$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: STVmvWERyX0njGBAbawA6tgutY56ebUmsQAA+38K48I= Subject key identifier: 4D:26:AF:38:A5:92:EE:A5:1D:2D:9F:38:80:1B:DE:41:A2:FA:0D:46 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1AF8 Signing time: Wed 22 Jul 2026 16:23:26 +0000 Manifest this update: Wed 22 Jul 2026 16:23:25 +0000 Manifest next update: Wed 29 Jul 2026 16:23:25 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: svWBzbl20agSXmnW49NNpepxlIdQg67FStGCKibGmZc=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6938 (0x1b1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Jul 22 16:23:25 2026 GMT Not After : Jul 29 16:23:25 2026 GMT Subject: CN=6a60ee7d-f57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:b8:26:c1:ac:ff:b7:93:05:54:33:7c:15: 55:de:3e:2c:79:50:88:50:06:59:c5:30:69:d9:f6: e9:d3:e8:2f:21:15:60:48:72:58:5c:24:47:6c:ba: 36:e3:b1:ff:54:92:95:96:3c:80:8c:1d:f8:61:8d: 19:52:92:24:ed:2a:ec:cf:ba:28:91:0b:8e:c3:ba: 7b:b5:6a:5e:0c:d6:4e:2b:fa:6b:b4:87:c7:ba:bb: e4:4e:0f:b3:78:0c:7a:ce:e6:35:40:01:9b:23:5c: db:44:a1:0e:28:17:3f:cc:0d:0c:16:a8:90:0e:92: 2f:51:3f:ee:59:9f:62:0a:b2:6c:7a:18:09:99:8b: 93:a2:03:b1:58:7d:5e:51:c6:87:07:ef:72:1b:6f: 1b:43:df:81:32:c3:48:38:ff:d0:23:c7:4f:9b:21: df:d4:d4:d6:9b:7a:22:5a:96:19:a4:fa:7b:c0:35: 15:62:59:59:b7:07:cf:92:2b:e5:27:35:82:54:d9: 7f:43:8e:f5:8d:79:34:89:df:59:78:14:fe:2a:2e: 9c:fe:79:7d:ac:c0:f8:c7:e1:4d:c5:73:4c:08:15: c2:0d:f9:01:ab:e0:e9:99:07:bb:b4:8e:13:c0:20: bb:99:b1:dc:db:5e:7f:4f:c2:eb:8a:0c:0d:27:28: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:26:AF:38:A5:92:EE:A5:1D:2D:9F:38:80:1B:DE:41:A2:FA:0D:46 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:3c:22:a3:6e:b4:00:74:c3:a4:ba:58:b4:32:96:e7:cf:c8: a8:85:c9:a8:06:c1:b0:11:92:8c:8b:fb:68:9e:b2:de:53:cd: 8c:c3:e0:8d:ed:9c:b0:14:15:09:2a:4d:c6:d6:90:d4:a2:75: 25:7d:3c:c1:70:11:aa:2c:35:cb:90:d2:ed:38:82:24:9b:25: b1:98:93:7c:7a:bc:9f:73:da:5f:5a:58:12:76:fd:15:47:35: 6e:e3:d0:b3:33:e3:8f:e0:f1:fb:ab:3b:a2:c2:39:fe:a5:2b: 30:69:f8:03:93:9a:a0:41:b5:62:d9:65:9e:88:70:2b:e8:6e: 0c:25:27:1e:0f:40:04:66:0f:21:d8:b3:33:76:b5:5c:df:94: ec:1a:6b:06:71:94:62:93:97:74:3b:8e:c5:2a:e8:b0:59:42: c9:7a:ab:e8:8d:33:ab:d6:2a:45:86:85:a8:3a:ba:e3:21:f0: fd:85:cf:fa:4c:6b:65:09:8a:30:fb:29:cc:78:d5:e0:95:69: 40:32:8f:a6:39:7e:ec:bb:2e:00:9c:79:a1:60:d7:9c:75:c9: b2:95:75:f0:72:1f:b9:56:2d:46:05:cf:e5:41:b2:97:22:a0: 84:4e:e0:80:73:df:21:a3:07:d7:c7:3e:26:b6:ab:f1:ec:de: fb:a2:3d:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwNzIyMTYyMzI1WhcNMjYwNzI5MTYyMzI1WjAYMRYwFAYD VQQDEw02YTYwZWU3ZC1mNTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEq4JsGs/7eTBVQzfBVV3j4seVCIUAZZxTBp2fbp0+gvIRVgSHJYXCRHbLo2 47H/VJKVljyAjB34YY0ZUpIk7Srsz7ookQuOw7p7tWpeDNZOK/prtIfHurvkTg+z eAx6zuY1QAGbI1zbRKEOKBc/zA0MFqiQDpIvUT/uWZ9iCrJsehgJmYuTogOxWH1e UcaHB+9yG28bQ9+BMsNIOP/QI8dPmyHf1NTWm3oiWpYZpPp7wDUVYllZtwfPkivl JzWCVNl/Q471jXk0id9ZeBT+Ki6c/nl9rMD4x+FNxXNMCBXCDfkBq+DpmQe7tI4T wCC7mbHc215/T8LrigwNJyjj7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0mrzil ku6lHS2fOIAb3kGi+g1GMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhjwio260AHTDpLpYtDKW58/IqIXJqAbBsBGSjIv7aJ6y3lPNjMPgje2csBQV CSpNxtaQ1KJ1JX08wXARqiw1y5DS7TiCJJslsZiTfHq8n3PaX1pYEnb9FUc1buPQ szPjj+Dx+6s7osI5/qUrMGn4A5OaoEG1YtllnohwK+huDCUnHg9ABGYPIdizM3a1 XN+U7BprBnGUYpOXdDuOxSrosFlCyXqr6I0zq9YqRYaFqDq64yHw/YXP+kxrZQmK MPspzHjV4JVpQDKPpjl+7LsuAJx5oWDXnHXJspV18HIfuVYtRgXP5UGylyKghE7g gHPfIaMH18c+Jrar8eze+6I9Jw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:49:56 2026 by rpki-client