$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: fbKqRIYObBEduxBLtzrMiHlNGV+kysPXKdNikX8MRgI= Subject key identifier: 95:94:A2:3A:DE:10:2C:25:19:86:B0:DF:5C:E2:68:C4:5A:CC:FA:8A Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2E33 Signing time: Wed 22 Jul 2026 15:34:06 +0000 Manifest this update: Wed 22 Jul 2026 15:34:05 +0000 Manifest next update: Wed 29 Jul 2026 15:34:05 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: D8cKQYw4tWR6wavOUeedvljIZaIdTSqc2omZWlrdpXM=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11865 (0x2e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Jul 22 15:34:05 2026 GMT Not After : Jul 29 15:34:05 2026 GMT Subject: CN=6a60e2ed-e843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:19:e6:09:b5:d0:4c:86:62:d4:3a:23:83: 29:31:b2:4c:8c:9e:78:da:a9:85:85:ef:bf:12:b0: bf:15:aa:22:26:ba:b2:14:09:be:fe:8c:65:75:c3: a7:b4:3e:e9:3a:ad:80:64:54:5a:1f:80:d7:f0:4b: 33:85:19:c7:19:c2:1a:47:ae:02:8f:d0:e2:dd:ae: cd:a7:37:51:48:c6:df:a2:8a:be:b8:db:6c:d9:e2: 1d:d6:ba:52:57:5d:15:6f:00:93:ee:03:f2:f3:49: 20:97:06:5b:a8:a8:68:db:25:2e:91:06:fe:c5:19: b6:73:9f:ba:e8:52:6e:35:40:31:2d:f1:d7:a6:3d: f1:03:21:69:3e:ef:62:17:d5:ad:0c:ba:14:ab:cd: 04:68:5e:39:d6:69:13:7e:a0:76:58:86:7f:83:8a: 0d:52:55:d2:cc:55:37:78:1c:e5:5f:08:32:d4:99: 21:e5:4d:02:79:f5:7e:60:6c:34:15:e4:4a:37:cb: 09:7f:7c:b6:da:36:45:3b:7c:17:ad:6d:03:1e:35: 3d:07:26:34:ea:ec:98:50:9c:c6:ad:9d:63:b6:09: b9:bd:c5:db:49:9b:76:ff:35:ee:87:83:07:7f:34: bc:cd:f7:06:71:4d:66:c1:9d:a2:01:c3:63:aa:9c: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:94:A2:3A:DE:10:2C:25:19:86:B0:DF:5C:E2:68:C4:5A:CC:FA:8A X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:fc:31:81:4e:62:9d:a8:63:34:e3:91:41:ae:b9:38:32:47: 07:21:b5:02:09:0c:f4:8f:d8:6e:b0:e1:b5:fd:0a:2e:9b:09: eb:ac:e8:f1:88:87:5c:34:e9:9f:c2:b5:f3:11:3d:f5:9f:dd: 19:a6:f3:78:c6:60:b9:7e:6c:1f:88:f8:6a:3b:f4:90:1b:6c: 58:fb:94:59:ab:62:58:36:fb:84:e4:78:c9:aa:bb:9f:1e:84: 9e:ff:a6:f5:71:03:95:b2:3c:79:95:46:9a:90:e5:fe:0c:57: 01:96:5c:1c:29:b9:f2:a4:b4:13:c7:e9:41:e4:ac:1c:1d:b4: ce:49:f3:cc:60:d5:e4:3a:1f:b7:9a:ed:08:0e:fb:a0:ee:e3: fb:9e:51:35:ed:37:11:b3:eb:d0:53:d3:2d:34:40:7a:c7:07: fa:94:24:25:f8:ae:72:9a:87:7d:17:00:bd:59:08:88:9b:82: 5f:cc:94:51:e0:43:fd:aa:8d:05:84:99:c9:72:f2:2c:fe:ab: 1b:7d:d3:59:ea:91:8b:c3:75:b4:f2:cf:7a:aa:0d:a6:40:7c: f7:fa:6b:ef:f1:28:41:6f:7e:be:3d:e9:06:05:46:50:f5:58: 5e:19:76:80:ca:7a:cf:c1:a5:0d:44:cf:3f:10:a3:f6:42:c9: fe:b9:bf:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwNzIyMTUzNDA1WhcNMjYwNzI5MTUzNDA1WjAYMRYwFAYD VQQDEw02YTYwZTJlZC1lODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2I8Z5gm10EyGYtQ6I4MpMbJMjJ542qmFhe+/ErC/FaoiJrqyFAm+/oxldcOn tD7pOq2AZFRaH4DX8EszhRnHGcIaR64Cj9Di3a7NpzdRSMbfooq+uNts2eId1rpS V10VbwCT7gPy80kglwZbqKho2yUukQb+xRm2c5+66FJuNUAxLfHXpj3xAyFpPu9i F9WtDLoUq80EaF451mkTfqB2WIZ/g4oNUlXSzFU3eBzlXwgy1Jkh5U0CefV+YGw0 FeRKN8sJf3y22jZFO3wXrW0DHjU9ByY06uyYUJzGrZ1jtgm5vcXbSZt2/zXuh4MH fzS8zfcGcU1mwZ2iAcNjqpzGhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWUojre ECwlGYaw31ziaMRazPqKMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyvwxgU5inahjNOORQa65ODJHByG1AgkM9I/YbrDhtf0KLpsJ66zo8YiHXDTp n8K18xE99Z/dGabzeMZguX5sH4j4ajv0kBtsWPuUWatiWDb7hOR4yaq7nx6Env+m 9XEDlbI8eZVGmpDl/gxXAZZcHCm58qS0E8fpQeSsHB20zknzzGDV5Doft5rtCA77 oO7j+55RNe03EbPr0FPTLTRAescH+pQkJfiucpqHfRcAvVkIiJuCX8yUUeBD/aqN BYSZyXLyLP6rG33TWeqRi8N1tPLPeqoNpkB89/pr7/EoQW9+vj3pBgVGUPVYXhl2 gMp6z8GlDUTPPxCj9kLJ/rm/+w== -----END CERTIFICATE-----Generated at Fri Jul 24 16:00:45 2026 by rpki-client