$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: P0sbpBmD/QP7gEK6r8VDQUaWvONUbo4IdWSUZH4atKs= Subject key identifier: 37:29:7E:F5:B8:2F:D8:7C:F7:71:5B:F5:4C:4B:EF:70:E2:D2:BA:32 Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17ED Signing time: Wed 22 Jul 2026 16:38:38 +0000 Manifest this update: Wed 22 Jul 2026 16:38:38 +0000 Manifest next update: Wed 29 Jul 2026 16:38:38 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: tmK8HKXdj/u9n2rxP14A9Sr3CbdZcjSyg8Y38+Zkp3g=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6138 (0x17fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Jul 22 16:38:38 2026 GMT Not After : Jul 29 16:38:38 2026 GMT Subject: CN=6a60f20e-020e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:d9:ae:be:40:d8:3a:d8:6b:fb:80:da:d4: 1e:1b:3f:a8:1b:72:9a:cb:6f:db:d6:93:ac:85:02: 10:6a:34:b6:e4:9c:e4:1b:27:56:58:b1:86:c5:10: ae:8b:e7:fa:63:f7:38:52:30:a0:62:c1:c3:2c:e1: c3:9b:c8:ce:58:e9:44:f9:17:8a:d9:3e:a5:5f:d9: ca:0a:0b:93:3f:30:8b:a8:9a:5d:2b:6e:c8:f0:14: da:4b:cd:86:dd:c6:50:d7:cb:2d:16:d1:e6:99:ca: d0:a5:ef:80:ad:cb:c5:e6:b7:61:94:6a:fb:09:68: 3f:23:ba:eb:e6:6b:b6:71:6d:4f:41:12:e9:a9:5b: 85:9e:4b:43:b1:d5:d2:42:8a:af:a9:c1:9e:84:5c: be:6e:b0:1d:94:b6:da:53:83:bf:b8:ed:9e:54:a1: 74:f8:23:a7:65:80:dc:a4:94:46:af:46:49:ed:45: 34:df:68:f9:84:d0:b0:0f:0a:4a:18:53:eb:a4:d9: 4c:ea:61:e7:93:55:33:a0:d5:b4:46:1f:cb:ab:39: aa:d4:5e:c0:9a:3a:05:89:53:62:bc:19:2c:88:c4: cb:64:8f:ea:8d:40:c7:57:a8:dc:e9:2d:17:b6:a4: d9:45:70:89:90:eb:92:79:22:db:0a:66:31:ae:74: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:29:7E:F5:B8:2F:D8:7C:F7:71:5B:F5:4C:4B:EF:70:E2:D2:BA:32 X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:3d:f5:f8:cf:76:09:f0:8d:57:92:76:37:e1:f7:3f:d5:9f: ab:b6:9c:ef:b1:70:8a:31:1e:90:6b:66:83:f9:1d:6a:25:16: cc:8c:40:de:aa:03:cb:3a:fb:32:75:a9:52:55:99:ef:2a:78: 24:d5:5f:5c:12:1f:a2:5a:aa:69:dc:4c:46:5a:80:8e:63:d7: c2:c5:70:d0:13:59:9d:53:08:3c:9d:e7:9d:be:f7:95:4f:33: 70:b8:6d:ac:da:6f:fc:1d:7a:24:6f:48:df:2b:16:5e:2e:a8: 14:86:f6:32:9d:1c:6c:2a:d2:c1:70:8f:ff:3f:11:91:33:bc: a5:74:e3:dd:7e:2e:e2:e3:75:0a:49:d5:50:9b:13:86:1e:db: d9:06:ef:83:7f:e1:0d:7b:c6:63:d2:19:b5:ea:15:5c:36:0f: 04:46:48:23:7f:0b:a0:4b:ac:f3:27:05:b8:37:1c:db:0f:c5: 20:14:21:d3:e1:34:a3:e1:8e:de:3f:94:ed:6c:79:b0:b3:57: f5:4a:a9:f3:fe:98:42:59:49:63:cc:d5:d1:ed:63:5a:b7:08: 73:b2:8e:7a:df:c2:eb:a1:63:5e:69:89:6f:d5:5c:40:35:d7: e3:bd:f1:be:50:44:6f:3d:09:b1:3d:b3:4d:24:bd:28:51:e5: b8:a9:1e:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwNzIyMTYzODM4WhcNMjYwNzI5MTYzODM4WjAYMRYwFAYD VQQDEw02YTYwZjIwZS0wMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQfZrr5A2DrYa/uA2tQeGz+oG3Kay2/b1pOshQIQajS25JzkGydWWLGGxRCu i+f6Y/c4UjCgYsHDLOHDm8jOWOlE+ReK2T6lX9nKCguTPzCLqJpdK27I8BTaS82G 3cZQ18stFtHmmcrQpe+ArcvF5rdhlGr7CWg/I7rr5mu2cW1PQRLpqVuFnktDsdXS QoqvqcGehFy+brAdlLbaU4O/uO2eVKF0+COnZYDcpJRGr0ZJ7UU032j5hNCwDwpK GFPrpNlM6mHnk1UzoNW0Rh/Lqzmq1F7AmjoFiVNivBksiMTLZI/qjUDHV6jc6S0X tqTZRXCJkOuSeSLbCmYxrnRe0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcpfvW4 L9h893Fb9UxL73Di0royMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1D31+M92CfCNV5J2N+H3P9Wfq7ac77FwijEekGtmg/kdaiUWzIxA3qoDyzr7 MnWpUlWZ7yp4JNVfXBIfolqqadxMRlqAjmPXwsVw0BNZnVMIPJ3nnb73lU8zcLht rNpv/B16JG9I3ysWXi6oFIb2Mp0cbCrSwXCP/z8RkTO8pXTj3X4u4uN1CknVUJsT hh7b2Qbvg3/hDXvGY9IZteoVXDYPBEZII38LoEus8ycFuDcc2w/FIBQh0+E0o+GO 3j+U7Wx5sLNX9Uqp8/6YQllJY8zV0e1jWrcIc7KOet/C66FjXmmJb9VcQDXX473x vlBEbz0JsT2zTSS9KFHluKkeIg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:33:16 2026 by rpki-client