$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: AEMK4WLMlZlj9rQFMUhf2TD9HRQ4C3wrVqEhXpBZucE= Subject key identifier: ED:16:DA:C4:4B:CC:AC:F0:0A:29:5A:AF:7F:B9:53:97:E9:B2:CC:86 Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: C2 Signing time: Thu 23 Jul 2026 08:46:14 +0000 Manifest this update: Thu 23 Jul 2026 08:46:13 +0000 Manifest next update: Thu 30 Jul 2026 08:46:13 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: 87UfbdYRPwbp9b97R0fh0eXjlvaohpOH0xTcrUU+U/Q=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 3eyoBtxWZnVo9d8QTWGg5n0zVCETmWq673Im+Ia8NGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Jul 23 08:46:13 2026 GMT Not After : Jul 30 08:46:13 2026 GMT Subject: CN=6a61d4d6-8a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:06:61:88:cd:cf:12:89:d6:66:ab:d2:7d: 6f:a9:f7:f5:0f:93:56:9a:8f:05:97:9c:69:d6:9e: ce:07:46:d1:ca:ab:4e:ce:78:9d:e0:cc:99:06:1d: e3:bc:8b:2a:f0:3f:a1:70:d1:e7:b3:01:2f:29:87: b3:b4:4b:5c:fc:eb:8b:24:50:41:ae:e5:b1:7d:8c: 5d:12:14:41:1d:3c:7d:ef:da:91:f4:4f:9f:36:16: ad:54:fb:70:7c:04:78:3b:b7:8d:9f:ab:3d:80:4f: 33:58:bd:7b:c8:2d:fe:ce:b1:cc:6c:63:45:fa:84: 5d:af:e8:a8:14:28:53:d1:52:11:26:26:32:03:35: 81:3a:b4:0a:85:63:1e:df:d7:1c:ba:50:70:5c:5d: f8:7c:72:cc:70:e5:17:bb:02:a2:77:d9:43:12:f8: 45:ec:08:78:f9:f2:ae:d1:f4:b1:76:06:a2:96:9b: 37:6e:61:1f:cc:ae:e4:b4:22:77:68:b4:ea:4c:f5: c6:78:e1:96:09:df:b8:60:ca:28:dc:02:32:5c:91: 80:4b:e9:b3:20:ff:ef:3b:14:59:26:99:d9:75:3c: 87:16:26:b8:b9:b4:52:ee:69:1d:63:cc:50:b4:59: c7:ee:3d:98:8b:6e:9d:42:50:8a:1a:cd:cb:05:70: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:16:DA:C4:4B:CC:AC:F0:0A:29:5A:AF:7F:B9:53:97:E9:B2:CC:86 X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0c:ca:f0:a5:8e:61:73:a9:3e:e8:e6:50:ab:a9:db:10:d5: 66:1e:a4:3d:43:75:66:60:c6:b5:d3:6a:a1:8c:37:33:31:25: aa:ab:14:69:19:cd:61:3c:36:e6:43:9e:d8:55:b1:c6:d2:cc: eb:ec:43:cc:79:97:09:2b:03:1d:96:61:d2:1f:f3:ee:c9:b4: a6:e0:95:6d:de:2c:1e:fd:e5:0a:90:1c:32:e6:85:a1:14:d4: 7b:3e:a9:e6:bc:30:84:db:a5:d1:d4:4a:13:0d:df:9d:9e:96: aa:93:e1:a9:8b:1a:e7:06:d6:53:e4:6c:3f:d3:ed:33:78:ae: 6f:5c:4a:7f:fb:56:fb:e7:e7:18:59:38:20:e8:90:0f:70:51: 78:39:35:a0:69:ef:5e:5b:6e:10:50:9e:26:3e:a0:ab:26:11: 5a:8b:e3:dd:d7:1f:db:ef:13:d7:60:b8:69:94:20:d6:02:8e: 54:11:42:0e:d5:aa:f1:fc:99:f7:6a:a3:9a:91:61:e1:30:86: f1:85:78:7e:ab:b8:04:2e:a2:88:04:a3:07:81:86:e1:e9:04: 81:82:95:6a:1e:74:e5:04:5c:d6:3d:38:05:9e:8c:78:be:19: 20:67:25:57:9a:fb:25:d8:fb:97:52:a5:93:01:1b:20:49:bc: 80:e0:65:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw M0QzRjdCMEQwHhcNMjYwNzIzMDg0NjEzWhcNMjYwNzMwMDg0NjEzWjAYMRYwFAYD VQQDEw02YTYxZDRkNi04YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuoGYYjNzxKJ1mar0n1vqff1D5NWmo8Fl5xp1p7OB0bRyqtOznid4MyZBh3j vIsq8D+hcNHnswEvKYeztEtc/OuLJFBBruWxfYxdEhRBHTx979qR9E+fNhatVPtw fAR4O7eNn6s9gE8zWL17yC3+zrHMbGNF+oRdr+ioFChT0VIRJiYyAzWBOrQKhWMe 39cculBwXF34fHLMcOUXuwKid9lDEvhF7Ah4+fKu0fSxdgailps3bmEfzK7ktCJ3 aLTqTPXGeOGWCd+4YMoo3AIyXJGAS+mzIP/vOxRZJpnZdTyHFia4ubRS7mkdY8xQ tFnH7j2Yi26dQlCKGs3LBXDfVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0W2sRL zKzwCilar3+5U5fpssyGMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS85MDRGODcwQTYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYz NjdpWnB5R2NPZzhEMF9ldzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArAzK8KWOYXOpPujmUKup2xDVZh6kPUN1ZmDGtdNqoYw3MzElqqsUaRnNYTw2 5kOe2FWxxtLM6+xDzHmXCSsDHZZh0h/z7sm0puCVbd4sHv3lCpAcMuaFoRTUez6p 5rwwhNul0dRKEw3fnZ6WqpPhqYsa5wbWU+RsP9PtM3iub1xKf/tW++fnGFk4IOiQ D3BReDk1oGnvXltuEFCeJj6gqyYRWovj3dcf2+8T12C4aZQg1gKOVBFCDtWq8fyZ 92qjmpFh4TCG8YV4fqu4BC6iiASjB4GG4ekEgYKVah505QRc1j04BZ6MeL4ZIGcl V5r7Jdj7l1KlkwEbIEm8gOBlkw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:33:45 2026 by rpki-client