$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft File: PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json) Hash identifier: sf9budMC7kQnTc1hztKWXQ6daSBzAvnKC5wx2CZ1sQA= Subject key identifier: E0:91:0B:32:FB:E2:29:03:89:A9:35:6D:39:5A:51:2E:53:77:C1:1E Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A Certificate issuer: /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft Manifest number: 27 Signing time: Thu 23 Jul 2026 10:53:04 +0000 Manifest this update: Thu 23 Jul 2026 10:53:04 +0000 Manifest next update: Thu 30 Jul 2026 10:53:04 +0000 Files and hashes: 1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: +kXY27dHDExVPus74RHPmm/Ke+7s8sJ8WR1LwQpZO5E=) 2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Validity Not Before: Jul 23 10:53:04 2026 GMT Not After : Jul 30 10:53:04 2026 GMT Subject: CN=6a61f290-a84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:d5:05:ac:a6:2d:2c:9c:0b:0c:79:e6:ab: 93:e2:68:c7:bd:57:f4:3a:fd:10:67:a1:88:98:69: f3:19:cf:53:9a:0c:38:04:e2:4e:d6:74:d6:fc:0b: 3f:65:d3:ee:58:88:90:af:82:9b:f0:31:53:50:f7: 74:bc:3c:7e:d9:c9:bf:f4:39:2b:d0:c8:be:3e:d0: 61:a0:6a:06:57:90:87:a1:68:54:f4:76:3d:28:d5: 02:d9:5f:a4:76:52:3e:cc:2b:e2:b4:58:f4:3c:7d: 7d:8a:ee:55:d0:d5:88:40:d1:82:14:0a:e6:1f:1c: 5e:50:29:7c:db:e4:6d:03:95:a0:c5:19:2f:23:bf: e6:c2:32:48:96:58:f1:20:1d:4b:f3:9f:7f:2c:ae: 4e:35:a1:e8:1c:9f:8a:a3:0e:8e:8b:2d:05:a0:88: 7f:83:09:3b:a5:cd:66:8a:ac:22:69:7c:c9:ba:6d: 00:fe:62:54:f6:ea:03:15:6d:9d:64:59:b7:74:c4: d5:c2:91:a0:fe:41:7f:cf:e2:7d:c4:ec:08:ba:0a: 27:11:dc:69:cb:4c:5d:3b:df:cc:b3:53:4c:20:ef: aa:33:2c:18:f1:5d:ae:fc:67:3c:b8:ac:56:6b:99: d9:b5:2b:cb:5a:86:12:a7:21:b9:49:ef:09:9f:31: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:91:0B:32:FB:E2:29:03:89:A9:35:6D:39:5A:51:2E:53:77:C1:1E X509v3 Authority Key Identifier: keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:af:98:be:a2:e1:c3:e3:08:76:fa:35:fe:cc:b0:e5:39:f6: b3:0d:a9:8c:10:2a:bb:d1:9f:37:cc:dc:a9:ec:d8:82:88:05: c8:16:70:7f:57:fe:44:ed:2f:9e:fd:cd:5d:d3:9f:4a:38:54: 5e:a6:9b:7d:26:2e:b1:db:ce:2d:21:07:77:b0:eb:b0:cf:ae: 92:37:6a:31:7f:49:04:0f:a6:b2:27:2d:19:af:4e:66:fb:83: c2:d4:35:75:87:76:5a:50:6a:8d:59:d0:0f:e5:ea:e0:b7:40: 85:b2:62:75:c1:a9:59:d2:aa:3d:7c:5b:d1:33:9c:f1:80:e0: 57:b6:6d:7b:82:2c:08:c0:8d:23:0b:d0:0f:5c:de:83:62:e4: bc:c5:05:24:ba:7e:31:e0:52:a7:5e:35:af:f6:94:52:90:7a: 22:25:04:6c:6f:04:ea:b1:7d:f8:76:b0:1c:d6:ef:c7:42:1e: df:c4:2a:64:ed:a9:62:aa:68:81:38:ca:7d:41:3e:b4:2b:1e: 27:4d:dd:db:b7:3a:12:55:9e:5d:25:73:0f:4e:85:70:04:96: 24:cf:ae:ec:17:d6:3c:75:9e:64:61:15:7e:ad:b9:37:0b:7f: ef:55:16:66:6d:6f:3c:c4:17:8f:e3:8c:c8:27:7c:5f:93:cf: ba:9c:21:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlGMjExMC8GA1UEBRMoM0YzMEZGMUJCQjI2RjEwMkVEOEE0NzVBNEJGQkM5NDJB MURGMzI4QTAeFw0yNjA3MjMxMDUzMDRaFw0yNjA3MzAxMDUzMDRaMBgxFjAUBgNV BAMTDTZhNjFmMjkwLWE4NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9/dUFrKYtLJwLDHnmq5PiaMe9V/Q6/RBnoYiYafMZz1OaDDgE4k7WdNb8Cz9l 0+5YiJCvgpvwMVNQ93S8PH7Zyb/0OSvQyL4+0GGgagZXkIehaFT0dj0o1QLZX6R2 Uj7MK+K0WPQ8fX2K7lXQ1YhA0YIUCuYfHF5QKXzb5G0DlaDFGS8jv+bCMkiWWPEg HUvzn38srk41oegcn4qjDo6LLQWgiH+DCTulzWaKrCJpfMm6bQD+YlT26gMVbZ1k Wbd0xNXCkaD+QX/P4n3E7Ai6CicR3GnLTF0738yzU0wg76ozLBjxXa78Zzy4rFZr mdm1K8tahhKnIblJ7wmfMbsTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4JELMvvi KQOJqTVtOVpRLlN3wR4wHwYDVR0jBBgwFoAUPzD/G7sm8QLtikdaS/vJQqHfMoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0UxODNDRUM0NEMw NDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFMdGlrZGFTX3ZKUXFIZk1v by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUHpEX0c3c204UUx0aWtkYVNfdkpRcUhmTW9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUYyL0UxODNDRUM0NEMwNDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFM dGlrZGFTX3ZKUXFIZk1vby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCcr5i+ouHD4wh2+jX+zLDlOfazDamMECq70Z83zNyp7NiCiAXIFnB/V/5E7S+e /c1d059KOFReppt9Ji6x284tIQd3sOuwz66SN2oxf0kED6ayJy0Zr05m+4PC1DV1 h3ZaUGqNWdAP5ergt0CFsmJ1walZ0qo9fFvRM5zxgOBXtm17giwIwI0jC9APXN6D YuS8xQUkun4x4FKnXjWv9pRSkHoiJQRsbwTqsX34drAc1u/HQh7fxCpk7aliqmiB OMp9QT60Kx4nTd3btzoSVZ5dJXMPToVwBJYkz67sF9Y8dZ5kYRV+rbk3C3/vVRZm bW88xBeP44zIJ3xfk8+6nCGD -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:20 2026 by rpki-client