$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: 0WvX6kx36tNIrrxM2VqudhHYyJVu+8q+a0seBSXSUnc= Subject key identifier: 5E:B8:32:93:8D:B5:5F:8A:D6:84:63:2C:BA:F8:21:9A:93:AD:C5:BB Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 72 Signing time: Thu 23 Jul 2026 09:51:45 +0000 Manifest this update: Thu 23 Jul 2026 09:51:45 +0000 Manifest next update: Thu 30 Jul 2026 09:51:45 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: KJ0t9C1y/p9mU1HQ5vMCEuXy+H7I60JGevrInakBRA8=) 2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=) 4: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Jul 23 09:51:45 2026 GMT Not After : Jul 30 09:51:45 2026 GMT Subject: CN=6a61e431-912a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:11:6d:c5:6d:cd:6b:46:f4:27:7e:3f:52: 3c:ff:57:0d:ec:bb:b1:2a:b4:4a:a0:d7:41:59:e7: a4:c4:ee:f2:a0:5b:2c:0a:fc:70:38:f9:ca:6a:b5: c7:14:dc:89:b1:57:b2:72:66:22:29:de:c4:1f:73: 47:a7:03:f4:f1:08:8d:1b:07:5c:93:ad:85:63:a7: 95:a4:96:ba:94:80:23:62:78:8e:57:e9:b3:e0:bc: 5b:dd:55:a2:41:14:66:75:1f:05:ac:88:57:55:3c: a3:d8:6a:c9:be:8b:2a:c9:06:80:a6:8f:39:4f:64: 5d:74:c1:93:9a:ba:1d:a7:a7:76:17:15:47:ca:48: 64:ed:ac:49:36:6b:aa:86:cd:f4:d3:85:6c:bd:54: e3:fa:c1:74:83:53:8c:a4:ff:b6:a4:4e:4d:6f:3a: 87:9d:30:b1:97:21:c7:37:96:26:9e:ab:8b:d4:c3: 8e:52:d6:e6:7a:e8:c5:cb:86:f1:28:d9:ae:a5:bc: 0c:02:51:ad:fa:7c:eb:79:11:c0:76:c0:ce:4d:23: 9d:6b:02:7a:9d:32:8f:7e:66:c6:17:35:73:8c:4e: 8f:f8:53:25:02:15:ae:0b:d1:89:e5:9d:af:fe:b6: 2b:ac:33:c4:10:21:65:b7:f3:60:7c:37:7b:35:f4: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B8:32:93:8D:B5:5F:8A:D6:84:63:2C:BA:F8:21:9A:93:AD:C5:BB X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:da:05:38:8a:00:bc:2b:4b:40:73:d8:43:be:0d:82:70:d8: 4a:be:a2:fd:d9:d8:bc:f3:d7:1e:ef:09:c6:4e:be:96:0b:9d: 37:8b:51:d0:a8:0d:9c:2b:55:fc:76:1e:57:5d:6f:e3:a4:83: fc:e2:23:5c:e6:79:bc:82:64:22:36:bf:d6:fc:8f:92:0f:92: 53:b6:94:b5:88:3b:03:da:7b:c2:c3:ad:a7:7c:61:02:99:0d: 6f:de:c6:c1:00:69:08:76:2b:c0:14:1d:f5:17:c9:68:bd:06: 61:3b:d1:eb:e7:f3:b1:37:bc:b6:88:ec:ac:0b:95:b6:4b:5e: bf:1f:eb:32:b4:68:08:63:15:db:77:7e:7c:f0:71:81:3a:23: 73:f2:cb:df:7c:6f:3d:0e:c7:a9:db:f2:e9:84:d3:80:7d:ca: 18:5a:4c:2a:37:d8:43:42:93:4a:ac:c9:41:da:1e:81:99:10: 61:6c:e4:35:6b:bf:bf:7c:70:69:cd:d3:75:1f:79:ff:4a:00: 7d:35:8e:c8:f7:be:93:dc:0f:83:d2:9f:94:c8:63:e8:55:68: b9:88:64:7d:56:a3:8f:a4:09:a2:e8:ff:ec:cd:63:5a:70:57: d5:0e:12:de:0a:07:12:43:f1:65:2d:87:e9:aa:32:27:4a:4d: 05:cc:fd:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNjA3MjMwOTUxNDVaFw0yNjA3MzAwOTUxNDVaMBgxFjAUBgNV BAMTDTZhNjFlNDMxLTkxMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGehFtxW3Na0b0J34/Ujz/Vw3su7EqtEqg10FZ56TE7vKgWywK/HA4+cpqtccU 3ImxV7JyZiIp3sQfc0enA/TxCI0bB1yTrYVjp5WklrqUgCNieI5X6bPgvFvdVaJB FGZ1HwWsiFdVPKPYasm+iyrJBoCmjzlPZF10wZOauh2np3YXFUfKSGTtrEk2a6qG zfTThWy9VOP6wXSDU4yk/7akTk1vOoedMLGXIcc3liaeq4vUw45S1uZ66MXLhvEo 2a6lvAwCUa36fOt5EcB2wM5NI51rAnqdMo9+ZsYXNXOMTo/4UyUCFa4L0Ynlna/+ tiusM8QQIWW382B8N3s19Gp1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXrgyk421 X4rWhGMsuvghmpOtxbswHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0IxNzFEQjUwRTFBQTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4 TTYxd3N1UnMwMnhURDY4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBD2gU4igC8K0tAc9hDvg2CcNhKvqL92di889ce7wnGTr6WC503i1HQqA2cK1X8 dh5XXW/jpIP84iNc5nm8gmQiNr/W/I+SD5JTtpS1iDsD2nvCw62nfGECmQ1v3sbB AGkIdivAFB31F8lovQZhO9Hr5/OxN7y2iOysC5W2S16/H+sytGgIYxXbd3588HGB OiNz8svffG89Dsep2/LphNOAfcoYWkwqN9hDQpNKrMlB2h6BmRBhbOQ1a7+/fHBp zdN1H3n/SgB9NY7I976T3A+D0p+UyGPoVWi5iGR9VqOPpAmi6P/szWNacFfVDhLe CgcSQ/FlLYfpqjInSk0FzP2r -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:29 2026 by rpki-client