$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft File: PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json) Hash identifier: T/FXiYAp9lpAMd0y1vlih0evh4i316VYMnCC1BVi9M4= Subject key identifier: 06:2C:96:08:A5:D1:91:D6:51:3B:E5:94:BF:5B:D8:24:0B:9E:85:3E Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft Manifest number: E9 Signing time: Thu 23 Jul 2026 08:11:26 +0000 Manifest this update: Thu 23 Jul 2026 08:11:26 +0000 Manifest next update: Thu 30 Jul 2026 08:11:26 +0000 Files and hashes: 1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: MC1fZhuwSddA+c7bSUMOKFCm2VmgxtapbYHOLDcR6IU=) 2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: qCfmy29Bi59237fHQ/OkmrpMOZZuyu3nE9b50f2Lz9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Validity Not Before: Jul 23 08:11:26 2026 GMT Not After : Jul 30 08:11:26 2026 GMT Subject: CN=6a61ccae-109d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:01:0a:16:a0:0e:46:62:63:f9:95:4b:04: 09:19:a5:c8:93:27:11:be:d6:9e:55:73:3f:30:60: 13:95:86:ec:87:a1:0a:80:2b:b4:25:55:1e:18:f6: 88:50:0d:e0:a6:87:3c:db:dd:c6:7b:82:24:4d:ee: e6:97:a1:96:e1:89:cc:22:99:cc:73:fe:29:07:4b: 1f:0b:a8:b2:01:16:04:17:c0:50:13:ff:d6:1a:f2: f1:7b:d5:39:6b:c0:c5:6c:3c:d6:36:06:9d:e8:4c: 7f:f7:77:22:4d:5c:50:30:38:05:8c:c6:69:67:da: 09:ea:8f:a8:7b:4d:68:af:e2:6c:31:e4:c6:74:3b: 25:9d:39:20:a9:e7:fc:42:ae:d1:42:e2:f4:4c:ea: 33:56:c8:42:5e:a9:7b:42:cb:dc:f1:b4:ea:f3:ab: 5b:3e:1c:ef:14:20:3e:09:04:0e:b5:0d:cf:48:5e: 9d:9e:50:1f:7f:ca:03:50:09:d7:f5:4c:11:2c:2e: b0:36:10:81:ef:5b:07:17:24:e4:10:b0:5a:2d:1b: ca:3a:6a:79:7d:0d:4f:45:6a:30:b6:25:2b:35:27: 1c:82:37:1e:cc:36:43:be:d3:22:9f:f6:33:33:0c: 13:79:9e:c9:73:61:2e:11:12:4f:63:a3:08:ca:69: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2C:96:08:A5:D1:91:D6:51:3B:E5:94:BF:5B:D8:24:0B:9E:85:3E X509v3 Authority Key Identifier: keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cf:3f:25:c0:b9:3d:64:37:63:78:be:8c:86:2b:67:b6:a3: 7c:5b:e6:bd:44:59:eb:95:f0:89:a9:63:0e:98:10:b5:c8:e5: 17:49:4b:a2:a5:15:4e:31:6e:f2:f7:ce:db:f9:8f:54:e1:80: 5f:79:55:57:91:69:57:58:53:c7:6b:0c:8b:08:76:12:dd:ff: d7:b7:3f:85:eb:7d:b8:43:e0:cd:34:22:a1:07:59:cc:c3:90: e6:49:4c:81:22:4e:46:0c:79:81:1b:65:75:74:6d:8f:39:41: fb:fa:30:cf:80:19:b7:15:87:68:66:99:8e:cb:0c:1a:0e:95: 69:bb:ba:25:a8:77:65:80:0f:fa:a5:88:d1:fc:d5:32:f0:8a: 91:78:eb:ec:93:59:20:6f:22:fc:29:2b:62:74:24:cc:17:a9: d9:d1:2b:a9:3c:24:c4:b7:12:75:93:fa:7e:62:4e:d8:d5:d2: e7:2f:3c:62:74:d1:c1:df:d9:8b:f8:2d:ea:1b:30:54:22:b9: 2c:3b:75:9b:27:fe:7d:99:b0:96:ed:3e:a2:ed:3e:7c:d3:1c: 8e:7e:4b:81:52:57:62:0f:79:e4:9a:4b:a1:14:00:4c:f0:f4: 90:72:2f:12:87:39:87:4d:1a:5a:fa:24:d2:5e:5c:c2:11:47: 82:17:bd:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjIxMTAvBgNVBAUTKDNGMzFGQjVEOEVGNDdEQUQzOEREOTJFQTFBODlFODg4 NzE0MDNBMzEwHhcNMjYwNzIzMDgxMTI2WhcNMjYwNzMwMDgxMTI2WjAYMRYwFAYD VQQDEw02YTYxY2NhZS0xMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk0BChagDkZiY/mVSwQJGaXIkycRvtaeVXM/MGATlYbsh6EKgCu0JVUeGPaI UA3gpoc8293Ge4IkTe7ml6GW4YnMIpnMc/4pB0sfC6iyARYEF8BQE//WGvLxe9U5 a8DFbDzWNgad6Ex/93ciTVxQMDgFjMZpZ9oJ6o+oe01or+JsMeTGdDslnTkgqef8 Qq7RQuL0TOozVshCXql7Qsvc8bTq86tbPhzvFCA+CQQOtQ3PSF6dnlAff8oDUAnX 9UwRLC6wNhCB71sHFyTkELBaLRvKOmp5fQ1PRWowtiUrNSccgjcezDZDvtMin/Yz MwwTeZ7Jc2EuERJPY6MIymmOGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYslgil 0ZHWUTvllL9b2CQLnoU+MB8GA1UdIwQYMBaAFD8x+12O9H2tON2S6hqJ6IhxQDox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCMi9DNEYxNTQ3MjIw MTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZhMDQzWkxxR29ub2lIRkFP akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9qRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCMi9DNEYxNTQ3MjIwMTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZh MDQzWkxxR29ub2lIRkFPakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT88/JcC5PWQ3Y3i+jIYrZ7ajfFvmvURZ65XwialjDpgQtcjlF0lLoqUVTjFu 8vfO2/mPVOGAX3lVV5FpV1hTx2sMiwh2Et3/17c/het9uEPgzTQioQdZzMOQ5klM gSJORgx5gRtldXRtjzlB+/owz4AZtxWHaGaZjssMGg6Vabu6Jah3ZYAP+qWI0fzV MvCKkXjr7JNZIG8i/CkrYnQkzBep2dErqTwkxLcSdZP6fmJO2NXS5y88YnTRwd/Z i/gt6hswVCK5LDt1myf+fZmwlu0+ou0+fNMcjn5LgVJXYg955JpLoRQATPD0kHIv Eoc5h00aWvok0l5cwhFHghe9OA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:25 2026 by rpki-client