$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft File: ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft (raw, json) Hash identifier: OICcr0ZGFJx3vRD9YqKStulYGPIk5+xbrtlz/iO4w/s= Subject key identifier: 8B:2D:00:36:5B:2A:46:8B:5C:CA:8F:67:02:2F:72:BD:EA:EC:59:06 Authority key identifier: 66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52 Certificate issuer: /CN=A9148355/serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft Manifest number: 44 Signing time: Mon 21 Sep 2026 08:32:25 +0000 Manifest this update: Mon 21 Sep 2026 08:32:25 +0000 Manifest next update: Mon 28 Sep 2026 08:32:25 +0000 Files and hashes: 1: ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl (hash: KMgsDGR1fMY3EnQXC+c/j85Z6d592sFFZ81qxJ3WXo8=) 2: 5BAEE25E5C1511F1A463B2F993833773.roa (hash: QAjB04e8BhjTa56xp5s1mLUlyQZMay4mhoLGvM2MXNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148355, serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52 Validity Not Before: Sep 21 08:32:25 2026 GMT Not After : Sep 28 08:32:25 2026 GMT Subject: CN=6ab0eb99-9185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:70:6b:2a:32:91:e2:0b:d2:a8:a6:a4:d1: f0:9e:df:1c:95:11:8f:b5:25:a4:b7:90:c6:da:c1: a4:ac:f3:a9:fa:0d:88:14:3d:38:b8:ce:a4:8b:02: ae:0f:73:22:6b:57:c2:5b:6a:4a:81:7d:04:ae:0c: 52:ba:0a:28:06:00:d3:2b:01:40:2d:10:80:5d:98: 3e:78:a0:3a:c1:84:30:d0:59:da:cf:d2:d6:70:58: f4:d3:52:30:dd:6d:d2:45:19:86:0f:fa:4a:5e:d9: 17:bd:82:26:01:4f:11:de:2f:ca:9b:82:e1:51:a8: bb:23:ee:fd:50:61:31:f7:10:a5:80:78:0c:9d:ee: a7:8b:85:f3:89:78:18:b8:35:45:e1:27:31:48:76: 5a:0b:67:a1:42:b0:af:04:a1:85:97:d5:9c:73:df: 80:da:f8:76:3c:ca:77:89:e3:77:43:c1:00:42:70: 2a:1d:d5:8c:02:44:4a:3d:4d:0a:d5:d5:43:06:79: f9:3d:3a:54:ad:0b:6c:88:3a:35:5d:7a:1e:89:28: 78:b1:38:01:b5:bc:09:6a:ef:30:f8:8d:b7:82:00: 0f:7d:56:84:b1:3f:c7:b1:20:4c:94:45:72:14:04: 57:96:fc:54:63:1f:e5:7f:64:39:8a:37:33:d1:f0: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2D:00:36:5B:2A:46:8B:5C:CA:8F:67:02:2F:72:BD:EA:EC:59:06 X509v3 Authority Key Identifier: keyid:66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:84:f2:55:d3:89:da:1e:7b:b2:6b:5f:42:9e:85:b3:1e: 8b:1b:ab:e4:84:b9:6b:97:a4:c7:33:a8:e2:4c:58:cc:9b:e6: b5:07:6a:1c:b3:ee:fa:00:0a:ad:df:84:d8:41:f1:76:6a:88: c2:da:29:09:71:dc:43:ea:7e:eb:79:d2:6e:c0:3d:09:5a:f1: f1:7e:48:68:1c:f4:ab:54:28:ff:7f:0f:29:00:4b:eb:c6:6f: 8d:61:e5:70:9a:74:eb:0d:62:62:c7:d4:09:1a:42:5c:eb:17: 81:59:a0:83:61:c1:25:ba:df:b4:07:f2:fa:ad:d5:f8:e2:45: d2:b4:2a:9e:0e:64:de:28:6c:71:65:f5:0d:0a:54:81:01:2e: 5e:9f:d5:f2:40:58:fd:8a:63:29:af:5c:ff:fb:79:5b:a5:96: c2:9e:93:b7:31:9d:88:97:2d:0d:2a:24:b0:f7:a5:4a:85:f6: 8c:4f:b5:b3:c2:bf:49:b6:b5:4e:64:e2:90:e9:8a:21:3a:08: 57:06:43:ca:bb:91:4c:fc:41:0b:b4:bc:1f:43:7a:ea:6d:b3: 91:2e:7d:e5:ac:b8:1e:10:c9:6e:9b:e0:51:ec:59:9d:c3:d5: 3b:cb:61:38:01:b7:5d:e6:d5:04:bf:ff:8a:b1:4d:26:28:d0: 05:ba:4a:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODM1NTExMC8GA1UEBRMoNjYwMUMxN0QxMjBFNDBFOTlDRTVGODFENDJENzU1NzQz OTYzM0Y1MjAeFw0yNjA5MjEwODMyMjVaFw0yNjA5MjgwODMyMjVaMBgxFjAUBgNV BAMTDTZhYjBlYjk5LTkxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfaXBrKjKR4gvSqKak0fCe3xyVEY+1JaS3kMbawaSs86n6DYgUPTi4zqSLAq4P cyJrV8JbakqBfQSuDFK6CigGANMrAUAtEIBdmD54oDrBhDDQWdrP0tZwWPTTUjDd bdJFGYYP+kpe2Re9giYBTxHeL8qbguFRqLsj7v1QYTH3EKWAeAyd7qeLhfOJeBi4 NUXhJzFIdloLZ6FCsK8EoYWX1Zxz34Da+HY8yneJ43dDwQBCcCod1YwCREo9TQrV 1UMGefk9OlStC2yIOjVdeh6JKHixOAG1vAlq7zD4jbeCAA99VoSxP8exIEyURXIU BFeW/FRjH+V/ZDmKNzPR8D3PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiy0ANlsq Rotcyo9nAi9yversWQYwHwYDVR0jBBgwFoAUZgHBfRIOQOmc5fgdQtdVdDljP1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MzU1L0NCNTMyODk0NUMx MTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9tYzVmZ2RRdGRWZERsalAx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmdIQmZSSU9RT21jNWZnZFF0ZFZkRGxqUDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 MzU1L0NCNTMyODk0NUMxMTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9t YzVmZ2RRdGRWZERsalAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASlYTyVdOJ2h57smtfQp6Fsx6LG6vkhLlrl6THM6jiTFjMm+a1B2ocs+76AAqt 34TYQfF2aojC2ikJcdxD6n7redJuwD0JWvHxfkhoHPSrVCj/fw8pAEvrxm+NYeVw mnTrDWJix9QJGkJc6xeBWaCDYcElut+0B/L6rdX44kXStCqeDmTeKGxxZfUNClSB AS5en9XyQFj9imMpr1z/+3lbpZbCnpO3MZ2Ily0NKiSw96VKhfaMT7Wzwr9JtrVO ZOKQ6YohOghXBkPKu5FM/EELtLwfQ3rqbbORLn3lrLgeEMlum+BR7Fmdw9U7y2E4 Abdd5tUEv/+KsU0mKNAFukqs -----END CERTIFICATE-----Generated at Tue Sep 22 08:36:19 2026 by rpki-client