$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: 2SbmZnxbjaq+9mlz0wQhZo7zV8kyy2PT/kLTGpRQPQg= Subject key identifier: 2D:A2:08:33:EF:0A:B4:A3:BF:DC:87:58:D3:DF:4F:C9:37:56:A1:73 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0960 Signing time: Sun 20 Sep 2026 20:02:31 +0000 Manifest this update: Sun 20 Sep 2026 20:02:31 +0000 Manifest next update: Sun 27 Sep 2026 20:02:31 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: eI8e68PF2+V3BsL2xDaQpN4okjkedeLYNxPe/eR4fzw=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: +Xkt2DNTJOCdZPYjlojg86qpKWb+zZHgvK4oGpILdiQ=) 3: D9B2964AA5DB11F1B9CB19293711F970.roa (hash: vWd7+BKeQMnGaY6COlgtppO/23CwodtQYfzckHxeGls=) 4: D8F7EBB0A5DB11F1B9CB19293711F970.roa (hash: oTvEKrWFUenaamzbuTSgsu0SUBBagSjY4Cjk6T15Eow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Sep 20 20:02:31 2026 GMT Not After : Sep 27 20:02:31 2026 GMT Subject: CN=6ab03bd7-34dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:74:8d:d8:ec:6c:f2:1c:2b:59:1c:85:b3: 8b:58:9f:42:de:74:93:4e:23:91:2b:98:48:3f:f0: 06:33:82:8e:47:3e:94:bc:34:5f:0f:c0:6c:1c:b5: 10:e3:60:e1:d5:51:2b:40:a9:67:37:e0:15:62:d5: 26:ce:70:ac:13:46:fd:5d:84:8e:10:4e:98:f0:e3: 11:dc:11:c3:fb:6e:76:3d:19:cb:44:28:e1:0d:0d: 6d:8f:2d:6c:cc:0c:54:ba:0f:91:e5:2b:14:c1:ed: dc:2c:5a:9c:98:46:9a:09:75:a5:9f:85:9e:30:16: 90:48:d6:0a:07:7a:53:b2:79:5b:ae:6f:13:dd:c6: 14:9b:3a:fd:82:ab:65:de:6d:e5:a8:56:dc:73:4a: aa:48:6c:d4:7e:2c:c8:3b:79:c4:c7:0a:e3:11:4c: f3:0d:3a:f1:19:8c:3d:d5:63:7d:da:3d:a6:9d:33: 4a:51:57:81:86:44:ed:b6:3e:aa:35:79:15:10:9e: 1f:09:83:cf:fb:54:78:50:6e:77:4b:6c:7c:92:39: 79:f6:da:05:b1:ab:e9:e1:79:51:89:f8:9c:f9:29: 7d:6a:e3:a2:4e:00:0d:f9:3e:a4:75:0b:ee:30:e8: 95:1d:f9:92:8d:4b:7d:ef:7e:86:47:a0:a6:1f:e4: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:08:33:EF:0A:B4:A3:BF:DC:87:58:D3:DF:4F:C9:37:56:A1:73 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a3:50:c1:da:cc:87:35:50:c9:d5:c8:8e:b2:78:ab:60:57: 29:1e:64:a7:53:c5:be:6f:f4:f5:99:91:4f:8a:bf:bf:88:77: 31:3f:fe:9e:06:ec:59:89:70:96:7c:a3:72:5e:21:95:6f:df: 01:30:a0:f8:c8:f9:2c:83:22:40:07:f8:66:50:f5:75:92:f8: 64:d4:94:b4:1d:90:81:4b:55:f3:6b:fe:17:43:50:a1:92:23: 57:33:ca:ea:43:e7:8e:91:75:3c:4d:7d:8a:c7:60:58:34:3c: 31:1c:20:95:bb:72:d4:c6:19:f2:67:52:8c:3a:ff:b8:7f:33: d4:aa:39:bb:6c:ee:ef:16:96:66:59:69:9a:4f:12:63:04:87: 79:12:76:68:e3:69:8e:46:ee:78:ed:62:65:81:aa:20:d4:2f: 3c:85:06:d7:2f:79:3e:11:11:9e:e0:33:f4:9e:d7:bc:6f:b7: c3:62:55:82:e3:f7:44:3a:e0:5b:b2:cf:39:d0:b3:94:d0:9f: 8e:af:27:bd:74:1b:ce:a5:29:62:ed:99:08:6e:e1:a7:0d:04: e2:68:d5:69:65:4b:fc:73:fa:62:ed:6b:fa:18:45:4c:bd:fe: f0:1c:81:d9:63:35:ab:a4:2c:d2:5a:1f:19:08:40:78:3e:d3: d8:ac:46:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwOTIwMjAwMjMxWhcNMjYwOTI3MjAwMjMxWjAYMRYwFAYD VQQDEw02YWIwM2JkNy0zNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw750jdjsbPIcK1kchbOLWJ9C3nSTTiORK5hIP/AGM4KORz6UvDRfD8BsHLUQ 42Dh1VErQKlnN+AVYtUmznCsE0b9XYSOEE6Y8OMR3BHD+252PRnLRCjhDQ1tjy1s zAxUug+R5SsUwe3cLFqcmEaaCXWln4WeMBaQSNYKB3pTsnlbrm8T3cYUmzr9gqtl 3m3lqFbcc0qqSGzUfizIO3nExwrjEUzzDTrxGYw91WN92j2mnTNKUVeBhkTttj6q NXkVEJ4fCYPP+1R4UG53S2x8kjl59toFsavp4XlRific+Sl9auOiTgAN+T6kdQvu MOiVHfmSjUt9736GR6CmH+TFXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2iCDPv CrSjv9yHWNPfT8k3VqFzMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJaNQwdrMhzVQydXIjrJ4q2BXKR5kp1PFvm/09ZmRT4q/v4h3MT/+ngbsWYlw lnyjcl4hlW/fATCg+Mj5LIMiQAf4ZlD1dZL4ZNSUtB2QgUtV82v+F0NQoZIjVzPK 6kPnjpF1PE19isdgWDQ8MRwglbty1MYZ8mdSjDr/uH8z1Ko5u2zu7xaWZllpmk8S YwSHeRJ2aONpjkbueO1iZYGqINQvPIUG1y95PhERnuAz9J7XvG+3w2JVguP3RDrg W7LPOdCzlNCfjq8nvXQbzqUpYu2ZCG7hpw0E4mjVaWVL/HP6Yu1r+hhFTL3+8ByB 2WM1q6Qs0lofGQhAeD7T2KxG6w== -----END CERTIFICATE-----Generated at Mon Sep 21 19:11:23 2026 by rpki-client