$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: AQmDLAxlXT4+XGeW1+QrQqtDRUBJpifTe+/Hc52u6hk= Subject key identifier: 89:9C:8E:8F:91:E2:62:20:F8:60:3A:DD:BB:29:56:F9:E3:C2:A4:62 Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2564 Signing time: Wed 22 Jul 2026 15:49:21 +0000 Manifest this update: Wed 22 Jul 2026 15:49:21 +0000 Manifest next update: Wed 29 Jul 2026 15:49:21 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 4oczPQHOPPmhlUT1FEgnLNfRYqMPBaYYnTtTD9uNWBc=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9604 (0x2584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jul 22 15:49:21 2026 GMT Not After : Jul 29 15:49:21 2026 GMT Subject: CN=6a60e681-c11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:d9:1b:2f:b4:74:46:bd:89:8b:02:a7:db: 5c:a7:b7:ce:ee:61:48:fb:bb:37:81:56:b4:1b:53: 28:78:b6:68:dd:76:f7:42:ec:82:fd:f1:90:0f:31: f2:5a:98:7d:97:68:a6:2f:fc:4d:ec:77:c6:8b:4b: 97:9f:6a:3f:4b:a2:b1:41:31:a4:8b:f3:be:87:2c: ed:2a:79:dc:e8:0a:b0:86:c6:54:d8:28:53:36:39: ae:eb:88:5c:b1:6e:4c:db:ea:8d:85:a4:6f:04:1a: 18:c2:7c:b2:6b:d8:a3:0e:d8:1a:74:d3:90:aa:cb: 65:8b:7d:c1:96:36:e9:aa:5a:f8:4d:aa:08:bb:40: 7c:41:2e:8b:05:34:1c:81:5d:82:56:e0:be:19:2a: e2:0e:31:80:67:d0:c6:4e:bf:43:25:01:69:89:a5: 1b:b1:b5:70:9b:68:2f:a6:92:49:f8:40:26:c8:84: 6c:e1:32:e9:ad:2c:4e:1a:42:54:ca:bd:35:92:4f: 1d:f5:7f:0a:40:75:34:3d:96:dd:8c:45:fe:c2:83: b3:2d:0a:45:a4:f3:68:f8:29:0e:ab:8c:36:1a:70: b5:aa:85:02:19:69:cb:f4:ee:c8:37:af:fa:39:d4: db:6e:e1:ed:ce:35:e2:63:0a:62:56:c6:76:8a:2a: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:8E:8F:91:E2:62:20:F8:60:3A:DD:BB:29:56:F9:E3:C2:A4:62 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dd:f1:ff:98:a6:f3:ee:4d:e6:f8:cd:1f:63:8c:a1:82:13: d4:f5:91:63:be:ae:fd:c8:04:fa:c1:85:a8:93:f6:4e:7d:8b: c3:1c:f0:54:d0:45:0f:a9:a7:09:31:a2:8a:e6:10:ef:b1:e9: 2e:73:5c:f4:13:99:ff:be:1d:b0:5f:71:e0:fe:a7:76:a2:f4: d6:4e:50:02:1d:9c:58:70:32:75:68:ba:22:95:51:e1:1a:ea: 23:80:d2:bd:e5:81:e0:1e:42:b3:3a:22:73:61:89:ed:41:93: 15:e6:b5:cf:aa:8d:31:59:83:7c:8a:84:75:45:29:c4:e0:a7: b0:01:09:7e:4a:6b:d6:1c:b6:3b:e0:13:0a:e4:4d:42:f0:3f: 45:5f:cf:a0:c0:3f:b7:cc:e8:53:4c:3e:fd:51:68:dc:66:8c: 1a:1e:57:69:13:00:73:b9:b2:ba:9a:a3:91:a8:47:87:4f:14: 27:28:16:70:f5:1f:0b:1e:52:1e:ec:45:67:d8:28:ff:d3:ab: d6:33:50:57:e9:59:0b:36:be:2a:03:69:03:3a:bf:32:22:11: b7:5b:ce:a5:e7:81:3c:c0:36:d6:62:72:3a:9d:1b:bd:ff:aa: 2f:97:ef:c9:88:3a:5a:e9:04:72:47:fd:3b:5a:fe:94:8d:9f: e7:f7:12:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNzIyMTU0OTIxWhcNMjYwNzI5MTU0OTIxWjAYMRYwFAYD VQQDEw02YTYwZTY4MS1jMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk3ZGy+0dEa9iYsCp9tcp7fO7mFI+7s3gVa0G1MoeLZo3Xb3QuyC/fGQDzHy Wph9l2imL/xN7HfGi0uXn2o/S6KxQTGki/O+hyztKnnc6AqwhsZU2ChTNjmu64hc sW5M2+qNhaRvBBoYwnyya9ijDtgadNOQqstli33Bljbpqlr4TaoIu0B8QS6LBTQc gV2CVuC+GSriDjGAZ9DGTr9DJQFpiaUbsbVwm2gvppJJ+EAmyIRs4TLprSxOGkJU yr01kk8d9X8KQHU0PZbdjEX+woOzLQpFpPNo+CkOq4w2GnC1qoUCGWnL9O7IN6/6 OdTbbuHtzjXiYwpiVsZ2iipYZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImcjo+R 4mIg+GA63bspVvnjwqRiMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjt3x/5im8+5N5vjNH2OMoYIT1PWRY76u/cgE+sGFqJP2Tn2LwxzwVNBFD6mn CTGiiuYQ77HpLnNc9BOZ/74dsF9x4P6ndqL01k5QAh2cWHAydWi6IpVR4RrqI4DS veWB4B5Cszoic2GJ7UGTFea1z6qNMVmDfIqEdUUpxOCnsAEJfkpr1hy2O+ATCuRN QvA/RV/PoMA/t8zoU0w+/VFo3GaMGh5XaRMAc7myupqjkahHh08UJygWcPUfCx5S HuxFZ9go/9Or1jNQV+lZCza+KgNpAzq/MiIRt1vOpeeBPMA21mJyOp0bvf+qL5fv yYg6WukEckf9O1r+lI2f5/cSZA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:54:24 2026 by rpki-client