$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: h/BO4Tvb6hvU0RIubglYTsEEP65GvCcPK8wZB+bUKfI= Subject key identifier: E7:D2:E5:FB:3F:38:5A:95:86:CC:8A:35:49:DA:70:F3:6E:F0:7B:D9 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 021C Signing time: Thu 23 Jul 2026 04:08:59 +0000 Manifest this update: Thu 23 Jul 2026 04:08:59 +0000 Manifest next update: Thu 30 Jul 2026 04:08:59 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: hy4zjQcy3nVSvIpqCdg4L6havfSJLffsy3zNeN5IjdI=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Jul 23 04:08:59 2026 GMT Not After : Jul 30 04:08:59 2026 GMT Subject: CN=6a6193db-6d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:b3:9e:b5:e9:7d:e9:72:f4:87:1d:28:73: 45:e7:a4:b1:d7:27:97:8b:4f:a8:97:56:37:41:2b: dc:ae:fb:f4:38:8e:43:13:0e:90:35:a5:f4:5f:af: f7:e5:62:52:00:b6:5e:03:03:4e:ef:69:40:1b:ae: af:d3:90:a0:9d:e5:0b:b5:13:2a:e9:d5:b9:7c:6c: 40:bb:c0:a3:d6:58:cf:91:42:42:c9:61:8b:e2:da: 04:eb:96:76:74:32:5a:c5:62:01:f3:a1:a5:6c:1c: 7c:63:c8:9d:26:d6:8d:ed:28:67:f6:05:a4:0e:76: 57:22:52:e9:5e:92:19:7c:0f:52:91:cb:ff:79:d4: 94:db:7e:45:14:ee:95:33:fe:fb:9a:24:4c:fa:8f: 30:d2:f2:18:3a:0d:92:48:84:41:57:b9:8d:e6:5c: ac:97:7b:60:72:fb:e6:5f:66:06:01:5b:42:38:56: 8b:cd:18:52:73:f0:6d:a4:25:86:61:e2:06:f7:85: 83:19:40:3c:21:f4:81:fd:50:61:10:67:8f:9b:6e: 76:ba:0f:03:bb:29:de:71:1d:0a:97:5f:cc:6a:ad: f9:ec:50:bb:a1:85:ed:78:9c:c1:15:a7:ff:4d:57: 54:3c:56:7f:01:51:65:66:7d:7e:00:db:bd:43:b7: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D2:E5:FB:3F:38:5A:95:86:CC:8A:35:49:DA:70:F3:6E:F0:7B:D9 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b4:4f:38:db:77:ec:8f:22:93:52:87:2d:89:a9:d5:a6:b4: 38:56:0d:a5:8e:eb:8f:24:72:65:e7:bc:a4:ff:7f:64:bc:36: 5c:4c:62:0c:55:99:62:92:1b:a3:17:92:16:af:f8:5b:0e:5e: 45:a5:48:ee:12:29:d4:2e:1f:9e:ca:45:13:43:e0:4e:c3:e4: 7d:80:3d:9e:28:ec:85:a8:b4:b8:e1:ae:2d:cb:50:41:7e:23: 5b:8f:c7:11:33:2c:9a:17:e6:35:01:ee:25:3e:23:ab:e8:e3: 96:91:33:80:01:7b:ea:3d:9a:71:cb:c6:1c:22:ad:77:41:3d: ce:b4:02:7c:ef:48:b1:d8:1a:1c:22:d5:64:45:7f:94:e3:7f: a9:ec:2c:de:9c:19:93:ef:d3:58:1f:a1:62:21:4b:2a:e6:8e: d0:3c:44:28:95:97:bf:39:94:ce:ab:b2:33:02:a1:95:68:60: 46:58:cd:2c:e3:12:d8:80:f9:ba:9f:68:55:aa:0e:de:d7:a4: bf:26:f0:b8:84:d0:d1:17:fb:4b:b1:ef:86:e4:50:15:44:c8: 5f:1b:02:d5:4f:43:97:3a:e9:be:44:1f:b4:c5:10:15:06:eb: 2b:c4:f6:d7:25:1a:9f:5a:25:71:17:b6:38:0c:58:0d:d7:82: 96:0d:70:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjYwNzIzMDQwODU5WhcNMjYwNzMwMDQwODU5WjAYMRYwFAYD VQQDEw02YTYxOTNkYi02ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFOznrXpfely9IcdKHNF56Sx1yeXi0+ol1Y3QSvcrvv0OI5DEw6QNaX0X6/3 5WJSALZeAwNO72lAG66v05CgneULtRMq6dW5fGxAu8Cj1ljPkUJCyWGL4toE65Z2 dDJaxWIB86GlbBx8Y8idJtaN7Shn9gWkDnZXIlLpXpIZfA9Skcv/edSU235FFO6V M/77miRM+o8w0vIYOg2SSIRBV7mN5lysl3tgcvvmX2YGAVtCOFaLzRhSc/BtpCWG YeIG94WDGUA8IfSB/VBhEGePm252ug8DuynecR0Kl1/Maq357FC7oYXteJzBFaf/ TVdUPFZ/AVFlZn1+ANu9Q7dLgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfS5fs/ OFqVhsyKNUnacPNu8HvZMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl7RPONt37I8ik1KHLYmp1aa0OFYNpY7rjyRyZee8pP9/ZLw2XExiDFWZYpIb oxeSFq/4Ww5eRaVI7hIp1C4fnspFE0PgTsPkfYA9nijshai0uOGuLctQQX4jW4/H ETMsmhfmNQHuJT4jq+jjlpEzgAF76j2accvGHCKtd0E9zrQCfO9IsdgaHCLVZEV/ lON/qews3pwZk+/TWB+hYiFLKuaO0DxEKJWXvzmUzquyMwKhlWhgRljNLOMS2ID5 up9oVaoO3tekvybwuITQ0Rf7S7HvhuRQFUTIXxsC1U9DlzrpvkQftMUQFQbrK8T2 1yUan1olcRe2OAxYDdeClg1w+g== -----END CERTIFICATE-----Generated at Fri Jul 24 13:14:25 2026 by rpki-client