$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: tv1nGA5aZcMdKHXIt+6fEInuA/ktulYh06hE2iyo3P8= Subject key identifier: AF:B5:21:CE:02:06:7B:2C:D3:90:55:AB:8E:37:8B:73:80:6F:24:8D Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 029C Signing time: Thu 23 Jul 2026 02:46:09 +0000 Manifest this update: Thu 23 Jul 2026 02:46:08 +0000 Manifest next update: Thu 30 Jul 2026 02:46:08 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: OjDk+bfR0RpzgVAWTzyHcDt/UJaBv3eLOMsMnasKHLI=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Jul 23 02:46:08 2026 GMT Not After : Jul 30 02:46:08 2026 GMT Subject: CN=6a618071-1473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b6:a7:cf:8c:03:c3:29:9c:cc:e3:dc:fd:8e: 4b:24:66:11:15:62:1e:1c:08:9a:50:06:16:a8:37: 26:b3:74:0a:26:2c:68:f3:05:e0:40:0d:db:cb:19: c5:a1:73:16:ad:1b:37:ca:52:85:fd:be:90:f2:d2: 52:71:8e:78:ca:b9:0f:ca:a3:9d:79:94:99:15:97: b9:be:2a:37:1a:20:f3:04:da:f2:79:c3:5f:09:9b: 1b:79:31:4f:8d:ff:7b:01:78:7f:51:cc:25:94:3e: f9:66:c4:2d:04:94:78:21:e3:95:9a:04:bd:80:8b: 82:a4:18:f9:eb:da:7f:7c:19:9d:da:f3:a4:5c:0a: d1:77:37:f6:63:ce:98:b0:64:64:95:a4:b1:f9:54: be:81:6d:df:2d:1f:a5:5c:75:aa:25:1b:12:0f:8b: 29:08:6a:65:44:99:3f:fb:74:c8:a8:a9:20:b4:59: 8f:04:ea:4f:77:a2:be:a6:8a:7d:07:06:05:6d:1f: e4:df:35:40:69:b4:5b:d2:e1:7f:36:31:ec:0a:95: dd:81:0a:db:ed:99:e4:fe:d5:c9:ae:da:ba:57:55: 99:53:55:cc:00:40:02:00:48:4b:64:04:b3:10:ca: ea:31:ef:e0:00:c1:2f:0e:2b:c3:63:12:c7:3c:d9: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B5:21:CE:02:06:7B:2C:D3:90:55:AB:8E:37:8B:73:80:6F:24:8D X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:24:d8:2d:dc:fd:72:65:a0:9d:ca:14:39:ac:7f:d4:61:ce: 64:df:2b:95:ff:76:8c:ea:08:0d:7c:72:52:d3:00:49:db:cd: b1:e6:cd:50:28:18:14:62:4d:d0:d7:24:12:39:f8:47:0c:1e: 8b:5a:54:0f:b5:01:cd:c1:e9:40:0b:a1:ad:8c:99:a6:db:7f: 17:b3:45:46:5b:fd:9f:cd:d2:ca:df:61:a5:7c:24:c2:be:51: b0:cc:3e:8a:e0:8d:84:23:12:4e:73:f7:24:dc:1d:91:71:7e: 7b:49:9a:7a:1b:c9:05:53:98:c8:13:f2:b9:08:65:6d:2e:a3: e4:03:b9:e6:3b:06:02:85:31:e7:63:d4:b1:f6:50:a0:f7:92: ce:ea:39:e0:03:3b:42:b7:9e:97:66:da:61:70:bd:91:81:81: 36:8d:c8:37:42:ac:09:47:0c:dd:33:ad:de:6d:8a:ba:98:b3: 97:27:37:02:97:73:da:b7:6c:8b:e8:8d:f5:b7:a4:b7:bd:4b: a7:b9:95:93:ce:f0:d6:42:a7:96:43:d7:8c:fc:df:d6:c2:a8: 79:91:b7:d5:11:0d:14:1d:a4:c7:a8:92:fb:76:cf:d1:57:89: 97:8c:37:f0:0b:b5:12:e2:ea:fb:b1:be:60:bd:d4:c1:7b:15: 96:3a:24:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjYwNzIzMDI0NjA4WhcNMjYwNzMwMDI0NjA4WjAYMRYwFAYD VQQDEw02YTYxODA3MS0xNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5banz4wDwymczOPc/Y5LJGYRFWIeHAiaUAYWqDcms3QKJixo8wXgQA3byxnF oXMWrRs3ylKF/b6Q8tJScY54yrkPyqOdeZSZFZe5vio3GiDzBNryecNfCZsbeTFP jf97AXh/UcwllD75ZsQtBJR4IeOVmgS9gIuCpBj569p/fBmd2vOkXArRdzf2Y86Y sGRklaSx+VS+gW3fLR+lXHWqJRsSD4spCGplRJk/+3TIqKkgtFmPBOpPd6K+pop9 BwYFbR/k3zVAabRb0uF/NjHsCpXdgQrb7Znk/tXJrtq6V1WZU1XMAEACAEhLZASz EMrqMe/gAMEvDivDYxLHPNkIaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+1Ic4C Bnss05BVq443i3OAbySNMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSTYLdz9cmWgncoUOax/1GHOZN8rlf92jOoIDXxyUtMASdvNsebNUCgYFGJN 0NckEjn4Rwwei1pUD7UBzcHpQAuhrYyZptt/F7NFRlv9n83Syt9hpXwkwr5RsMw+ iuCNhCMSTnP3JNwdkXF+e0maehvJBVOYyBPyuQhlbS6j5AO55jsGAoUx52PUsfZQ oPeSzuo54AM7Qreel2baYXC9kYGBNo3IN0KsCUcM3TOt3m2Kupizlyc3Apdz2rds i+iN9bekt71Lp7mVk87w1kKnlkPXjPzf1sKoeZG31RENFB2kx6iS+3bP0VeJl4w3 8Au1EuLq+7G+YL3UwXsVljokvQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:54:19 2026 by rpki-client