$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: b33DICsbiWg5Sl2nGcZLdTJOnEPIcQNU9RjJI0fHgtY= Subject key identifier: 1A:99:C9:5F:AE:F1:9B:F0:6E:E0:07:FB:D1:2B:C6:08:B5:03:C6:D8 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: 0150 Signing time: Thu 23 Jul 2026 06:56:51 +0000 Manifest this update: Thu 23 Jul 2026 06:56:51 +0000 Manifest next update: Thu 30 Jul 2026 06:56:51 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: nONuKISlY2yIsbwvdIIPzqsyqNY35kNpvqOUPRDKyuA=) 2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: Z/SrkSQ3T+H42p10G5ggeapuYQPaVSS5Kle4HYUjqBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Jul 23 06:56:51 2026 GMT Not After : Jul 30 06:56:51 2026 GMT Subject: CN=6a61bb33-556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:58:c0:18:8e:05:2f:85:34:fa:4f:f7:79: c3:37:31:04:b3:7e:03:d5:92:e7:be:1d:35:7f:b7: 91:c6:d0:29:ef:f4:09:61:13:67:7b:0f:ac:81:c7: 4c:83:00:9b:96:53:ff:93:59:a5:b4:c6:99:7e:69: 9c:28:94:7f:46:46:e8:c6:34:4a:a0:26:6a:99:ed: 5d:83:e0:27:0c:ae:74:2b:27:e0:37:e5:cd:80:54: 10:dd:25:84:68:a3:a9:45:26:dc:cf:b6:a2:60:43: 3d:57:ff:6f:a5:00:29:7e:4e:75:49:89:00:45:b5: b0:c3:36:8e:1f:d5:00:2c:4a:cb:bd:21:1a:ec:90: 9d:89:5a:eb:53:f2:34:0f:7c:36:ce:8d:9b:7e:01: 8e:91:30:d4:fc:86:25:67:dd:4e:76:db:01:4c:dd: 11:43:a4:1b:67:c3:da:a8:ea:a6:60:8e:aa:16:1a: 6c:f9:4d:e6:89:aa:7a:9b:a9:90:6b:33:4d:d5:85: a4:82:8f:8f:ac:3a:b8:4a:eb:5f:7f:75:6e:d4:aa: 93:f6:c9:db:9c:6b:8d:27:a3:3f:a7:cf:06:b0:68: 0a:c3:4e:2e:e6:e7:30:14:5a:57:ac:c4:1b:b2:2b: ed:e2:ad:24:46:c9:53:c1:5a:cf:23:08:19:9d:b9: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:99:C9:5F:AE:F1:9B:F0:6E:E0:07:FB:D1:2B:C6:08:B5:03:C6:D8 X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:52:6c:4a:17:75:87:48:a5:ed:48:ec:dc:71:60:91:d6:58: fa:57:a8:98:e7:a1:52:2b:4e:0f:1d:20:6a:5b:ba:5d:97:c7: 33:66:7b:9f:e8:74:50:0e:2e:f7:47:b6:51:94:d7:da:fa:9a: f6:fc:86:8c:3f:21:92:87:0b:7b:75:ec:c1:7c:b1:81:4e:2a: 9e:e4:4f:6f:ef:4f:55:ac:6c:e4:93:6c:49:ff:74:2f:dd:99: 8d:48:ab:a9:af:ea:61:28:3d:a4:4c:92:bb:2e:2c:9e:53:c1: ef:d2:54:a3:37:f4:82:7a:b0:b9:66:fe:5c:f2:7a:bd:42:3a: 94:2c:1a:61:1b:0e:5a:e4:29:b0:68:13:70:5b:b5:b9:64:56: a2:00:85:ff:94:02:9d:81:23:46:9d:2c:83:0f:73:cd:db:e5: 17:19:ae:d1:19:dc:4f:ff:db:ab:73:b3:4b:de:43:d7:b1:66: 1c:fa:1e:db:41:54:42:67:0d:f7:db:5d:f5:a1:96:e8:9a:c8: b9:47:cd:76:39:ae:f8:13:01:62:30:99:55:c6:16:7b:44:44: 50:10:68:a5:f4:0c:dd:72:be:11:77:8a:9f:20:0a:ce:eb:48: 19:32:c6:3d:77:f2:49:74:c8:7b:a6:8c:4a:05:34:e4:f4:2a: ac:e3:0c:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjYwNzIzMDY1NjUxWhcNMjYwNzMwMDY1NjUxWjAYMRYwFAYD VQQDEw02YTYxYmIzMy01NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWhYwBiOBS+FNPpP93nDNzEEs34D1ZLnvh01f7eRxtAp7/QJYRNnew+sgcdM gwCbllP/k1mltMaZfmmcKJR/RkboxjRKoCZqme1dg+AnDK50KyfgN+XNgFQQ3SWE aKOpRSbcz7aiYEM9V/9vpQApfk51SYkARbWwwzaOH9UALErLvSEa7JCdiVrrU/I0 D3w2zo2bfgGOkTDU/IYlZ91OdtsBTN0RQ6QbZ8PaqOqmYI6qFhps+U3miap6m6mQ azNN1YWkgo+PrDq4Sutff3Vu1KqT9snbnGuNJ6M/p88GsGgKw04u5ucwFFpXrMQb sivt4q0kRslTwVrPIwgZnbmXKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqZyV+u 8ZvwbuAH+9Erxgi1A8bYMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtFJsShd1h0il7Ujs3HFgkdZY+leomOehUitODx0galu6XZfHM2Z7n+h0UA4u 90e2UZTX2vqa9vyGjD8hkocLe3XswXyxgU4qnuRPb+9PVaxs5JNsSf90L92ZjUir qa/qYSg9pEySuy4snlPB79JUozf0gnqwuWb+XPJ6vUI6lCwaYRsOWuQpsGgTcFu1 uWRWogCF/5QCnYEjRp0sgw9zzdvlFxmu0RncT//bq3OzS95D17FmHPoe20FUQmcN 99td9aGW6JrIuUfNdjmu+BMBYjCZVcYWe0REUBBopfQM3XK+EXeKnyAKzutIGTLG PXfySXTIe6aMSgU05PQqrOMM3A== -----END CERTIFICATE-----Generated at Fri Jul 24 02:43:01 2026 by rpki-client