$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json) Hash identifier: A0uC5aAfCJGRr9D9Krq0YWPRbT9RB85/0WXxqo6FZMc= Subject key identifier: 7D:C7:32:8E:CC:41:8D:3F:7C:2D:8C:9A:AD:80:3D:AD:27:69:F7:B0 Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft Manifest number: CE Signing time: Thu 23 Jul 2026 08:34:16 +0000 Manifest this update: Thu 23 Jul 2026 08:34:16 +0000 Manifest next update: Thu 30 Jul 2026 08:34:16 +0000 Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: mJtr2p5XPcARB2HrbG73VhI1iSowY21yvuZLn2TNJ2U=) 2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: a0gJVidh3CzBFwIa6hJB8PakgEK14/bCQvJ2r5FU3Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Validity Not Before: Jul 23 08:34:16 2026 GMT Not After : Jul 30 08:34:16 2026 GMT Subject: CN=6a61d208-1c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:82:4d:ef:75:65:91:9d:70:a6:55:0f:d3: aa:e0:bd:ef:98:ce:32:da:98:e8:d3:e6:b5:88:04: 0f:03:d4:61:30:a6:a5:1f:7b:6d:34:4b:d5:db:94: 41:a0:ac:f6:d0:00:06:7b:fa:69:16:29:65:b3:7a: c1:87:ef:d4:1b:89:9e:50:01:dd:10:00:68:56:00: d8:80:59:fb:37:50:bc:1e:8d:a9:47:46:f8:eb:92: f0:bc:23:cb:99:47:8e:74:ae:03:c2:d7:79:cf:31: ea:b4:94:ea:a4:1e:8a:67:42:33:51:5c:a5:40:1d: 9d:1b:c9:e0:06:af:aa:b0:af:1b:fc:c9:9a:a3:7b: 91:b0:af:64:91:fd:30:52:a6:51:d4:e7:ec:9f:e8: 26:44:e9:6d:56:ae:90:8a:1b:cf:40:22:fe:04:32: 46:96:a6:e4:23:64:40:b0:77:47:a2:ab:8b:df:03: 65:c9:31:24:cf:48:64:40:db:3a:69:dc:7e:ce:d6: ea:04:95:c7:6a:7e:49:9a:14:e4:94:90:b2:4a:ad: 47:63:71:d6:2d:c2:ae:d5:54:2d:9c:35:04:f7:3d: e1:1b:eb:93:2b:30:c6:ce:bb:41:f4:b4:c2:34:d0: ba:ec:4f:ec:41:1e:25:e0:af:1f:31:bb:b5:be:f9: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:32:8E:CC:41:8D:3F:7C:2D:8C:9A:AD:80:3D:AD:27:69:F7:B0 X509v3 Authority Key Identifier: keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:19:08:2c:4e:0b:9a:78:a5:7f:90:ca:68:9c:e7:9e:44:41: 69:c5:cb:33:86:c2:94:48:af:a7:10:36:7c:d9:1b:75:99:bb: e5:1e:e6:b7:00:75:0a:dc:15:3c:dd:87:d3:34:b7:46:7d:2a: 87:7e:1d:9e:06:3c:7e:ae:5f:67:51:b5:48:06:99:70:e2:a8: 2f:04:d8:ac:f9:37:e4:69:d0:85:7d:16:de:a2:5d:57:39:64: 96:65:a0:5b:b7:6f:3c:15:bc:2d:c6:a7:8a:1c:81:48:65:b1: 58:61:d1:7a:5e:20:89:8e:a8:53:74:cb:2d:7b:b3:3d:a0:cc: 9a:05:4c:89:77:30:56:4d:86:a6:6a:34:ef:c8:ab:ce:8a:73: 69:d3:c0:9a:c8:40:05:25:79:5f:5e:2c:d1:2c:e5:c9:87:7b: b3:c3:91:c3:07:4a:7e:57:16:1c:eb:c1:00:4c:85:ae:a4:f2: 72:0b:de:24:c4:d4:fc:ae:ef:71:72:2b:0b:92:50:12:f0:4b: e1:a9:eb:0e:ab:d3:fe:1b:75:de:e8:d6:df:e9:fd:b5:a0:a5: df:aa:bf:a5:2e:ad:7a:b4:d8:51:ef:4b:0c:b0:e5:3d:84:91: 70:1f:57:62:d6:fe:6a:f9:f7:f1:2d:b6:a7:e2:39:79:2e:d6: 9a:e7:3c:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyM0ExMTAvBgNVBAUTKENDNDRCNjdCRDE4RjQ1RjZFMTM3QURFNDczMTMzNUE1 NTFBNjYxMjcwHhcNMjYwNzIzMDgzNDE2WhcNMjYwNzMwMDgzNDE2WjAYMRYwFAYD VQQDEw02YTYxZDIwOC0xYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeiCTe91ZZGdcKZVD9Oq4L3vmM4y2pjo0+a1iAQPA9RhMKalH3ttNEvV25RB oKz20AAGe/ppFills3rBh+/UG4meUAHdEABoVgDYgFn7N1C8Ho2pR0b465LwvCPL mUeOdK4Dwtd5zzHqtJTqpB6KZ0IzUVylQB2dG8ngBq+qsK8b/Mmao3uRsK9kkf0w UqZR1Ofsn+gmROltVq6QihvPQCL+BDJGlqbkI2RAsHdHoquL3wNlyTEkz0hkQNs6 adx+ztbqBJXHan5JmhTklJCySq1HY3HWLcKu1VQtnDUE9z3hG+uTKzDGzrtB9LTC NNC67E/sQR4l4K8fMbu1vvmIywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3HMo7M QY0/fC2Mmq2APa0nafewMB8GA1UdIwQYMBaAFMxEtnvRj0X24Tet5HMTNaVRpmEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIzQS9FNzVCODc4QzRD REQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJmYmhONjNrY3hNMXBWR21Z U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pFUzJlOUdQUmZiaE42M2tjeE0xcFZHbVlTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIzQS9FNzVCODc4QzRDREQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJm YmhONjNrY3hNMXBWR21ZU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbBkILE4Lmnilf5DKaJznnkRBacXLM4bClEivpxA2fNkbdZm75R7mtwB1CtwV PN2H0zS3Rn0qh34dngY8fq5fZ1G1SAaZcOKoLwTYrPk35GnQhX0W3qJdVzlklmWg W7dvPBW8LcanihyBSGWxWGHRel4giY6oU3TLLXuzPaDMmgVMiXcwVk2Gpmo078ir zopzadPAmshABSV5X14s0SzlyYd7s8ORwwdKflcWHOvBAEyFrqTycgveJMTU/K7v cXIrC5JQEvBL4anrDqvT/ht13ujW3+n9taCl36q/pS6terTYUe9LDLDlPYSRcB9X Ytb+avn38S22p+I5eS7Wmuc8EA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:38 2026 by rpki-client