$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: r8IonhPc7RhCINcb3nSAm7IiTq5373vF8H4iR/AluHU= Subject key identifier: CA:8E:47:53:9A:A7:01:74:64:8C:91:31:41:FC:76:85:B2:49:7D:FE Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0D0C Signing time: Wed 22 Jul 2026 18:32:06 +0000 Manifest this update: Wed 22 Jul 2026 18:32:06 +0000 Manifest next update: Wed 29 Jul 2026 18:32:06 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: gPuwWQKfLInR6QyVjrGwwN3WrcNy7qKR+C5nSYtYOco=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: AajdPkJ4rEa4vqdqvJqj9eo6LBkmjEKm6+u/Jv10pOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Jul 22 18:32:06 2026 GMT Not After : Jul 29 18:32:06 2026 GMT Subject: CN=6a610ca6-55e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:fb:4f:6c:ac:61:f8:3a:89:e4:80:f3:3b: b1:0a:78:98:82:a9:ce:ce:84:09:52:15:05:c4:a4: 37:fa:ff:26:67:2a:6f:f9:a6:4f:39:2f:e1:cc:fc: 85:af:72:58:af:a9:45:5d:7e:f7:c7:46:0e:ce:a2: b7:41:b2:0e:6c:fc:80:ba:d5:20:4a:da:b6:21:67: cd:ef:2f:87:9f:1b:d6:f3:f2:f7:3d:ba:3e:e5:56: f3:f6:17:cd:bf:2a:6e:02:7e:61:1b:51:ba:bf:06: e5:b1:b5:9d:ec:a4:10:79:f3:ca:06:97:98:a7:69: f8:98:4c:65:cd:67:22:ae:3e:b4:39:48:cd:ba:62: 31:fa:56:1b:1a:1f:c3:ae:14:1e:13:61:0a:23:5e: 3d:28:b7:8d:69:46:0b:63:8e:2c:94:3b:7c:7d:f7: 3c:43:39:d2:7b:be:d5:69:70:d1:9e:b6:ed:11:2f: 25:de:41:c2:73:3c:26:60:b4:fc:aa:0e:23:fa:7d: 7f:57:8c:18:0a:71:dd:dd:0b:bd:e7:68:d3:c1:e9: ae:f1:02:81:55:cc:d0:48:a2:56:67:00:2e:0a:47: e2:56:2f:cf:bc:ef:98:5b:47:1b:4f:2e:05:dd:8d: 9d:23:a4:f7:6d:a8:b6:94:74:00:5a:0d:31:fa:15: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:47:53:9A:A7:01:74:64:8C:91:31:41:FC:76:85:B2:49:7D:FE X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:91:5c:b6:bf:e9:d3:45:46:1f:db:27:b9:6f:02:23:0f:18: f1:b1:f4:1c:68:95:5e:f1:7f:2c:ef:0e:46:31:5e:a4:06:f2: 0d:f6:b4:61:0e:b8:9e:4a:9c:e0:d9:50:42:e7:de:df:17:38: de:ee:34:43:b8:0a:32:ba:fe:6e:76:59:94:e3:7a:25:f3:2b: 55:d7:91:95:60:ef:8f:6e:00:59:dc:23:ac:b0:b0:ab:80:d8: 34:78:9c:b5:75:b3:ec:a5:8a:f8:3f:bf:cf:5d:91:9f:2d:4e: 5d:b4:dd:f6:73:50:6b:b4:19:06:0b:09:14:50:5c:7c:2d:08: 51:7c:f7:c1:65:7c:e8:92:7e:25:5c:40:fa:44:a5:5c:13:e8: ff:78:c2:62:87:ce:62:ca:bb:b7:52:72:e2:45:a8:bd:5f:18: ba:45:fc:d9:46:bf:77:a8:ae:8e:a1:9b:39:38:25:0f:2f:17: c8:70:ce:1c:41:dc:8e:ab:fa:9c:30:d7:37:a8:84:b4:cd:5b: c8:37:8b:b0:52:70:ee:92:29:cf:e0:8d:27:05:c4:e6:a4:c6: 30:df:73:f4:5a:5a:06:fe:6d:1a:e1:2c:66:d3:ae:df:8b:9d: 22:7c:51:91:79:07:86:1c:0d:27:6c:a3:86:9e:0b:9e:bd:4a: 51:2c:94:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjYwNzIyMTgzMjA2WhcNMjYwNzI5MTgzMjA2WjAYMRYwFAYD VQQDEw02YTYxMGNhNi01NWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPD7T2ysYfg6ieSA8zuxCniYgqnOzoQJUhUFxKQ3+v8mZypv+aZPOS/hzPyF r3JYr6lFXX73x0YOzqK3QbIObPyAutUgStq2IWfN7y+HnxvW8/L3Pbo+5Vbz9hfN vypuAn5hG1G6vwblsbWd7KQQefPKBpeYp2n4mExlzWcirj60OUjNumIx+lYbGh/D rhQeE2EKI149KLeNaUYLY44slDt8ffc8QznSe77VaXDRnrbtES8l3kHCczwmYLT8 qg4j+n1/V4wYCnHd3Qu952jTwemu8QKBVczQSKJWZwAuCkfiVi/PvO+YW0cbTy4F 3Y2dI6T3bai2lHQAWg0x+hUvvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqOR1Oa pwF0ZIyRMUH8doWySX3+MB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF5Fctr/p00VGH9snuW8CIw8Y8bH0HGiVXvF/LO8ORjFepAbyDfa0YQ64nkqc 4NlQQufe3xc43u40Q7gKMrr+bnZZlON6JfMrVdeRlWDvj24AWdwjrLCwq4DYNHic tXWz7KWK+D+/z12Rny1OXbTd9nNQa7QZBgsJFFBcfC0IUXz3wWV86JJ+JVxA+kSl XBPo/3jCYofOYsq7t1Jy4kWovV8YukX82Ua/d6iujqGbOTglDy8XyHDOHEHcjqv6 nDDXN6iEtM1byDeLsFJw7pIpz+CNJwXE5qTGMN9z9FpaBv5tGuEsZtOu34udInxR kXkHhhwNJ2yjhp4Lnr1KUSyUew== -----END CERTIFICATE-----Generated at Fri Jul 24 11:25:21 2026 by rpki-client