$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: JycjlVvtpK2OGhcGmNpzmTCamC89IM/xronQa2dHVxo= Subject key identifier: 53:4D:D1:9C:2F:B1:D6:18:46:EA:1E:5A:75:FF:59:73:9F:26:83:1B Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 02D7 Signing time: Wed 23 Sep 2026 01:02:05 +0000 Manifest this update: Wed 23 Sep 2026 01:02:04 +0000 Manifest next update: Wed 30 Sep 2026 01:02:04 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: /zgClcXqszg6BPOkTNLxtd7lDvoicKc7ReCVDTW8Wz0=) 2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=) 3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=) 4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Sep 23 01:02:04 2026 GMT Not After : Sep 30 01:02:04 2026 GMT Subject: CN=6ab3250d-a87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:e3:52:24:11:04:48:e0:86:71:8e:57:2b: 14:43:03:bb:ec:34:58:80:3c:2e:51:14:37:bb:44: a4:e9:e9:3e:3b:a6:6e:80:e3:9a:6b:a9:99:0b:ec: 53:7b:39:95:83:31:ad:1c:2a:a9:dd:3e:dc:0a:16: 32:67:59:bf:a8:01:f3:ed:91:d9:c9:bf:6e:35:68: ab:7e:fd:a5:20:09:99:6d:a9:6e:60:4b:d2:65:b3: 63:ae:64:cd:29:f0:c5:92:1d:9e:f5:89:ec:9e:db: f2:9a:38:b6:53:c3:65:97:8a:5f:ae:8d:a1:fb:16: 57:57:f2:e4:48:d8:c1:6e:4a:b9:b4:3a:fd:c9:f5: c7:bc:bd:bd:f3:29:78:0d:38:52:ed:ca:7f:65:c4: 81:7f:66:bc:a1:e8:53:46:b3:92:b4:0a:3c:e4:4b: be:5a:33:4d:3a:d4:03:a5:be:c3:6e:1f:68:d2:88: d7:e4:86:1a:3a:af:5f:48:06:e8:b3:37:6b:9c:be: 28:92:be:52:4a:19:5c:ff:39:0b:9f:a5:cf:c4:37: d1:4f:3b:9a:0e:b0:3b:aa:e7:bf:4d:98:2d:67:f3: 35:e6:6e:0f:1f:c2:00:87:88:0d:bf:02:01:03:e8: 9c:8c:79:21:31:20:2c:bc:0b:23:94:a7:e8:a9:a6: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:D1:9C:2F:B1:D6:18:46:EA:1E:5A:75:FF:59:73:9F:26:83:1B X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:67:1b:fc:02:d7:55:99:1b:c7:5d:14:9c:fe:cf:92:df:9b: 3d:52:4b:86:dc:14:56:7f:5a:57:eb:bb:60:06:90:9b:d5:6c: 7d:4b:44:97:f8:b8:bb:51:8d:6b:1e:1f:85:d4:b2:86:41:a9: 82:85:1c:14:14:3f:91:40:14:59:e1:d4:23:af:c1:dc:d2:99: 6d:f5:aa:f8:54:54:c0:8c:8b:a1:82:d6:c7:7b:a8:89:57:e4: aa:a9:74:fa:e6:41:33:34:e9:ba:8d:01:ce:56:8f:f9:2d:fe: 6e:4f:14:35:1b:ea:95:14:6b:c5:27:8c:77:ca:2a:18:82:4c: c9:f3:ff:94:47:65:3c:34:5b:a2:14:6a:0d:1f:cc:32:df:26: 3b:ab:03:6c:5e:ac:21:af:52:ec:8f:99:a6:ab:0e:8d:84:86: 7b:0d:1e:96:0f:cb:ea:d8:78:1a:fc:ef:32:5f:54:e5:b9:0c: 88:3e:a6:10:a7:09:52:e0:48:60:10:87:19:de:af:ed:36:80: 7b:e2:35:6e:a6:db:6c:41:be:3b:73:05:74:1c:7d:7e:77:43: 28:5a:2b:06:03:09:b5:f0:11:b9:a5:f1:bf:92:fa:44:69:2c: ff:8e:4a:c7:25:3b:e8:9b:0b:71:5e:1a:79:1b:bd:33:46:7c: 88:b9:7d:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjYwOTIzMDEwMjA0WhcNMjYwOTMwMDEwMjA0WjAYMRYwFAYD VQQDEw02YWIzMjUwZC1hODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QPjUiQRBEjghnGOVysUQwO77DRYgDwuURQ3u0Sk6ek+O6ZugOOaa6mZC+xT ezmVgzGtHCqp3T7cChYyZ1m/qAHz7ZHZyb9uNWirfv2lIAmZbaluYEvSZbNjrmTN KfDFkh2e9Ynsntvymji2U8Nll4pfro2h+xZXV/LkSNjBbkq5tDr9yfXHvL298yl4 DThS7cp/ZcSBf2a8oehTRrOStAo85Eu+WjNNOtQDpb7Dbh9o0ojX5IYaOq9fSAbo szdrnL4okr5SShlc/zkLn6XPxDfRTzuaDrA7que/TZgtZ/M15m4PH8IAh4gNvwIB A+icjHkhMSAsvAsjlKfoqaYByQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNN0Zwv sdYYRuoeWnX/WXOfJoMbMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm2cb/ALXVZkbx10UnP7Pkt+bPVJLhtwUVn9aV+u7YAaQm9VsfUtEl/i4u1GN ax4fhdSyhkGpgoUcFBQ/kUAUWeHUI6/B3NKZbfWq+FRUwIyLoYLWx3uoiVfkqql0 +uZBMzTpuo0BzlaP+S3+bk8UNRvqlRRrxSeMd8oqGIJMyfP/lEdlPDRbohRqDR/M Mt8mO6sDbF6sIa9S7I+ZpqsOjYSGew0elg/L6th4GvzvMl9U5bkMiD6mEKcJUuBI YBCHGd6v7TaAe+I1bqbbbEG+O3MFdBx9fndDKForBgMJtfARuaXxv5L6RGks/45K xyU76JsLcV4aeRu9M0Z8iLl9yg== -----END CERTIFICATE-----Generated at Thu Sep 24 22:23:53 2026 by rpki-client