$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: ZR6BxYzy6sR+3e3PA22bmANF3xs6ff7Lhy9P1uZn0ns= Subject key identifier: 59:C7:92:2C:41:C6:5A:D1:22:68:1A:3B:FC:67:6E:5C:0E:A9:D3:2E Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0440 Signing time: Thu 23 Jul 2026 01:07:42 +0000 Manifest this update: Thu 23 Jul 2026 01:07:41 +0000 Manifest next update: Thu 30 Jul 2026 01:07:41 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: 1YqeJn4E9Iy4PLPSRHmqiC0W7xIY+P1kXozLExF/D6w=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: S2ENKwRHLB42a/uyVJIcN7PBvjV0fviYPhtju/9OSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Jul 23 01:07:41 2026 GMT Not After : Jul 30 01:07:41 2026 GMT Subject: CN=6a61695e-28a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:6c:b0:e5:60:65:71:34:c0:e2:85:66:ce: 04:7a:f8:25:a4:18:f5:54:da:1f:c0:3c:04:0d:3e: 26:6f:0b:af:48:de:e9:20:bc:97:25:f1:df:ec:12: bd:f3:69:69:79:db:fc:51:92:ed:4f:00:60:27:45: 3d:da:57:8a:28:3e:8d:c1:70:12:ff:7f:4d:76:72: aa:66:28:8b:9a:be:50:fa:3c:a6:49:6e:91:af:4e: 8a:25:f5:37:19:59:f6:41:42:4a:3a:a7:3b:3a:d3: 48:f0:d4:41:61:2b:7b:8f:08:4e:c9:bd:25:4e:e0: 24:4e:eb:d2:ef:a8:26:02:0c:e7:a5:4f:3b:a6:01: c0:46:f3:13:42:7d:81:59:3e:ac:8c:50:2d:ae:f5: e6:7c:dd:0f:a7:f1:34:fb:20:e3:98:af:86:55:4f: f3:84:a5:ba:c0:36:77:7f:19:67:6e:5d:b1:78:1a: 69:d0:e3:e8:c7:30:43:56:db:96:e3:7e:05:1f:88: c2:c1:52:10:7a:80:40:50:6d:ea:96:00:e3:97:c1: 21:26:6c:46:17:37:6a:54:8d:45:46:65:43:41:e4: 6b:9f:b1:3b:7c:89:33:ad:a5:cc:58:cd:df:e1:5d: b6:33:89:43:09:1f:e3:d7:ab:72:8a:8e:1c:09:29: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C7:92:2C:41:C6:5A:D1:22:68:1A:3B:FC:67:6E:5C:0E:A9:D3:2E X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:57:28:27:f0:af:6b:04:1e:13:96:26:27:d9:e2:9c:f8:4e: 99:5f:0d:dd:a4:02:dc:bc:ef:26:7c:ac:a0:3c:31:1d:14:9d: 5b:01:23:f7:6a:02:6d:bb:a6:84:fd:f3:7d:56:bd:17:4a:fc: a9:99:dd:73:25:6e:28:01:b5:b8:bb:1a:40:0f:46:6f:4e:40: 00:a4:fb:8f:dd:39:d3:07:45:5c:07:07:c2:1e:dc:1d:8b:33: 92:ea:ba:fa:54:f5:57:75:d4:ac:5c:dd:66:21:21:7a:72:32: 86:73:60:41:12:53:06:ef:7c:d1:d4:1c:5d:a4:ea:38:f6:7d: 89:3b:54:a2:65:bd:51:82:5c:3f:55:75:49:73:d7:16:76:8a: 9b:6b:e3:1e:8c:83:66:3d:3f:a2:e3:a8:39:f5:aa:8e:30:04: df:b9:b3:b7:a3:81:ca:72:40:c6:42:ae:62:cb:c5:43:3a:23: ab:0e:3f:90:7f:63:dc:68:6c:a0:d8:1f:a1:a0:d0:78:69:63: de:99:5e:bd:eb:99:3e:ee:0f:a3:d2:57:84:bf:8e:d3:fa:f2: 5e:17:c9:96:25:a7:14:da:87:6b:f5:32:a1:6b:bd:b1:a8:16: ad:db:a1:a3:61:80:0d:f5:56:2a:d4:98:85:93:41:61:8d:a4: c9:18:1d:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjYwNzIzMDEwNzQxWhcNMjYwNzMwMDEwNzQxWjAYMRYwFAYD VQQDEw02YTYxNjk1ZS0yOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvatssOVgZXE0wOKFZs4EevglpBj1VNofwDwEDT4mbwuvSN7pILyXJfHf7BK9 82lpedv8UZLtTwBgJ0U92leKKD6NwXAS/39NdnKqZiiLmr5Q+jymSW6Rr06KJfU3 GVn2QUJKOqc7OtNI8NRBYSt7jwhOyb0lTuAkTuvS76gmAgznpU87pgHARvMTQn2B WT6sjFAtrvXmfN0Pp/E0+yDjmK+GVU/zhKW6wDZ3fxlnbl2xeBpp0OPoxzBDVtuW 434FH4jCwVIQeoBAUG3qlgDjl8EhJmxGFzdqVI1FRmVDQeRrn7E7fIkzraXMWM3f 4V22M4lDCR/j16tyio4cCSlwZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnHkixB xlrRImgaO/xnblwOqdMuMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFcoJ/CvawQeE5YmJ9ninPhOmV8N3aQC3LzvJnysoDwxHRSdWwEj92oCbbum hP3zfVa9F0r8qZndcyVuKAG1uLsaQA9Gb05AAKT7j9050wdFXAcHwh7cHYszkuq6 +lT1V3XUrFzdZiEhenIyhnNgQRJTBu980dQcXaTqOPZ9iTtUomW9UYJcP1V1SXPX FnaKm2vjHoyDZj0/ouOoOfWqjjAE37mzt6OBynJAxkKuYsvFQzojqw4/kH9j3Ghs oNgfoaDQeGlj3pleveuZPu4Po9JXhL+O0/ryXhfJliWnFNqHa/UyoWu9sagWrduh o2GADfVWKtSYhZNBYY2kyRgdPg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:33 2026 by rpki-client