$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: KDuyhHxhcqFTBXANGSgTDkk/GTba+jxdgQutVC0f3gs= Subject key identifier: C7:2B:46:88:50:02:42:31:45:FA:0D:E9:F5:44:03:03:63:84:35:55 Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 8C Signing time: Thu 23 Jul 2026 09:25:17 +0000 Manifest this update: Thu 23 Jul 2026 09:25:17 +0000 Manifest next update: Thu 30 Jul 2026 09:25:17 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: upTquSZ/ubQ3JmELj9syD2cD79scMmIwamTEWPSYMWI=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: TiQZcsUf6hmm4Z9q41HFXcSU+c6S5y0lWjoRYfK9XxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Jul 23 09:25:17 2026 GMT Not After : Jul 30 09:25:17 2026 GMT Subject: CN=6a61ddfd-02ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:0d:74:d7:e5:d5:82:10:7b:0c:2f:d9:c6: 39:37:c9:17:44:82:79:69:1d:46:28:ab:85:b7:8f: ef:43:38:72:40:1f:4d:f6:db:a6:0a:f5:6d:47:ba: 0d:77:95:d8:ed:30:d1:49:25:f6:c5:1f:e3:44:45: 46:82:98:c9:b0:ae:b9:24:5d:c5:96:19:ca:9d:f1: 2c:e0:27:6f:95:62:49:37:1e:27:56:95:56:fe:e4: 9d:7c:18:ad:d8:ab:68:48:e1:00:43:fe:04:a5:eb: 59:f4:47:2b:1b:57:15:d3:1a:b3:af:61:6c:fd:c2: 2e:56:ff:4e:ea:b9:1e:ce:3b:66:0c:bc:9c:64:9e: 01:3a:10:3b:9b:12:f9:18:48:03:82:4a:02:9d:d4: 35:dc:07:14:af:02:45:ab:bb:09:4a:03:c2:13:59: dd:cb:e0:88:25:da:2d:63:3f:c8:b7:f9:9a:fb:c4: d3:04:83:0c:56:77:38:74:64:6f:03:50:6c:e6:9e: 9b:f4:3a:df:e3:d3:72:c1:47:ab:9e:71:1b:fe:9a: d3:04:e7:fa:93:f2:b3:0b:f2:b9:6a:25:df:6b:4e: 3c:8a:eb:e2:56:a7:c2:cd:7c:02:9c:92:75:e5:27: 74:e2:c6:ec:98:45:73:bd:24:46:1e:1e:28:24:78: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2B:46:88:50:02:42:31:45:FA:0D:E9:F5:44:03:03:63:84:35:55 X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:9a:75:88:e3:53:ed:dd:66:43:b4:49:49:99:4d:43:ff: 25:c6:a7:ae:e1:53:ff:0c:96:96:57:59:01:3e:db:af:3e:15: 3c:f0:ad:ed:55:5c:29:71:c8:8b:fd:46:9a:ea:71:e5:ef:f0: c5:d0:75:af:7f:4c:c4:03:91:bd:b8:9b:23:0b:f0:6c:ab:f9: 4b:4d:6f:e2:aa:c4:89:27:04:a4:fc:5c:2f:46:ac:a8:36:00: b3:1e:b9:76:4a:ce:c2:69:56:4c:51:24:1e:7e:74:50:67:70: b0:62:ff:42:b5:c0:88:33:cb:9b:63:32:2c:5e:63:82:d3:f8: 38:69:2f:42:8e:d5:2f:75:5b:ea:51:14:05:e8:5c:41:0c:1b: f9:54:f2:53:db:29:c1:1a:18:25:42:2e:c5:65:c7:5b:cc:b4: 85:1b:24:58:a6:6e:05:ef:63:d7:60:2e:44:44:8c:d9:c6:c9: 79:54:59:7b:6f:8d:6b:e1:da:f8:7d:13:0d:61:9a:41:11:4a: 68:59:da:1b:76:e7:40:bd:bb:4b:3a:ce:be:17:66:9e:d1:a8: b2:33:b4:c9:82:aa:cc:80:c4:4d:40:13:9b:37:60:1a:36:ce: 91:1e:54:85:7e:5a:6a:a2:92:ae:17:81:ef:0d:5a:82:db:89: 65:c7:30:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzMUUxMTAvBgNVBAUTKENEQzA1NTY5ODdFNTFCOTMzQkQ5NjJEN0VGNDU5NzFD QkFBN0EyQzMwHhcNMjYwNzIzMDkyNTE3WhcNMjYwNzMwMDkyNTE3WjAYMRYwFAYD VQQDEw02YTYxZGRmZC0wMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY8NdNfl1YIQewwv2cY5N8kXRIJ5aR1GKKuFt4/vQzhyQB9N9tumCvVtR7oN d5XY7TDRSSX2xR/jREVGgpjJsK65JF3FlhnKnfEs4CdvlWJJNx4nVpVW/uSdfBit 2KtoSOEAQ/4EpetZ9EcrG1cV0xqzr2Fs/cIuVv9O6rkezjtmDLycZJ4BOhA7mxL5 GEgDgkoCndQ13AcUrwJFq7sJSgPCE1ndy+CIJdotYz/It/ma+8TTBIMMVnc4dGRv A1Bs5p6b9Drf49NywUernnEb/prTBOf6k/KzC/K5aiXfa048iuviVqfCzXwCnJJ1 5Sd04sbsmEVzvSRGHh4oJHiOFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcrRohQ AkIxRfoN6fVEAwNjhDVVMB8GA1UdIwQYMBaAFM3AVWmH5RuTO9li1+9Flxy6p6LD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDMxRS80QTNERDFCMkI0 QkIxMUYwQTEzNTM3MjJDNEY5QUUwMi96Y0JWYVlmbEc1TTcyV0xYNzBXWEhMcW5v c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9zTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDMxRS80QTNERDFCMkI0QkIxMUYwQTEzNTM3MjJDNEY5QUUwMi96Y0JWYVlmbEc1 TTcyV0xYNzBXWEhMcW5vc00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/SadYjjU+3dZkO0SUmZTUP/JcanruFT/wyWlldZAT7brz4VPPCt7VVcKXHI i/1Gmupx5e/wxdB1r39MxAORvbibIwvwbKv5S01v4qrEiScEpPxcL0asqDYAsx65 dkrOwmlWTFEkHn50UGdwsGL/QrXAiDPLm2MyLF5jgtP4OGkvQo7VL3Vb6lEUBehc QQwb+VTyU9spwRoYJUIuxWXHW8y0hRskWKZuBe9j12AuRESM2cbJeVRZe2+Na+Ha +H0TDWGaQRFKaFnaG3bnQL27SzrOvhdmntGosjO0yYKqzIDETUATmzdgGjbOkR5U hX5aaqKSrheB7w1agtuJZccwtg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:08:52 2026 by rpki-client