$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: uQhuuwz/23ooGfpp572vDVKznXPv+GkQ6rcUTkW18zI= Subject key identifier: 67:58:BE:71:8E:E8:4D:13:5E:5A:69:98:76:E6:01:41:4D:94:4D:E2 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 99 Signing time: Thu 23 Jul 2026 09:13:21 +0000 Manifest this update: Thu 23 Jul 2026 09:13:20 +0000 Manifest next update: Thu 30 Jul 2026 09:13:20 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: 5tfYPFb6Hz+lu/LzPb/1pvXbEJh5JABNRn9t1uT83To=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Jul 23 09:13:20 2026 GMT Not After : Jul 30 09:13:20 2026 GMT Subject: CN=6a61db30-362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:19:4c:b8:30:24:e4:62:50:cb:6f:59:e1: de:81:e0:e9:e9:38:2c:15:1b:10:d1:e5:2b:b6:a9: 02:c0:5b:ff:fe:39:75:ed:4d:4a:0f:6d:b4:3e:4d: e0:c8:0e:f1:2c:84:7f:b1:d6:bb:16:b6:b9:41:3d: a8:99:2f:df:cf:90:b2:61:59:ef:dd:b4:8b:d0:e5: 0f:d0:79:34:0e:c9:63:ba:3c:37:74:12:67:43:23: 5f:15:56:85:48:86:c7:9c:91:65:df:45:ad:fd:19: 99:1d:dc:18:a6:b5:61:38:22:49:5e:81:5a:d8:d0: b2:51:b0:92:6f:5b:15:57:52:4a:62:9a:21:96:b5: 50:5e:99:07:fa:25:a3:c5:87:99:ad:cc:36:e1:10: cf:25:d0:02:b5:83:d4:af:47:0a:56:a9:ca:d0:6d: ba:72:ca:83:84:0d:f5:36:19:db:8d:a2:14:00:31: 4a:95:33:2f:8e:af:14:dd:bb:b9:e4:b9:c4:20:71: 81:22:0c:ef:a2:b2:99:e7:c5:c6:68:df:c5:d6:be: bd:21:86:9f:df:ad:8a:d3:74:1d:c0:ee:69:4d:57: 5c:83:1f:3b:8e:ff:ab:fc:ff:ea:50:b1:78:a6:fd: 8c:63:06:50:84:c8:c6:a5:bc:b2:48:38:74:c1:fb: 80:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:58:BE:71:8E:E8:4D:13:5E:5A:69:98:76:E6:01:41:4D:94:4D:E2 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f2:8f:21:2e:ba:ef:59:24:7c:ab:10:a6:cb:6d:00:65:d7: 32:57:aa:3b:a1:7a:d5:1d:7a:3f:16:a9:f0:35:80:7b:0c:59: a2:3d:a1:52:1d:68:5a:39:71:f1:b2:cb:25:a5:3d:8e:89:ee: 3f:c0:df:6e:40:76:bb:68:d0:aa:32:3c:25:5c:f9:40:f7:b3: 7e:b3:01:1a:2e:87:d4:6c:a3:27:96:67:d0:d5:97:0c:f7:c8: 2d:91:c7:e8:1b:2f:64:69:ad:e1:b3:62:55:c3:ef:69:f8:57: 4c:ed:c7:e2:37:db:37:3f:34:9f:54:e9:5e:13:b9:31:49:44: a5:42:9b:49:12:2f:4b:02:1f:e7:6a:42:c8:f5:22:fd:a7:bb: a5:ff:a6:08:86:fb:b6:6a:31:7d:be:77:58:33:3b:0d:af:39: 33:59:6d:56:a0:7b:74:b4:33:07:80:52:44:d6:c4:6a:0f:93: e0:a6:f3:02:6b:f9:0a:7e:8d:46:ad:a4:9e:fb:64:62:1e:70: 2e:9a:a9:8a:73:d0:bb:26:69:bb:d8:4c:1a:8f:08:3f:df:1a: e3:f2:8b:bc:0a:77:f7:02:f9:3b:e6:1f:5b:5b:86:d3:cd:37: 47:48:02:4b:38:d5:8d:9d:b7:86:89:71:24:8b:b1:26:09:bc: f4:86:dd:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwMDAxMTAvBgNVBAUTKDY1QUFCRUYxN0NDQzA4MEM5QTM2MkEwODIxNTMwNEIx MUJENTA3RkUwHhcNMjYwNzIzMDkxMzIwWhcNMjYwNzMwMDkxMzIwWjAYMRYwFAYD VQQDEw02YTYxZGIzMC0zNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XAZTLgwJORiUMtvWeHegeDp6TgsFRsQ0eUrtqkCwFv//jl17U1KD220Pk3g yA7xLIR/sda7Fra5QT2omS/fz5CyYVnv3bSL0OUP0Hk0Dsljujw3dBJnQyNfFVaF SIbHnJFl30Wt/RmZHdwYprVhOCJJXoFa2NCyUbCSb1sVV1JKYpohlrVQXpkH+iWj xYeZrcw24RDPJdACtYPUr0cKVqnK0G26csqDhA31NhnbjaIUADFKlTMvjq8U3bu5 5LnEIHGBIgzvorKZ58XGaN/F1r69IYaf362K03QdwO5pTVdcgx87jv+r/P/qULF4 pv2MYwZQhMjGpbyySDh0wfuA8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdYvnGO 6E0TXlppmHbmAUFNlE3iMB8GA1UdIwQYMBaAFGWqvvF8zAgMmjYqCCFTBLEb1Qf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjAwMC9FNUExMzhEMDlE MTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNBeWFOaW9JSVZNRXNSdlZC XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjAwMC9FNUExMzhEMDlEMTcxMUYwQjQyRUYwMzRDNEY5QUUwMi9aYXEtOFh6TUNB eWFOaW9JSVZNRXNSdlZCXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlvKPIS6671kkfKsQpsttAGXXMleqO6F61R16Pxap8DWAewxZoj2hUh1oWjlx 8bLLJaU9jonuP8DfbkB2u2jQqjI8JVz5QPezfrMBGi6H1GyjJ5Zn0NWXDPfILZHH 6BsvZGmt4bNiVcPvafhXTO3H4jfbNz80n1TpXhO5MUlEpUKbSRIvSwIf52pCyPUi /ae7pf+mCIb7tmoxfb53WDM7Da85M1ltVqB7dLQzB4BSRNbEag+T4KbzAmv5Cn6N Rq2knvtkYh5wLpqpinPQuyZpu9hMGo8IP98a4/KLvAp39wL5O+YfW1uG0803R0gC SzjVjZ23holxJIuxJgm89IbdHA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:31:22 2026 by rpki-client