 GMT Not After : Jul 30 07:02:44 2026 GMT Subject: CN=6a61bc94-1ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:02:8c:3f:1d:bb:1a:4e:af:28:55:79:c2: 58:15:ed:16:cd:27:80:c4:ba:2b:42:38:1d:70:59: 75:e9:3d:ec:66:43:26:7c:86:b3:c9:55:99:53:78: fd:64:5c:d0:f0:30:2f:38:10:07:ae:5c:61:5f:ee: ee:7a:34:4b:3c:6e:08:36:95:dc:23:f5:62:09:f4: 5d:06:cc:20:91:06:cc:31:91:5f:38:42:6b:11:dc: fd:95:1d:67:06:5a:df:3d:f9:22:5e:b7:01:68:b1: d2:f3:4c:57:fc:b7:24:87:e7:53:16:8d:5c:77:4c: 2e:03:ff:cd:9a:10:8a:2e:a3:8c:d2:7b:14:4b:2a: 5a:0b:28:63:f0:bb:cd:d5:8f:a6:f3:7a:8c:da:bd: ef:c9:db:9c:ca:98:68:3f:3c:f9:f0:c5:05:2b:05: f1:87:ff:34:de:3a:06:72:28:10:1a:2c:dd:6d:e5: ad:4b:3f:f8:0e:1d:5c:d3:ec:ce:be:8e:47:d4:ac: fc:90:6e:9b:6b:7b:09:10:8f:2a:c7:a2:ad:57:b3: b4:26:30:26:83:bc:f5:fa:dc:d0:b5:db:bf:51:8f: 36:7e:ae:52:41:60:29:74:8f:e4:41:d8:34:8e:5c: e8:90:de:a9:d8:19:28:00:ca:8f:4a:86:fb:29:bb: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:CA:A6:F6:45:3F:5C:7C:8E:3E:32:8F:21:FA:87:BC:65:3F:14 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dc:a2:e6:e5:01:c9:c2:d7:c8:e2:b4:b1:9c:cd:a0:a4:00: aa:79:32:e4:de:aa:96:32:ce:e9:e7:67:38:5f:02:23:86:8f: 73:1f:0a:37:b8:8f:65:5f:0a:93:f2:d3:eb:41:fb:93:a9:91: 30:15:1a:58:39:95:a0:db:a9:ba:e6:27:b2:5d:f7:cd:2b:5e: 10:1a:79:d0:f0:ce:9c:6c:72:45:b2:37:cd:8e:3c:0b:13:39: e9:f4:be:94:d9:86:d2:03:a2:8f:09:0a:85:f3:1e:89:9e:09: 1e:31:f4:19:53:14:e0:75:b3:54:48:ad:3b:f1:4d:3e:3d:c7: 66:93:74:32:69:b2:a8:97:7f:5f:21:bf:65:e9:92:30:b2:f4: 14:aa:d9:41:10:e8:24:19:b9:b4:6f:84:ad:44:9f:11:c9:f8: 37:ed:f9:44:b2:7b:f4:e1:57:ca:83:9b:c1:fe:27:a0:95:63: fa:c6:29:cf:5f:be:4d:2f:9b:c9:7c:bb:b1:5f:d6:91:a3:17: f4:95:07:3c:41:ba:45:06:c5:b7:ed:e2:4f:a4:fd:73:14:a6: 0a:62:43:71:1e:10:47:29:8c:75:32:82:e5:8a:1f:39:de:60: ad:f4:f6:84:78:6a:9f:20:e2:52:58:f0:10:43:c4:fd:ed:a1: fb:0c:ff:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYwNzIzMDcwMjQ0WhcNMjYwNzMwMDcwMjQ0WjAYMRYwFAYD VQQDEw02YTYxYmM5NC0xY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrMCjD8duxpOryhVecJYFe0WzSeAxLorQjgdcFl16T3sZkMmfIazyVWZU3j9 ZFzQ8DAvOBAHrlxhX+7uejRLPG4INpXcI/ViCfRdBswgkQbMMZFfOEJrEdz9lR1n BlrfPfkiXrcBaLHS80xX/Lckh+dTFo1cd0wuA//NmhCKLqOM0nsUSypaCyhj8LvN 1Y+m83qM2r3vyducyphoPzz58MUFKwXxh/803joGcigQGizdbeWtSz/4Dh1c0+zO vo5H1Kz8kG6ba3sJEI8qx6KtV7O0JjAmg7z1+tzQtdu/UY82fq5SQWApdI/kQdg0 jlzokN6p2BkoAMqPSob7KbvqaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7Myqb2 RT9cfI4+Mo8h+oe8ZT8UMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm9yi5uUBycLXyOK0sZzNoKQAqnky5N6qljLO6ednOF8CI4aPcx8KN7iPZV8K k/LT60H7k6mRMBUaWDmVoNupuuYnsl33zSteEBp50PDOnGxyRbI3zY48CxM56fS+ lNmG0gOijwkKhfMeiZ4JHjH0GVMU4HWzVEitO/FNPj3HZpN0MmmyqJd/XyG/ZemS MLL0FKrZQRDoJBm5tG+ErUSfEcn4N+35RLJ79OFXyoObwf4noJVj+sYpz1++TS+b yXy7sV/WkaMX9JUHPEG6RQbFt+3iT6T9cxSmCmJDcR4QRymMdTKC5YofOd5grfT2 hHhqnyDiUljwEEPE/e2h+wz/lA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:28:39 2026 by rpki-client