$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: i3zgPxStf488kIY5beRdTrFxTqhcwSUBLraPq5W5Yak= Subject key identifier: C5:53:38:97:CA:CF:91:B9:5B:2A:32:C8:8F:1E:84:60:A7:6F:C7:AB Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0D16 Signing time: Wed 22 Jul 2026 18:35:01 +0000 Manifest this update: Wed 22 Jul 2026 18:35:00 +0000 Manifest next update: Wed 29 Jul 2026 18:35:00 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: aycLkinQIA6XkooL7FjOq+Di/YC2z7JJW5ft3/7PyJk=) 2: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: xhv9klMH7WY9g3J7ol55oSW0zPIjpCPV6bNDdN9bbrM=) 3: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Wt4x3BfITYgEJpfJfRMRvuhFDSw9mC2fKJBIZ/u4oik=) 4: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: Y8iM/MKUEXQVyE05jFr0puje86YlCeOzhufaO/pUc48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Jul 22 18:35:00 2026 GMT Not After : Jul 29 18:35:00 2026 GMT Subject: CN=6a610d55-87ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:9b:e9:1c:58:ee:82:24:50:a4:09:7d:6f: f9:17:db:b4:ca:ae:01:5f:c6:48:f7:a0:22:a8:35: 13:40:17:5d:93:fe:02:fc:ca:47:d2:f0:33:2c:17: 0b:c8:f1:f2:38:9b:a2:a0:01:8e:c9:e8:7b:02:e9: bd:8f:d2:bb:04:88:50:f2:c0:01:47:9f:be:ea:cd: be:89:16:6c:81:5b:04:bf:aa:c4:ae:65:20:57:d5: 37:7c:0a:30:ac:43:8f:2c:cc:3d:70:0c:b3:48:05: d7:4c:2b:24:c1:26:48:3e:70:cf:5d:72:ba:59:e8: 50:28:9b:36:49:83:7b:4d:98:a0:eb:f8:ed:1a:17: 74:28:75:20:6b:ef:12:0d:9e:88:f9:cf:d2:ac:74: 32:f4:9e:91:78:57:17:82:3b:58:60:40:b6:80:ca: 57:bc:2a:74:dd:f1:70:75:51:a0:18:ab:64:b2:b8: ea:71:89:f4:e3:7f:49:6c:6e:af:61:eb:08:46:78: 83:6a:0a:e1:51:64:25:e6:c8:00:3f:c5:6d:75:88: d0:ea:28:77:a0:6b:b8:1b:7b:7d:00:37:c5:47:f0: 2e:99:72:a3:30:38:90:dd:54:11:62:0f:87:1b:e6: be:5f:b3:44:38:23:35:51:3e:55:9b:32:cb:ec:aa: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:53:38:97:CA:CF:91:B9:5B:2A:32:C8:8F:1E:84:60:A7:6F:C7:AB X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:10:ae:bd:72:d4:a1:23:f0:a2:50:5d:38:c8:ab:fd:a0:b1: a7:17:ae:79:7d:31:01:eb:9d:0c:94:d0:fa:6a:b7:48:bf:19: 71:9b:e5:8a:ff:da:a7:3c:ec:1d:c1:3b:ea:ef:0b:b3:bb:23: 25:af:f0:71:eb:18:e4:a9:60:4a:5b:85:03:1a:fa:f3:a6:b3: 73:53:cf:3f:de:3b:ec:6b:aa:6f:5b:de:34:46:05:69:77:78: 9d:41:06:31:32:53:fc:39:fe:82:58:66:47:84:ae:33:af:f2: c0:69:f6:d2:e2:8e:75:55:ab:b2:fc:39:00:59:5a:33:b5:ba: 55:fa:9e:93:b7:fa:4b:17:66:53:a8:bd:6a:6f:20:c3:5d:0d: 1c:41:b9:5d:44:6f:0b:22:bf:56:f1:64:1d:d4:8d:07:d2:66: 72:d9:b8:90:09:29:0d:a1:41:52:e6:cc:21:30:3b:2a:16:b6: 87:ca:af:d7:f9:76:05:fd:c7:94:1f:2d:1c:0c:6d:54:45:34: 47:5f:60:78:f3:34:1d:94:e1:e7:68:b7:e7:93:8d:09:1b:0f: d3:1c:94:b6:e5:8d:4f:79:84:cf:35:22:32:8e:8a:36:90:25: 24:d8:9d:17:0a:35:c7:42:cd:36:0a:1a:07:69:6c:35:1e:bb: ca:6a:4d:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYwNzIyMTgzNTAwWhcNMjYwNzI5MTgzNTAwWjAYMRYwFAYD VQQDEw02YTYxMGQ1NS04N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjqeb6RxY7oIkUKQJfW/5F9u0yq4BX8ZI96AiqDUTQBddk/4C/MpH0vAzLBcL yPHyOJuioAGOyeh7Aum9j9K7BIhQ8sABR5++6s2+iRZsgVsEv6rErmUgV9U3fAow rEOPLMw9cAyzSAXXTCskwSZIPnDPXXK6WehQKJs2SYN7TZig6/jtGhd0KHUga+8S DZ6I+c/SrHQy9J6ReFcXgjtYYEC2gMpXvCp03fFwdVGgGKtksrjqcYn0439JbG6v YesIRniDagrhUWQl5sgAP8VtdYjQ6ih3oGu4G3t9ADfFR/AumXKjMDiQ3VQRYg+H G+a+X7NEOCM1UT5VmzLL7Kq5jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVTOJfK z5G5WyoyyI8ehGCnb8erMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqxCuvXLUoSPwolBdOMir/aCxpxeueX0xAeudDJTQ+mq3SL8ZcZvliv/apzzs HcE76u8Ls7sjJa/wcesY5KlgSluFAxr686azc1PPP9477Guqb1veNEYFaXd4nUEG MTJT/Dn+glhmR4SuM6/ywGn20uKOdVWrsvw5AFlaM7W6Vfqek7f6SxdmU6i9am8g w10NHEG5XURvCyK/VvFkHdSNB9Jmctm4kAkpDaFBUubMITA7Kha2h8qv1/l2Bf3H lB8tHAxtVEU0R19gePM0HZTh52i355ONCRsP0xyUtuWNT3mEzzUiMo6KNpAlJNid Fwo1x0LNNgoaB2lsNR67ympNSQ== -----END CERTIFICATE-----Generated at Fri Jul 24 18:06:09 2026 by rpki-client