$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: Dq+8ulfnMOgQ94KLrzf6zB/KadPE2o2XCDEzEVsNfHs= Subject key identifier: 64:E9:E1:AB:B9:5A:7B:DD:DC:41:7B:8B:86:19:40:01:F0:5E:35:98 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 0165 Signing time: Sat 19 Sep 2026 05:10:00 +0000 Manifest this update: Sat 19 Sep 2026 05:10:00 +0000 Manifest next update: Sat 26 Sep 2026 05:10:00 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: FOH9ShqeuqwJrrv4oq93SvSHwEesp+v/E4OL40mGH54=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) 3: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (hash: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Sep 19 05:10:00 2026 GMT Not After : Sep 26 05:10:00 2026 GMT Subject: CN=6aae1928-0041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:af:f3:13:cb:24:c5:a0:5c:29:f3:18:e2: ba:9b:81:61:40:ea:61:7c:ab:33:bb:83:97:b7:d4: 40:87:f4:06:45:99:51:7b:be:5e:88:da:56:1f:cd: b2:0c:8e:a0:df:67:c1:6c:c9:f5:fa:a4:66:0a:6e: 45:b1:9f:51:a2:e9:ae:88:f7:d4:1d:bd:0e:22:92: 87:b7:93:37:66:cc:97:27:9f:f3:6e:38:02:90:9f: 1e:4c:b1:b9:c9:37:66:54:29:b9:e1:62:f7:0c:f0: 0a:f4:d8:ec:0f:84:4e:cd:d2:3f:eb:40:0f:16:08: 89:b2:bc:ef:0d:77:06:22:da:39:07:43:4c:85:60: 95:fd:8a:ec:1b:ac:c5:2a:0f:b8:7c:21:16:15:3f: 7a:e3:ef:be:c6:a1:6c:7b:76:b8:fb:09:48:c7:f5: d7:ba:24:a6:fa:cf:4f:d8:6e:f1:4e:b0:b7:a5:0c: 83:bd:46:72:96:b4:2f:05:8e:37:12:5d:0c:5c:76: e2:4a:7b:99:f6:b9:1e:18:5a:e7:22:9b:7b:66:59: 02:5e:58:d0:b7:80:81:3f:d3:2c:be:51:3e:d3:9e: 20:7d:ab:1c:78:87:12:30:9e:ee:ec:59:e6:60:d4: fd:f2:f1:e1:39:b5:ec:c8:79:bc:74:f3:04:a5:d8: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:E1:AB:B9:5A:7B:DD:DC:41:7B:8B:86:19:40:01:F0:5E:35:98 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:6c:21:77:61:5f:64:69:cb:03:42:a8:fb:0c:da:ba:c2: 3c:b9:c6:ab:fd:c2:88:6d:aa:ba:59:9d:75:d9:4a:6f:51:40: ae:81:f8:c5:d6:7a:89:28:5a:e6:76:1a:16:c7:9b:d5:65:b6: f2:ee:56:87:5d:15:63:3b:a3:e3:f7:4a:73:a4:b2:27:93:5e: 0d:55:4d:a9:0a:f5:89:a0:1a:15:47:e5:07:7e:04:cd:63:0f: 27:5b:93:f4:9c:1a:fe:0d:e5:15:dd:54:9b:1d:10:81:ed:da: 44:2d:49:26:d6:e3:39:2c:46:8a:fc:9a:40:12:82:80:17:41: 9c:c3:fb:02:64:3a:3e:55:58:49:3c:27:47:a3:68:46:27:15: c9:ff:b6:ce:1c:f1:8e:88:6f:53:61:97:ac:16:d0:43:3b:ff: f1:0a:26:c8:13:19:36:85:36:22:8e:e4:f6:21:bf:93:79:ab: 88:23:b7:3a:fc:76:bf:85:c7:37:ef:77:77:6f:1c:2e:cd:32: e4:24:71:66:44:3f:d6:87:e2:1b:aa:02:2b:14:ba:22:fa:9e: 64:af:9d:b4:14:a4:21:4a:fb:cd:c7:ac:ec:b9:16:84:f3:ff: 5c:cb:11:75:d9:d3:15:d7:3c:7a:ca:54:47:b9:ea:54:d2:1a: fc:dc:3c:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYwOTE5MDUxMDAwWhcNMjYwOTI2MDUxMDAwWjAYMRYwFAYD VQQDEw02YWFlMTkyOC0wMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33iv8xPLJMWgXCnzGOK6m4FhQOphfKszu4OXt9RAh/QGRZlRe75eiNpWH82y DI6g32fBbMn1+qRmCm5FsZ9RoumuiPfUHb0OIpKHt5M3ZsyXJ5/zbjgCkJ8eTLG5 yTdmVCm54WL3DPAK9NjsD4ROzdI/60APFgiJsrzvDXcGIto5B0NMhWCV/YrsG6zF Kg+4fCEWFT964+++xqFse3a4+wlIx/XXuiSm+s9P2G7xTrC3pQyDvUZylrQvBY43 El0MXHbiSnuZ9rkeGFrnIpt7ZlkCXljQt4CBP9MsvlE+054gfasceIcSMJ7u7Fnm YNT98vHhObXsyHm8dPMEpdgFkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTp4au5 Wnvd3EF7i4YZQAHwXjWYMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbNxsIXdhX2RpywNCqPsM2rrCPLnGq/3CiG2qulmdddlKb1FAroH4xdZ6iSha 5nYaFseb1WW28u5Wh10VYzuj4/dKc6SyJ5NeDVVNqQr1iaAaFUflB34EzWMPJ1uT 9Jwa/g3lFd1Umx0Qge3aRC1JJtbjOSxGivyaQBKCgBdBnMP7AmQ6PlVYSTwnR6No RicVyf+2zhzxjohvU2GXrBbQQzv/8QomyBMZNoU2Io7k9iG/k3mriCO3Ovx2v4XH N+93d28cLs0y5CRxZkQ/1ofiG6oCKxS6IvqeZK+dtBSkIUr7zces7LkWhPP/XMsR ddnTFdc8espUR7nqVNIa/Nw8lA== -----END CERTIFICATE-----Generated at Sun Sep 20 13:13:21 2026 by rpki-client