$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: +DBRveWOEPiXhr+29l02cdp9rjWx5wTfB4zRY0sPWBI= Subject key identifier: D9:24:5A:8F:90:F1:21:78:76:12:40:6C:5B:5B:E5:D3:DF:DF:84:12 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0251 Signing time: Thu 23 Jul 2026 03:33:59 +0000 Manifest this update: Thu 23 Jul 2026 03:33:59 +0000 Manifest next update: Thu 30 Jul 2026 03:33:59 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: nSA17Joc2QzX8bQXrtIUciOUYnhZ9uevGRXwfhFsNK4=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jul 23 03:33:59 2026 GMT Not After : Jul 30 03:33:59 2026 GMT Subject: CN=6a618ba7-5408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:ec:5d:ff:a4:29:19:1c:c1:98:43:6a:a5: 18:33:79:13:8d:aa:4f:5d:5e:05:8f:fb:dd:44:d8: 7a:54:40:a9:1a:e3:08:6e:a8:c6:0b:24:ca:f7:e8: e9:b4:ac:da:80:aa:7c:bd:a9:c9:80:d8:f0:72:1d: 23:b4:75:49:d9:94:53:90:b4:20:93:f1:1f:f3:cc: 91:ec:86:21:15:7c:2b:b6:1f:df:9f:04:b9:3d:89: 99:06:1c:51:41:32:e3:61:91:11:74:d9:f1:9d:3e: d8:f8:55:d3:df:e3:1f:af:7f:60:b2:d1:59:32:1c: 47:69:0b:9b:e1:80:9f:16:a6:e0:e0:1f:1b:fe:26: 7f:7b:33:16:44:e8:d3:f3:3a:a9:43:85:06:f7:aa: 52:95:d8:b0:91:fd:76:b7:f9:c2:f5:33:81:dc:af: a9:65:79:ec:23:74:52:27:e5:7b:d1:5d:aa:c4:8b: 8a:2b:7a:8c:72:87:95:4e:8c:82:30:48:75:57:a3: 5a:7c:db:03:9f:43:d5:3d:0b:f4:8b:29:c9:7a:0d: 24:80:3b:3b:d1:79:83:85:18:dd:56:48:ba:de:f6: 3a:6e:aa:64:c2:34:2f:13:fc:b4:1a:cb:a0:48:bc: c9:b5:6e:84:91:96:42:de:b2:fd:de:51:e1:7c:48: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:24:5A:8F:90:F1:21:78:76:12:40:6C:5B:5B:E5:D3:DF:DF:84:12 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:b4:64:3f:3c:6c:97:91:9d:43:0d:5e:fa:97:dd:11:9d:42: 6c:f0:9c:23:95:78:66:87:5c:4d:17:64:46:e2:4d:52:ac:a7: 10:15:87:6b:e8:db:f5:8c:01:66:1f:7e:71:83:da:d8:45:fb: 9a:19:5c:19:6c:82:bf:bb:3e:7f:d3:1f:81:eb:35:b3:d3:5e: f3:75:92:b6:9f:98:b3:fa:a9:7f:cb:70:bb:3f:d6:73:8d:a9: d1:4a:0b:2b:83:c4:3a:58:42:46:54:7b:4d:c0:96:93:2c:98: ee:72:b4:96:1a:6a:32:29:e4:ae:eb:bd:ac:7d:b7:e5:05:89: 7b:94:1d:fe:be:24:79:81:b3:fe:86:f9:3a:ef:e1:63:42:e9: 97:ac:5f:9a:ea:ae:ce:41:92:b3:79:17:4e:d3:53:48:b0:ab: 50:a0:60:ad:38:2a:14:7a:8f:ef:2a:28:61:ef:b0:48:95:c1: 2e:57:9d:1a:72:18:c0:1d:72:a6:77:65:61:09:bd:e6:de:29: 63:36:87:1a:ca:10:2b:cc:8b:9d:33:ac:da:2f:9d:f6:20:ab: 0e:91:e8:d1:f9:aa:57:d9:eb:b1:fe:aa:c6:21:d6:3d:7f:97: bf:9f:d1:1b:33:5f:e3:af:89:ac:bc:31:c6:28:e9:d7:ac:dd: 30:4e:51:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNzIzMDMzMzU5WhcNMjYwNzMwMDMzMzU5WjAYMRYwFAYD VQQDEw02YTYxOGJhNy01NDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD7sXf+kKRkcwZhDaqUYM3kTjapPXV4Fj/vdRNh6VECpGuMIbqjGCyTK9+jp tKzagKp8vanJgNjwch0jtHVJ2ZRTkLQgk/Ef88yR7IYhFXwrth/fnwS5PYmZBhxR QTLjYZERdNnxnT7Y+FXT3+Mfr39gstFZMhxHaQub4YCfFqbg4B8b/iZ/ezMWROjT 8zqpQ4UG96pSldiwkf12t/nC9TOB3K+pZXnsI3RSJ+V70V2qxIuKK3qMcoeVToyC MEh1V6NafNsDn0PVPQv0iynJeg0kgDs70XmDhRjdVki63vY6bqpkwjQvE/y0Gsug SLzJtW6EkZZC3rL93lHhfEjdJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkkWo+Q 8SF4dhJAbFtb5dPf34QSMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzrRkPzxsl5GdQw1e+pfdEZ1CbPCcI5V4ZodcTRdkRuJNUqynEBWHa+jb9YwB Zh9+cYPa2EX7mhlcGWyCv7s+f9Mfges1s9Ne83WStp+Ys/qpf8twuz/Wc42p0UoL K4PEOlhCRlR7TcCWkyyY7nK0lhpqMinkruu9rH235QWJe5Qd/r4keYGz/ob5Ou/h Y0Lpl6xfmuquzkGSs3kXTtNTSLCrUKBgrTgqFHqP7yooYe+wSJXBLledGnIYwB1y pndlYQm95t4pYzaHGsoQK8yLnTOs2i+d9iCrDpHo0fmqV9nrsf6qxiHWPX+Xv5/R GzNf46+JrLwxxijp16zdME5Rjg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:38 2026 by rpki-client