$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: 165k4o+q18luWX7GRqI9sLagUxbld8RPKVmvxbr5Q/g= Subject key identifier: 2D:1B:5D:35:FB:DA:03:E2:82:16:1B:0B:24:76:EB:49:1C:57:5B:7E Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0DD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0DC8 Signing time: Fri 12 Jun 2026 17:52:14 +0000 Manifest this update: Fri 12 Jun 2026 17:52:13 +0000 Manifest next update: Fri 19 Jun 2026 17:52:13 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: wSbn0MD2EuybBbq1e6ddfCc5MVY1v5mg/jfJbpMX8LE=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: DgN4HYG0Ge4rNgYzbp7pU5juBkf2LCQihGrPJdM6ERY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3538 (0xdd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Jun 12 17:52:13 2026 GMT Not After : Jun 19 17:52:13 2026 GMT Subject: CN=6a2c474d-373d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:6a:50:5f:0b:1f:9c:6d:0c:be:5f:f2:7b: d3:99:3b:40:2a:06:36:80:57:20:c5:89:9d:cc:35: e3:ea:af:8d:3f:3e:9b:2f:13:35:8c:51:b0:ab:29: 27:7e:9c:70:cd:32:f2:e4:aa:47:ab:89:34:07:83: 68:97:cd:fb:2f:9f:02:4f:f2:ad:13:ba:a1:d3:2b: d7:97:c5:e8:eb:56:c6:a9:7f:47:11:1e:83:ed:0f: 3d:c1:9e:4d:b1:7b:64:50:58:18:67:e6:6e:f3:f6: e2:6f:0e:e3:dc:b7:6a:73:63:37:76:18:14:a9:b4: 23:d5:88:09:0f:de:23:74:6e:23:99:3d:35:05:25: fc:42:c2:46:5e:52:d5:a0:06:12:93:fa:11:63:26: 51:3a:31:ae:99:7a:5c:22:4e:ec:c4:c3:03:22:9e: a9:06:35:78:79:6b:f6:8d:f1:37:91:ca:f0:96:f2: 43:03:5f:e8:bb:3e:89:2f:65:73:13:bb:3c:13:9b: e3:d8:85:1c:ca:eb:9f:61:21:bf:e0:87:3c:08:d1: bf:e2:41:c3:74:ec:2c:34:2a:f9:37:34:c8:92:15: de:cc:26:8a:3d:a2:5a:9c:1b:4a:68:08:a5:c3:15: 24:f7:99:fe:d5:6a:21:49:76:fe:ff:92:66:ff:87: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:5D:35:FB:DA:03:E2:82:16:1B:0B:24:76:EB:49:1C:57:5B:7E X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c8:9c:a5:f6:18:60:44:00:5a:80:29:2f:ce:41:5f:74:d8: 80:6f:2b:33:a9:ad:37:46:39:82:fd:f0:a7:26:81:38:68:d8: db:df:f3:ad:a7:eb:bc:8c:75:cf:9e:96:e6:8a:42:83:2e:75: 2f:18:36:9c:21:ef:06:44:88:9f:68:b6:ff:5c:7c:7b:c3:41: 36:f6:58:ed:27:c1:32:25:31:ef:c6:82:e4:e8:13:5c:21:d1: 4c:3b:a0:bd:96:3b:5a:51:f4:fb:35:06:a6:29:57:22:6b:d0: 4a:db:3a:a5:5a:ca:44:ab:df:1c:8a:a1:b3:95:e6:47:db:5e: 45:b0:50:d0:6c:70:d8:b9:65:2a:91:9d:8d:e0:6a:30:73:05: ae:d5:8d:83:18:e1:ed:8a:4f:6c:b6:8e:d6:69:93:16:5b:3d: 20:cc:e5:72:11:a7:56:4f:8c:5d:20:7a:83:85:f7:68:d9:46: 35:d8:50:61:f4:04:57:e9:dc:68:05:8a:7a:82:ce:f1:eb:db: a8:12:00:ff:f3:ff:61:52:7a:51:a1:66:f9:5f:5a:3e:f8:bd: d6:bb:e7:2d:4c:4f:67:b8:7f:89:61:47:22:99:60:0a:0f:0a: 58:27:0d:06:18:3a:f2:f6:9b:57:ac:24:2b:fa:fd:c8:12:37: 6f:ed:44:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYwNjEyMTc1MjEzWhcNMjYwNjE5MTc1MjEzWjAYMRYwFAYD VQQDEw02YTJjNDc0ZC0zNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBpqUF8LH5xtDL5f8nvTmTtAKgY2gFcgxYmdzDXj6q+NPz6bLxM1jFGwqykn fpxwzTLy5KpHq4k0B4Nol837L58CT/KtE7qh0yvXl8Xo61bGqX9HER6D7Q89wZ5N sXtkUFgYZ+Zu8/bibw7j3Ldqc2M3dhgUqbQj1YgJD94jdG4jmT01BSX8QsJGXlLV oAYSk/oRYyZROjGumXpcIk7sxMMDIp6pBjV4eWv2jfE3kcrwlvJDA1/ouz6JL2Vz E7s8E5vj2IUcyuufYSG/4Ic8CNG/4kHDdOwsNCr5NzTIkhXezCaKPaJanBtKaAil wxUk95n+1WohSXb+/5Jm/4dLBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0bXTX7 2gPighYbCyR260kcV1t+MB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC8icpfYYYEQAWoApL85BX3TYgG8rM6mtN0Y5gv3wpyaBOGjY29/zrafrvIx1 z56W5opCgy51Lxg2nCHvBkSIn2i2/1x8e8NBNvZY7SfBMiUx78aC5OgTXCHRTDug vZY7WlH0+zUGpilXImvQSts6pVrKRKvfHIqhs5XmR9teRbBQ0Gxw2LllKpGdjeBq MHMFrtWNgxjh7YpPbLaO1mmTFls9IMzlchGnVk+MXSB6g4X3aNlGNdhQYfQEV+nc aAWKeoLO8evbqBIA//P/YVJ6UaFm+V9aPvi91rvnLUxPZ7h/iWFHIplgCg8KWCcN Bhg68vabV6wkK/r9yBI3b+1EvA== -----END CERTIFICATE-----Generated at Sun Jun 14 03:04:13 2026 by rpki-client