$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: nJvnAKjS6qHfYAJUVBoQYM+tIPRtr0tfS0NhCVSNWFU= Subject key identifier: 3F:D9:18:70:45:8B:58:08:B8:B9:A0:F0:E6:C9:65:11:61:10:9C:CA Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0942 Signing time: Sun 26 Jul 2026 20:43:55 +0000 Manifest this update: Sun 26 Jul 2026 20:43:55 +0000 Manifest next update: Sun 02 Aug 2026 20:43:55 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: yhgY2d9Sr5WKO7zhTJ39hRf1o+JPxnxUxCUVnmMyA54=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: FnGXHW3NTkfV5VQ0kQwJy6k6mXA3xyfslsGAqppArLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Jul 26 20:43:55 2026 GMT Not After : Aug 2 20:43:55 2026 GMT Subject: CN=6a66718b-26fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:74:6a:f9:be:c4:60:b1:d9:3f:e3:b9:a9: ac:73:c6:2d:53:6e:1c:b5:9a:b8:df:6c:74:df:b5: b1:08:53:ed:05:7c:68:c4:d0:f3:e7:b2:27:2a:e2: 9d:d1:6f:79:0a:5f:3a:63:0f:72:a5:fc:a5:cc:2c: 43:0a:82:78:cd:d6:0a:57:e4:0a:4e:f9:20:24:32: dc:0f:16:74:2f:ee:61:bd:1b:b3:e8:29:fd:21:f0: c7:c5:62:ac:e0:93:40:4d:b3:93:3e:5a:c1:79:c3: 13:a6:d8:79:40:2b:08:2b:3b:bf:77:f9:02:7a:2f: 22:56:7a:c3:49:56:ca:86:ba:5a:86:26:ea:fe:7b: d8:21:c5:17:58:8c:c2:c2:c0:36:40:28:5c:9c:f7: 9e:cf:bf:a9:aa:b4:45:5b:c3:a3:0d:5b:c0:89:f5: cd:85:3d:7d:2a:4b:15:bc:2d:84:4f:00:a5:8a:a1: a2:9f:95:9e:aa:7e:ed:78:28:9f:c5:0f:22:1c:c3: 42:e2:db:85:b7:e3:eb:ec:a5:e7:b5:0d:ac:82:5b: 25:89:95:e5:aa:13:13:45:07:a4:30:77:b4:5f:a9: d6:6b:d2:59:b8:4d:d1:4d:b5:9c:e6:80:f3:02:36: e6:93:25:23:3f:14:cb:91:31:a9:7e:fb:82:b9:6d: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D9:18:70:45:8B:58:08:B8:B9:A0:F0:E6:C9:65:11:61:10:9C:CA X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:79:69:26:b9:7d:16:46:19:9d:3e:43:24:f2:b6:08:27:32: 03:fa:41:4d:d8:c2:11:fa:97:95:8b:04:50:81:ce:11:e7:45: 66:12:c7:92:b3:e4:07:07:82:d8:fa:49:0f:ba:cb:1f:12:9c: 7d:a6:1c:9c:dd:d0:94:74:94:a0:d8:f4:f1:f3:ca:5e:a1:d8: 12:ea:42:11:56:5b:db:fc:9a:19:20:50:c4:c7:21:dc:1c:e6: 7a:36:92:c5:a1:3d:83:65:e4:55:da:7a:a3:31:1b:ce:a8:83: 52:03:fc:4a:f5:f9:e2:fd:0f:92:07:31:bc:5f:e7:73:6e:4a: 89:19:3f:81:51:d3:1b:b8:12:3c:6c:02:31:f1:3c:54:32:23: 53:23:55:fa:17:ff:4b:aa:0c:f6:fc:1e:86:f9:9d:f5:8f:1e: 0f:5f:f6:dd:49:35:41:38:52:2d:51:f4:58:13:2e:26:01:7c: ca:2f:48:75:2d:13:0d:5d:b0:9a:34:84:d7:76:0b:bb:ed:31: 31:13:8f:54:52:1f:6d:a1:03:c3:0d:de:1e:f3:75:95:d8:e6: 5d:50:a8:c7:30:42:a4:64:48:bc:58:d8:ec:ad:77:f0:2f:25: ff:24:17:bf:e1:85:39:15:d9:54:80:1f:53:c6:2e:18:c0:ab: 5c:ba:8e:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwNzI2MjA0MzU1WhcNMjYwODAyMjA0MzU1WjAYMRYwFAYD VQQDEw02YTY2NzE4Yi0yNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jF0avm+xGCx2T/juamsc8YtU24ctZq432x037WxCFPtBXxoxNDz57InKuKd 0W95Cl86Yw9ypfylzCxDCoJ4zdYKV+QKTvkgJDLcDxZ0L+5hvRuz6Cn9IfDHxWKs 4JNATbOTPlrBecMTpth5QCsIKzu/d/kCei8iVnrDSVbKhrpahibq/nvYIcUXWIzC wsA2QChcnPeez7+pqrRFW8OjDVvAifXNhT19KksVvC2ETwCliqGin5Weqn7teCif xQ8iHMNC4tuFt+Pr7KXntQ2sglsliZXlqhMTRQekMHe0X6nWa9JZuE3RTbWc5oDz AjbmkyUjPxTLkTGpfvuCuW1NPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/ZGHBF i1gIuLmg8ObJZRFhEJzKMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHlpJrl9FkYZnT5DJPK2CCcyA/pBTdjCEfqXlYsEUIHOEedFZhLHkrPkBweC 2PpJD7rLHxKcfaYcnN3QlHSUoNj08fPKXqHYEupCEVZb2/yaGSBQxMch3BzmejaS xaE9g2XkVdp6ozEbzqiDUgP8SvX54v0PkgcxvF/nc25KiRk/gVHTG7gSPGwCMfE8 VDIjUyNV+hf/S6oM9vwehvmd9Y8eD1/23Uk1QThSLVH0WBMuJgF8yi9IdS0TDV2w mjSE13YLu+0xMROPVFIfbaEDww3eHvN1ldjmXVCoxzBCpGRIvFjY7K138C8l/yQX v+GFORXZVIAfU8YuGMCrXLqO0g== -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:06 2026 by rpki-client