$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: PqXJP5IBPPwTpmEiIy7gZ0GIno99dI0ZnViL0yO4XOU= Subject key identifier: 43:23:13:A1:56:F8:96:DE:B0:15:6D:9E:6F:0C:96:26:C2:C3:58:F5 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 159F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 1575 Signing time: Wed 22 Jul 2026 16:53:13 +0000 Manifest this update: Wed 22 Jul 2026 16:53:12 +0000 Manifest next update: Wed 29 Jul 2026 16:53:12 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: aFwzCQeclcjqWb7z8b71AkEURlgTAEcTENzAj3VEsMc=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=) 4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5535 (0x159f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Jul 22 16:53:12 2026 GMT Not After : Jul 29 16:53:12 2026 GMT Subject: CN=6a60f579-cc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:29:11:68:ba:56:d1:ff:98:a3:86:74:b3: 3b:8d:ad:aa:fc:6a:e4:e3:d5:3c:21:82:22:77:b5: 73:06:65:1c:a0:a5:91:7a:f8:18:f3:31:b8:53:4c: a2:a3:e9:0a:c9:21:58:d5:f5:26:a8:a8:f1:f4:2a: 86:eb:7d:13:4d:69:80:f0:46:c4:0e:42:59:3c:a8: 7a:90:ac:46:d1:ce:7c:61:f7:a6:78:24:3c:2b:ff: c7:30:58:ec:f9:bd:22:2a:66:be:60:0a:6d:ad:18: a9:53:fd:b4:32:c8:a2:0f:82:0d:15:10:71:48:3b: eb:b4:2b:0b:82:c9:94:13:9e:0e:a9:93:67:a4:ed: d1:16:81:a4:f9:b6:76:63:33:b0:e9:ca:59:68:75: 86:d3:87:c3:fa:81:35:01:6a:9c:04:2f:ad:84:fd: 8c:5a:46:2d:5c:43:6c:05:c9:ba:63:31:9a:29:1e: 30:76:b4:67:77:3e:82:fd:cc:d8:34:3a:4d:b7:8d: 78:d2:ac:85:85:d2:a2:c1:99:10:b9:53:43:3d:e1: d3:c5:b1:51:4a:67:f8:d0:de:f3:8c:be:7f:14:ef: 68:e7:c8:f2:62:f3:44:4e:33:0e:d2:83:72:7f:f7: 00:7a:65:9a:26:bc:43:c5:43:10:6b:18:a9:c6:00: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:13:A1:56:F8:96:DE:B0:15:6D:9E:6F:0C:96:26:C2:C3:58:F5 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:79:9a:3f:5e:4a:b9:6a:2f:63:aa:44:5b:56:a2:e2:c5:f1: 23:0a:e5:b4:ef:23:ae:2a:9f:67:bf:99:e7:c4:cb:e1:6c:d8: 82:24:2e:0d:dd:37:66:e3:05:5b:0d:21:ee:c2:d4:34:12:ad: de:80:db:85:a1:d2:60:7a:76:83:b1:03:28:e8:90:b6:ca:23: 1f:f8:da:b7:0f:37:78:d7:7c:05:82:27:28:f0:f4:9e:85:7c: 9b:18:84:2a:5c:c4:53:09:30:71:0a:09:29:09:7d:69:1f:8c: 11:34:b9:96:91:95:30:d1:f1:f5:9a:23:5a:60:a3:66:58:d7: ed:44:fd:42:76:0d:a4:2a:9f:3f:58:3b:b0:42:53:8a:e2:6c: 3a:a7:0e:98:f9:a6:e8:13:ff:5f:86:1c:05:ef:e8:62:0d:67: 83:50:aa:22:6f:56:2c:4e:b2:22:a0:48:a9:64:3c:9a:ae:d3: 3d:b1:3f:94:05:8a:c2:fc:54:05:f6:54:b1:8d:6f:83:ae:e1: 70:ba:8e:91:2b:dd:22:27:3c:74:37:dd:3e:db:ea:54:ca:66: 3e:af:99:c1:92:88:2e:5f:05:45:40:b5:00:63:3f:53:a5:d5: 67:f9:db:ab:fb:b9:fe:2b:cd:a9:50:61:74:40:fd:7c:52:81: 62:4f:8d:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYwNzIyMTY1MzEyWhcNMjYwNzI5MTY1MzEyWjAYMRYwFAYD VQQDEw02YTYwZjU3OS1jYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovkpEWi6VtH/mKOGdLM7ja2q/Grk49U8IYIid7VzBmUcoKWRevgY8zG4U0yi o+kKySFY1fUmqKjx9CqG630TTWmA8EbEDkJZPKh6kKxG0c58YfemeCQ8K//HMFjs +b0iKma+YAptrRipU/20MsiiD4INFRBxSDvrtCsLgsmUE54OqZNnpO3RFoGk+bZ2 YzOw6cpZaHWG04fD+oE1AWqcBC+thP2MWkYtXENsBcm6YzGaKR4wdrRndz6C/czY NDpNt4140qyFhdKiwZkQuVNDPeHTxbFRSmf40N7zjL5/FO9o58jyYvNETjMO0oNy f/cAemWaJrxDxUMQaxipxgDDNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMjE6FW +JbesBVtnm8MlibCw1j1MB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnmaP15KuWovY6pEW1ai4sXxIwrltO8jriqfZ7+Z58TL4WzYgiQuDd03ZuMF Ww0h7sLUNBKt3oDbhaHSYHp2g7EDKOiQtsojH/jatw83eNd8BYInKPD0noV8mxiE KlzEUwkwcQoJKQl9aR+METS5lpGVMNHx9ZojWmCjZljX7UT9QnYNpCqfP1g7sEJT iuJsOqcOmPmm6BP/X4YcBe/oYg1ng1CqIm9WLE6yIqBIqWQ8mq7TPbE/lAWKwvxU BfZUsY1vg67hcLqOkSvdIic8dDfdPtvqVMpmPq+ZwZKILl8FRUC1AGM/U6XVZ/nb q/u5/ivNqVBhdED9fFKBYk+NYA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:01:43 2026 by rpki-client