$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft File: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft (raw, json) Hash identifier: q1Hrt6ixBEoJC4wLjgdoMxx08FTx5Jenkxa75qEX8WY= Subject key identifier: C7:48:99:EF:52:59:6D:26:39:19:C2:F7:9E:51:A9:29:70:24:98:3C Authority key identifier: CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 Certificate issuer: /CN=A9124C06/serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft Manifest number: 14 Signing time: Mon 21 Sep 2026 09:06:12 +0000 Manifest this update: Mon 21 Sep 2026 09:06:12 +0000 Manifest next update: Mon 28 Sep 2026 09:06:12 +0000 Files and hashes: 1: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl (hash: +WLzJ+QcPhTRj5hhWqTBmNvT6Jcpjp7b/1Wp/VwANRs=) 2: EF2CC9E0A29911F1827177C63211F970.roa (hash: HJA/q04RDyl2JEG0dRoW3kH0vkMNWEvJkvC8X6wdzMQ=) 3: 8597EE8AA4E011F1A0ADAD456711F970.roa (hash: DV23XeE7JQliptVufUxF5lM38uYKhAPS5yKJOSyijiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124C06, serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Validity Not Before: Sep 21 09:06:12 2026 GMT Not After : Sep 28 09:06:12 2026 GMT Subject: CN=6ab0f384-16ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:62:c3:39:1e:3a:0b:be:52:9d:fa:7d:9a:a9: 8f:8f:74:fa:48:e8:7d:7b:f4:e6:3b:19:89:0e:99: 2e:c0:96:3e:a4:ab:d3:c9:d3:94:52:a4:ef:9f:00: a7:f8:1a:a5:6d:c0:e4:43:88:b6:a1:72:45:ec:39: f1:b0:bf:e5:f4:fe:d5:9b:09:b2:fe:f6:dd:80:19: ef:e9:c3:1b:66:1e:91:ef:5e:a2:5c:4b:5c:79:0f: 46:ba:ed:b8:36:03:c8:c5:5f:6a:60:21:af:97:8c: 07:a0:47:17:04:30:91:f3:73:6d:c3:18:8a:2b:94: d4:2d:ed:0e:0b:bc:e6:c3:1b:e4:a3:28:c9:15:db: 77:56:f1:d6:ed:55:1d:3f:b9:6c:75:86:06:d5:e7: d2:68:54:06:57:d0:03:e9:2c:78:88:2d:36:18:6d: 26:b0:77:f4:b6:57:ab:47:1b:e5:45:f6:c7:92:b4: 8b:3c:7e:85:4f:cd:3e:ef:79:a0:6e:2d:e5:0a:a1: 08:58:4e:83:3b:1c:d1:72:08:6d:e6:ac:7e:a6:90: 78:88:0c:67:37:ca:3a:08:b0:04:69:69:a4:46:cb: 9f:1f:f2:fb:9e:bf:d0:c9:63:ae:0a:d6:4d:b8:77: dd:04:13:ee:8d:8c:2a:13:db:69:09:61:b6:1b:e9: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:99:EF:52:59:6D:26:39:19:C2:F7:9E:51:A9:29:70:24:98:3C X509v3 Authority Key Identifier: keyid:CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:b5:df:fa:80:18:dd:06:9d:72:89:ad:32:19:56:8a:ed: f4:9b:34:ca:40:0c:0b:6f:7b:79:16:0e:bc:f4:23:06:61:0c: 0f:da:14:0d:f3:89:d0:70:98:1b:2f:ee:17:26:c0:cb:84:c8: c7:65:f5:15:61:f2:87:89:9c:b8:ca:1c:e2:2d:c4:a5:87:60: 1c:a5:87:06:8b:73:6d:fa:93:05:bd:cb:54:73:68:30:7a:37: 27:25:16:a7:ea:71:5d:0f:89:c2:50:d0:b8:13:8d:05:70:32: 95:c8:2a:53:1b:5d:36:9d:b3:df:c5:26:98:b4:2e:00:0b:96: b4:12:cf:40:0a:73:f3:c0:5b:b9:78:90:e4:b7:c9:e2:50:b7: 62:22:88:40:48:17:cc:98:00:5f:ac:1a:c5:73:ba:57:2d:58: a7:ec:6f:4d:38:99:23:50:da:5e:0d:26:51:06:ff:2f:9f:68: 11:a1:24:ec:62:0f:43:3b:6a:d0:a7:87:70:1d:85:a2:5a:1e: 72:61:e0:80:ac:72:38:4b:10:54:8c:bc:82:fc:4b:3a:ef:2f: a3:53:92:2a:84:cf:f7:39:11:c2:ab:81:db:4f:c3:12:bf:9c: c5:ec:b4:ca:3b:c8:b7:54:d8:af:6a:0b:1f:c4:9f:35:42:ff: a9:57:45:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEMwNjExMC8GA1UEBRMoQ0MyQkNBRUM1NzNERkU1NDI4RUMzMzc1QzZGQTVENzBD NUVBMzU3MDAeFw0yNjA5MjEwOTA2MTJaFw0yNjA5MjgwOTA2MTJaMBgxFjAUBgNV BAMTDTZhYjBmMzg0LTE2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnYsM5HjoLvlKd+n2aqY+PdPpI6H179OY7GYkOmS7Alj6kq9PJ05RSpO+fAKf4 GqVtwORDiLahckXsOfGwv+X0/tWbCbL+9t2AGe/pwxtmHpHvXqJcS1x5D0a67bg2 A8jFX2pgIa+XjAegRxcEMJHzc23DGIorlNQt7Q4LvObDG+SjKMkV23dW8dbtVR0/ uWx1hgbV59JoVAZX0APpLHiILTYYbSawd/S2V6tHG+VF9seStIs8foVPzT7veaBu LeUKoQhYToM7HNFyCG3mrH6mkHiIDGc3yjoIsARpaaRGy58f8vuev9DJY64K1k24 d90EE+6NjCoT22kJYbYb6X5lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUx0iZ71JZ bSY5GcL3nlGpKXAkmDwwHwYDVR0jBBgwFoAUzCvK7Fc9/lQo7DN1xvpdcMXqNXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QzA2LzcxRkNDNjI4QTFD QzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xRbzdETjF4dnBkY01YcU5Y QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekN2SzdGYzlfbFFvN0ROMXh2cGRjTVhxTlhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QzA2LzcxRkNDNjI4QTFDQzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xR bzdETjF4dnBkY01YcU5YQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFLLXf+oAY3QadcomtMhlWiu30mzTKQAwLb3t5Fg689CMGYQwP2hQN84nQcJgb L+4XJsDLhMjHZfUVYfKHiZy4yhziLcSlh2AcpYcGi3Nt+pMFvctUc2gwejcnJRan 6nFdD4nCUNC4E40FcDKVyCpTG102nbPfxSaYtC4AC5a0Es9ACnPzwFu5eJDkt8ni ULdiIohASBfMmABfrBrFc7pXLVin7G9NOJkjUNpeDSZRBv8vn2gRoSTsYg9DO2rQ p4dwHYWiWh5yYeCArHI4SxBUjLyC/Es67y+jU5IqhM/3ORHCq4HbT8MSv5zF7LTK O8i3VNivagsfxJ81Qv+pV0Vg -----END CERTIFICATE-----Generated at Mon Sep 21 23:01:21 2026 by rpki-client