$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: bvE4IoGHT+VnJvKNbM3e7/y4Sc2h2K77RAsF3A8tBvc= Subject key identifier: 89:89:8D:11:4A:43:7F:06:62:C4:EC:3D:87:95:4F:5A:75:CF:FF:0D Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 0587 Signing time: Thu 23 Jul 2026 00:03:46 +0000 Manifest this update: Thu 23 Jul 2026 00:03:46 +0000 Manifest next update: Thu 30 Jul 2026 00:03:46 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: iXPEuMTOA6e4T8/r/OnWtFa4u6bZ2rdLDx2f0TkeIsI=) 2: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=) 3: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Jul 23 00:03:46 2026 GMT Not After : Jul 30 00:03:46 2026 GMT Subject: CN=6a615a62-b60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:2d:68:a5:8e:ad:96:53:3a:dc:eb:d0:79: 7e:62:1e:1a:de:db:20:f5:81:d2:4a:f1:2d:93:16: a0:16:99:cc:5e:3c:68:e8:df:7b:eb:9e:7b:f8:2f: fe:23:0a:a0:f5:a3:14:c4:b3:35:ca:f6:f5:6e:a0: 55:6b:56:af:db:10:21:09:11:d7:3b:bc:e7:46:78: b8:e1:2c:6c:06:5f:fe:f4:f6:f8:5b:5b:bb:e0:f4: 09:90:4d:0a:d2:07:e7:4d:75:83:96:7f:ca:cd:ac: 0e:3b:a0:07:b5:19:8f:2a:c2:43:73:f7:71:df:09: a9:d7:1b:a3:91:3f:e3:5e:ba:c0:ac:69:0c:21:17: f7:4c:ea:f3:25:d9:a9:8e:a6:43:bc:23:b8:91:4d: cb:e7:8c:1c:57:a7:69:69:e4:00:38:46:0f:58:b8: 40:b7:68:72:68:c4:92:0b:0f:4a:c3:51:56:f0:35: 34:78:92:7f:23:30:91:88:82:93:09:32:84:71:ea: 5c:68:ef:85:07:e9:f4:6c:bd:ab:c1:ee:5c:d8:58: b6:aa:dc:28:6b:ac:18:d6:59:1b:e0:82:dd:58:af: 40:e8:ac:0c:c9:e2:e7:f6:a3:8e:ff:33:4a:de:14: 6a:9b:e7:33:ce:da:fb:4a:16:74:40:72:8e:d5:54: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:89:8D:11:4A:43:7F:06:62:C4:EC:3D:87:95:4F:5A:75:CF:FF:0D X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d1:07:8d:b7:d8:ff:d3:1f:52:6b:46:0c:83:84:9a:e7:75: 80:91:ca:18:08:e2:ab:e6:6e:92:20:2b:d9:5e:36:5d:30:34: 5d:eb:fd:88:cc:b0:33:d5:42:9e:b9:2a:99:23:a3:72:29:a5: f7:41:d8:a1:30:a8:a6:cc:6b:5a:43:e2:86:40:2c:a4:9e:69: 58:6f:de:5c:44:ce:e6:7e:c4:b5:b3:c6:c6:bf:8c:16:5d:59: 85:76:e6:e0:6c:77:26:5d:95:bd:d0:95:83:2b:7e:74:2f:fb: 02:fd:69:96:ba:e6:c7:06:a3:ba:c0:42:e1:17:0f:81:31:74: 44:a8:21:df:55:c8:f0:c9:91:b7:44:5f:a5:30:b7:b3:24:fd: 30:d9:b8:0c:c0:9d:52:2b:4f:a5:98:f7:bc:87:b8:e3:7f:07: a7:d2:ac:4f:b5:62:9d:37:ee:4e:c9:b1:68:93:7d:87:3a:38: 72:db:c1:df:61:56:dd:c1:ab:02:0a:21:46:01:7d:5a:ef:6d: d3:56:78:6f:0b:03:85:f5:c3:7d:8c:d6:75:06:03:ca:24:dd: 9b:25:1f:e9:57:cd:7a:07:16:e1:28:e5:b6:13:3d:a1:ca:a5: 78:ca:bb:6f:7a:e1:1e:c4:76:55:b9:36:65:14:b0:e5:d7:f4: a2:44:9a:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjYwNzIzMDAwMzQ2WhcNMjYwNzMwMDAwMzQ2WjAYMRYwFAYD VQQDEw02YTYxNWE2Mi1iNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRAtaKWOrZZTOtzr0Hl+Yh4a3tsg9YHSSvEtkxagFpnMXjxo6N976557+C/+ Iwqg9aMUxLM1yvb1bqBVa1av2xAhCRHXO7znRni44SxsBl/+9Pb4W1u74PQJkE0K 0gfnTXWDln/KzawOO6AHtRmPKsJDc/dx3wmp1xujkT/jXrrArGkMIRf3TOrzJdmp jqZDvCO4kU3L54wcV6dpaeQAOEYPWLhAt2hyaMSSCw9Kw1FW8DU0eJJ/IzCRiIKT CTKEcepcaO+FB+n0bL2rwe5c2Fi2qtwoa6wY1lkb4ILdWK9A6KwMyeLn9qOO/zNK 3hRqm+czztr7ShZ0QHKO1VRC2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImJjRFK Q38GYsTsPYeVT1p1z/8NMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhNEHjbfY/9MfUmtGDIOEmud1gJHKGAjiq+ZukiAr2V42XTA0Xev9iMywM9VC nrkqmSOjciml90HYoTCopsxrWkPihkAspJ5pWG/eXETO5n7EtbPGxr+MFl1ZhXbm 4Gx3Jl2VvdCVgyt+dC/7Av1plrrmxwajusBC4RcPgTF0RKgh31XI8MmRt0RfpTC3 syT9MNm4DMCdUitPpZj3vIe4438Hp9KsT7VinTfuTsmxaJN9hzo4ctvB32FW3cGr AgohRgF9Wu9t01Z4bwsDhfXDfYzWdQYDyiTdmyUf6VfNegcW4SjlthM9ocqleMq7 b3rhHsR2Vbk2ZRSw5df0okSa9w== -----END CERTIFICATE-----Generated at Thu Jul 23 23:00:36 2026 by rpki-client