$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: 2PfzHy5r4ZAlQOiGLTm8CbE6fdetOGYP0D3ECqss2+g= Subject key identifier: EF:B5:75:0C:E5:28:DD:87:1C:68:9C:E2:E1:9B:47:74:36:B6:1F:BE Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 01EA Signing time: Thu 23 Jul 2026 05:06:52 +0000 Manifest this update: Thu 23 Jul 2026 05:06:51 +0000 Manifest next update: Thu 30 Jul 2026 05:06:51 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: hYg8us04ST6G1XS7Qe0cIOb7XcZUct0+r/epvjRgH6c=) 2: 9C457296810A11F1BDF96ABB6CA30FBC.roa (hash: mfMM1rWOREqg0X2Y0BnQVxJe3RdEDQ0y+IePXzNhgjY=) 3: F0FFDBF6686D11F18ACBCE18A247A888.roa (hash: CAMy7JCqCcMBjMFrQ5fn4gzgU0neIkf9oa/fpbxqTn0=) 4: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Jul 23 05:06:51 2026 GMT Not After : Jul 30 05:06:51 2026 GMT Subject: CN=6a61a16c-bc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:ca:47:58:0f:ef:9d:40:42:8a:35:41:7e: 7e:dd:36:8d:1a:34:14:62:35:43:ce:28:44:8f:c4: 54:0f:83:eb:73:d7:a7:17:b0:89:59:5b:b8:9c:ca: 93:47:7c:1c:49:f5:93:31:db:70:21:89:43:c0:70: a7:1d:27:38:05:57:08:2f:33:30:f4:b7:9f:c2:22: 7c:ae:44:6b:9e:2b:2b:7b:c1:c5:0c:09:e4:e8:88: cb:ec:24:16:bd:e1:ba:9c:34:b9:b5:50:7e:19:2f: bd:d3:d5:86:10:15:21:8b:40:01:7a:11:cf:a1:e4: 6a:53:1b:94:0a:08:64:86:d3:6c:92:3d:7d:48:8d: 82:27:cf:b2:20:42:bc:d0:e0:02:9e:d9:39:c9:ab: 28:b7:77:d8:2a:9c:34:68:81:f5:d5:e5:6a:b8:02: 3e:52:aa:33:88:26:d8:5b:1b:21:0e:fe:45:14:13: b4:cf:72:93:2c:91:54:2b:eb:2a:1e:d1:88:e2:6b: df:0a:de:2e:84:8e:e3:5d:05:60:b2:62:bd:c9:78: 6f:90:07:62:59:c4:70:fd:4d:40:19:2e:43:49:63: 00:2f:7f:d3:b1:bb:00:7f:a1:99:b1:f8:54:3b:90: b8:cc:60:f6:2a:2f:26:51:4e:74:ed:40:6f:13:21: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B5:75:0C:E5:28:DD:87:1C:68:9C:E2:E1:9B:47:74:36:B6:1F:BE X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e8:e1:ae:77:48:ed:12:0b:aa:58:4e:60:20:05:1a:94:35: c9:99:4c:f2:f3:38:6e:5b:18:00:0a:21:4a:51:9f:f4:ac:20: d8:fb:92:3d:99:4e:90:27:08:41:d9:a9:47:08:3d:af:b3:9d: c9:df:41:88:88:6e:2b:0c:7c:c2:ed:d0:8c:4e:8b:b9:2f:16: e6:14:e5:95:b2:52:71:41:9e:40:d4:89:ba:51:7a:6a:bc:8e: 47:90:97:21:7c:21:77:f6:17:81:5d:36:6f:28:4c:19:4e:f0: 00:4e:ba:0d:df:85:5d:13:1b:7f:56:05:d5:1d:15:e6:12:15: d1:67:89:3f:d1:55:f3:b7:85:04:6b:bd:4b:81:78:0b:31:c0: d5:ea:25:e3:d0:5b:21:b2:ae:1b:12:94:a5:98:a5:73:64:53: 9f:b7:de:d9:33:d0:fd:9b:d0:32:f3:5b:5b:72:44:09:bf:89: 3a:58:40:89:9c:34:36:54:0f:6a:8e:f5:fa:74:7a:07:45:30: e9:27:cb:12:63:0e:a2:b6:ee:24:48:8c:b2:d4:1e:9b:fd:39: 0a:ed:f3:47:a4:78:51:7b:06:30:cf:69:e1:6d:4f:09:f2:97: 92:89:f1:f5:99:94:c8:82:d6:9e:43:4b:52:be:25:de:ad:1c: dd:19:dd:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjYwNzIzMDUwNjUxWhcNMjYwNzMwMDUwNjUxWjAYMRYwFAYD VQQDEw02YTYxYTE2Yy1iYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1DKR1gP751AQoo1QX5+3TaNGjQUYjVDzihEj8RUD4Prc9enF7CJWVu4nMqT R3wcSfWTMdtwIYlDwHCnHSc4BVcILzMw9LefwiJ8rkRrnisre8HFDAnk6IjL7CQW veG6nDS5tVB+GS+909WGEBUhi0ABehHPoeRqUxuUCghkhtNskj19SI2CJ8+yIEK8 0OACntk5yasot3fYKpw0aIH11eVquAI+UqoziCbYWxshDv5FFBO0z3KTLJFUK+sq HtGI4mvfCt4uhI7jXQVgsmK9yXhvkAdiWcRw/U1AGS5DSWMAL3/TsbsAf6GZsfhU O5C4zGD2Ki8mUU507UBvEyHKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+1dQzl KN2HHGic4uGbR3Q2th++MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcejhrndI7RILqlhOYCAFGpQ1yZlM8vM4blsYAAohSlGf9Kwg2PuSPZlOkCcI QdmpRwg9r7Odyd9BiIhuKwx8wu3QjE6LuS8W5hTllbJScUGeQNSJulF6aryOR5CX IXwhd/YXgV02byhMGU7wAE66Dd+FXRMbf1YF1R0V5hIV0WeJP9FV87eFBGu9S4F4 CzHA1eol49BbIbKuGxKUpZilc2RTn7fe2TPQ/ZvQMvNbW3JECb+JOlhAiZw0NlQP ao71+nR6B0Uw6SfLEmMOorbuJEiMstQem/05Cu3zR6R4UXsGMM9p4W1PCfKXkonx 9ZmUyILWnkNLUr4l3q0c3RndBw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:12:56 2026 by rpki-client