$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: CswZGN83b6AzSrrDYyTYq0n9ORBwtYlh0WUA7RF7yhQ= Subject key identifier: D5:29:9F:E7:BF:CE:95:89:6A:3F:43:10:B5:D2:9A:BC:BC:74:C4:F5 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 1450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 140E Signing time: Mon 02 Mar 2026 09:56:56 +0000 Manifest this update: Mon 02 Mar 2026 09:56:56 +0000 Manifest next update: Mon 09 Mar 2026 09:56:56 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: OgvjgzLx8zaeV6dXFDgQyc4d4wr31lz5rda8Lbw6tMw=) 2: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: eMdCwd4thZUd7vQOqxG8t2aPfsobCFO0nB9eD759A1M=) 3: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: FRQ+DT10D+zkaCvxI+Qd7phB0uQvPJfA96uHFNE/wXA=) 4: 8F447DB8149911F197DD892E413D8C67.roa (hash: HOOfKCeoggC9RccN7odeUXS5kKSAU8i76k7r0RBuEmk=) 5: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: Se0I8eDDaC/8yhzniql+f7h2soMxMsS+mHw18desYKc=) 6: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: eguoD2KwCEeVtfvLaJuhvGErHeJK8RyABQd8zfSveG4=) 7: 2191F8C8161E11F1ABA6B0B1313D8C67.roa (hash: 4BqdekGP6TOJvlcxDVIKX748VvIpKr54ejupCldnA4M=) 8: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: IHrAProFNEBmzzxFvkgejVqjw20u0zA2ggmfDoxw1nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5200 (0x1450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Mar 2 09:56:56 2026 GMT Not After : Mar 9 09:56:56 2026 GMT Subject: CN=69a55ee8-c781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:24:0c:93:e3:d3:6e:03:b2:ec:26:35:8d: 74:ce:2a:2e:5e:0f:d7:ea:1c:63:e1:45:f9:d3:dd: b6:03:cb:af:61:16:69:a4:9c:22:02:e0:3b:77:e5: 96:0c:6a:5b:66:23:29:d4:e7:09:87:4f:7e:af:1a: 78:bb:3f:14:10:30:77:22:8a:cf:93:93:b7:16:b8: c2:ef:68:17:5a:79:55:a8:ae:71:48:90:ce:32:c4: 95:b6:cf:8d:b2:ad:a6:ea:ed:58:3e:23:75:82:f3: e6:90:70:0f:02:f9:54:86:f9:bf:08:97:9f:19:d5: 0c:fe:5d:20:d2:bd:a8:51:76:bc:5d:21:d7:c4:1f: 3f:b0:85:d0:01:3d:fd:5b:37:8c:1e:0c:ba:03:a0: 48:a1:69:22:7f:e9:8f:a9:9a:02:8c:44:3b:aa:48: 21:c5:9f:5c:73:37:3a:0b:36:78:b4:27:8f:55:7a: 4f:9f:01:27:0e:26:50:5c:e7:33:f2:aa:eb:b5:03: 21:b2:74:0d:2d:de:1f:59:cd:41:07:66:0a:67:65: a3:6f:29:5a:ce:87:95:e5:b1:15:d8:19:0a:12:bd: 46:c9:d5:61:56:99:06:86:84:0b:87:ec:86:4b:b3: 25:43:77:84:bd:6c:45:ce:53:c6:aa:a2:b4:40:57: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:9F:E7:BF:CE:95:89:6A:3F:43:10:B5:D2:9A:BC:BC:74:C4:F5 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:7e:42:64:ca:a0:ef:e3:0e:22:c1:66:f8:0d:e0:05:8b:bf: b8:04:69:9a:4e:a3:d0:a9:aa:90:28:1a:9b:08:f6:5c:7e:2b: 64:fc:49:97:48:47:73:22:ec:2c:6b:3b:ff:41:70:72:09:ec: 36:09:07:2e:11:1f:49:d0:00:0d:74:67:25:f0:91:18:7c:d6: 50:02:d0:4f:13:90:ca:cc:c5:b3:e5:3b:98:56:d8:86:72:38: 3f:ff:ce:19:47:a4:50:39:ac:02:b1:5d:a2:54:08:f9:a4:d2: c7:0d:69:ff:04:5a:94:a0:7d:89:dd:9a:35:07:76:ce:d4:0e: 2f:35:7d:67:06:a9:8a:3c:76:39:18:77:cc:cf:a3:bc:df:bc: 57:71:65:ed:5f:91:7d:ab:9e:76:4d:86:e8:6f:e6:bd:9a:c6: 86:92:0b:f1:76:01:d6:42:10:f9:08:5e:9c:1b:38:b0:cd:f9: 6b:b4:c6:29:58:1c:48:08:70:b8:9d:b7:95:2d:6c:98:5a:2f: c7:32:56:6d:9c:e2:68:c8:ae:0d:b4:c7:09:bf:35:27:30:1e: 21:ae:ae:91:6c:61:49:b0:1e:e2:e8:7b:83:0e:fe:54:ed:5c: 07:0e:f3:28:25:21:7b:af:e0:b4:61:a7:da:e9:25:1b:4e:0e: 02:52:48:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwMzAyMDk1NjU2WhcNMjYwMzA5MDk1NjU2WjAYMRYwFAYD VQQDEw02OWE1NWVlOC1jNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxckDJPj024DsuwmNY10ziouXg/X6hxj4UX50922A8uvYRZppJwiAuA7d+WW DGpbZiMp1OcJh09+rxp4uz8UEDB3IorPk5O3FrjC72gXWnlVqK5xSJDOMsSVts+N sq2m6u1YPiN1gvPmkHAPAvlUhvm/CJefGdUM/l0g0r2oUXa8XSHXxB8/sIXQAT39 WzeMHgy6A6BIoWkif+mPqZoCjEQ7qkghxZ9cczc6CzZ4tCePVXpPnwEnDiZQXOcz 8qrrtQMhsnQNLd4fWc1BB2YKZ2WjbylazoeV5bEV2BkKEr1GydVhVpkGhoQLh+yG S7MlQ3eEvWxFzlPGqqK0QFeeHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUpn+e/ zpWJaj9DELXSmry8dMT1MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVH5CZMqg7+MOIsFm+A3gBYu/uARpmk6j0KmqkCgamwj2XH4rZPxJl0hHcyLs LGs7/0FwcgnsNgkHLhEfSdAADXRnJfCRGHzWUALQTxOQyszFs+U7mFbYhnI4P//O GUekUDmsArFdolQI+aTSxw1p/wRalKB9id2aNQd2ztQOLzV9Zwapijx2ORh3zM+j vN+8V3Fl7V+Rfauedk2G6G/mvZrGhpIL8XYB1kIQ+QhenBs4sM35a7TGKVgcSAhw uJ23lS1smFovxzJWbZziaMiuDbTHCb81JzAeIa6ukWxhSbAe4uh7gw7+VO1cBw7z KCUhe6/gtGGn2uklG04OAlJIcA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:44 2026 by rpki-client