$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: 5ysi//kaU0Rz7TcBcqpgKLuAbYKJYJGpiEsa8WZN55E= Subject key identifier: BB:76:72:EE:4A:68:11:7C:B1:0D:70:D7:46:33:54:C8:12:C9:58:B4 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 08E5 Signing time: Wed 22 Jul 2026 20:48:53 +0000 Manifest this update: Wed 22 Jul 2026 20:48:52 +0000 Manifest next update: Wed 29 Jul 2026 20:48:52 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: gpHapB/2Vu8GvhlmKnc8sfDtslyobUzgHHFugabqfQw=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Jul 22 20:48:52 2026 GMT Not After : Jul 29 20:48:52 2026 GMT Subject: CN=6a612cb5-27ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:8b:89:26:cb:88:1b:03:ea:28:5c:ba:b5: 92:6b:ab:61:56:70:7a:71:11:60:45:cb:a8:24:91: b5:22:61:4c:04:56:79:7d:c6:4f:08:e9:fb:fb:2f: f3:dd:20:b1:ca:ef:c6:cf:c6:af:ff:85:6f:09:99: 0c:b4:f6:b3:2e:6a:71:44:88:bb:67:e3:a3:d9:f3: ba:2c:cf:e6:d1:76:72:03:71:66:8c:e1:aa:5e:d2: ea:55:50:12:39:e5:72:ab:fa:58:52:af:03:9d:d0: b1:d3:33:4e:4c:0f:03:5a:7e:5c:6c:32:a8:ec:20: 9c:07:9a:ae:6b:12:b2:a2:e1:5f:00:05:72:c2:fc: c0:29:d7:e1:c0:49:13:d9:ff:69:98:7b:15:63:47: ec:81:d6:8a:9a:f3:6f:b2:31:ba:1b:6d:08:5f:10: 10:6a:f0:86:7d:10:70:a4:93:c1:10:2f:e0:3f:1d: 56:f8:78:61:27:39:d4:bc:40:34:b4:ea:7f:58:7e: c1:3b:5c:6d:06:96:1f:d0:99:4f:e3:4f:ad:e4:59: 93:db:f0:1f:8f:96:84:eb:79:46:2a:2d:92:5d:9b: b6:46:78:46:0e:e2:40:f8:83:b8:03:c1:7a:d5:65: e4:e9:2c:eb:3f:2e:fc:ee:d5:e4:3a:ed:bb:3a:a5: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:72:EE:4A:68:11:7C:B1:0D:70:D7:46:33:54:C8:12:C9:58:B4 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:35:d7:0a:76:df:2d:f9:a1:43:c4:2c:d0:4b:ae:93:87:54: 5f:e5:12:dd:1f:a1:53:ba:71:6f:11:50:c9:26:04:18:83:1d: e2:ce:68:38:be:3a:a8:62:9a:e0:ac:77:6a:5b:c2:4a:8b:7b: 74:0d:41:b3:59:f2:9c:6e:62:b5:b3:f3:38:89:e2:a0:c4:89: c6:9f:17:7b:4c:53:90:5a:f4:09:67:8c:ab:38:ca:8e:b9:b5: 35:db:bd:7e:c2:38:87:19:22:3e:90:63:d9:26:1c:1e:f8:f0: 24:12:7f:e3:36:1d:f2:aa:24:03:9b:43:c4:a3:28:02:15:54: 3c:c0:62:b1:a7:59:03:25:71:3d:60:a3:a8:24:d6:92:31:9c: 7d:4e:7b:a8:74:6d:a1:ff:2c:d2:38:7b:cc:50:06:b7:ad:71: af:78:b3:7d:d3:3d:38:d0:ac:ec:d7:94:6e:7c:36:16:4b:e6: 48:43:14:3e:c8:a5:4b:8e:39:d9:45:6d:5d:ec:fb:d9:08:b9: 72:93:bf:9e:cc:22:91:bf:b3:4a:ab:b2:1c:15:08:47:92:4a: 93:42:da:76:17:c3:d2:8a:18:29:46:fd:3f:d2:c1:aa:a2:54: 46:cd:b7:27:f0:ae:46:f5:09:18:39:49:a9:9f:40:90:c0:c5: 83:66:db:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwNzIyMjA0ODUyWhcNMjYwNzI5MjA0ODUyWjAYMRYwFAYD VQQDEw02YTYxMmNiNS0yN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7yLiSbLiBsD6ihcurWSa6thVnB6cRFgRcuoJJG1ImFMBFZ5fcZPCOn7+y/z 3SCxyu/Gz8av/4VvCZkMtPazLmpxRIi7Z+Oj2fO6LM/m0XZyA3FmjOGqXtLqVVAS OeVyq/pYUq8DndCx0zNOTA8DWn5cbDKo7CCcB5quaxKyouFfAAVywvzAKdfhwEkT 2f9pmHsVY0fsgdaKmvNvsjG6G20IXxAQavCGfRBwpJPBEC/gPx1W+HhhJznUvEA0 tOp/WH7BO1xtBpYf0JlP40+t5FmT2/Afj5aE63lGKi2SXZu2RnhGDuJA+IO4A8F6 1WXk6SzrPy787tXkOu27OqW4sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLt2cu5K aBF8sQ1w10YzVMgSyVi0MB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDXXCnbfLfmhQ8Qs0Euuk4dUX+US3R+hU7pxbxFQySYEGIMd4s5oOL46qGKa 4Kx3alvCSot7dA1Bs1nynG5itbPzOInioMSJxp8Xe0xTkFr0CWeMqzjKjrm1Ndu9 fsI4hxkiPpBj2SYcHvjwJBJ/4zYd8qokA5tDxKMoAhVUPMBisadZAyVxPWCjqCTW kjGcfU57qHRtof8s0jh7zFAGt61xr3izfdM9ONCs7NeUbnw2FkvmSEMUPsilS445 2UVtXez72Qi5cpO/nswikb+zSquyHBUIR5JKk0LadhfD0ooYKUb9P9LBqqJURs23 J/CuRvUJGDlJqZ9AkMDFg2bbmg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:12 2026 by rpki-client