$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: IriT1aoLbhah4/oIJNfFh4wrpvQzmMTtA8g8JQnJkf8= Subject key identifier: 4B:34:81:AB:6A:76:CF:DE:D7:D4:0E:51:D9:E6:BA:EF:C5:A9:B6:CE Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0ED8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0ECD Signing time: Sun 20 Sep 2026 17:39:14 +0000 Manifest this update: Sun 20 Sep 2026 17:39:14 +0000 Manifest next update: Sun 27 Sep 2026 17:39:14 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: 4s/N1L7vLnTkwlhhoGcaOYpFeLfGOdItyFL7PKUTzCE=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: 6bd87kKcxEkzqR9DlqOb7Lyf/e9EEjGnzdd65g5tCQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3800 (0xed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Sep 20 17:39:14 2026 GMT Not After : Sep 27 17:39:14 2026 GMT Subject: CN=6ab01a42-b5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:0e:39:d2:ea:4d:ab:10:83:0c:1a:64:8f: ac:d6:53:c3:ce:fb:87:e9:c2:0e:04:8d:25:91:a3: 3a:1a:f9:84:be:1c:57:ac:9c:43:b0:cd:06:bf:36: 59:4a:55:13:cb:fb:fd:32:fa:66:75:d3:37:0c:5d: eb:e6:4d:a5:6e:03:db:e0:31:36:bb:20:0a:aa:11: 26:e8:12:4b:ae:8f:55:e9:4d:8c:01:5c:8d:e7:cf: e1:92:a3:2e:7e:68:2e:eb:16:57:7f:c6:64:cd:cc: 25:05:a1:42:65:2c:1a:82:7f:cf:a1:6f:3e:08:c8: 19:2b:98:8b:94:07:05:20:7c:a8:3c:df:d7:e9:41: 9b:02:a2:02:e3:07:c2:1a:1d:e0:81:0f:11:60:c7: 43:0f:6d:f7:a5:fa:36:87:92:37:d8:dc:c3:0c:50: d8:37:a0:2e:54:82:de:12:42:5b:79:a7:f4:73:87: 5e:61:c4:a1:13:6c:f9:45:74:60:d0:93:ba:5d:25: 71:e3:d6:6e:15:1c:25:86:a3:c5:32:8a:56:b4:a2: 4f:14:5f:6b:88:57:aa:8d:71:67:24:69:27:75:46: 7c:9f:c0:8b:2c:01:78:cd:3c:ec:35:b2:3d:09:47: de:fe:51:5f:65:f5:92:b2:ff:17:24:da:19:66:99: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:81:AB:6A:76:CF:DE:D7:D4:0E:51:D9:E6:BA:EF:C5:A9:B6:CE X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1f:b1:59:4e:66:8e:3a:8c:fd:61:6a:b7:eb:27:c3:bd:d5: ac:c8:16:6b:f4:5a:56:0c:b9:f5:f9:be:24:fa:71:89:a9:4a: c6:1d:e8:32:81:2c:ef:b8:eb:43:24:f1:31:08:5d:43:be:5e: 8e:99:ee:ee:0c:54:fa:ed:ea:3e:06:63:ae:9f:6a:6d:6b:75: 20:5d:d8:8c:f3:47:f2:0a:97:41:d3:5e:dc:9a:9f:36:e1:24: 40:c7:5f:17:15:c6:91:13:bd:ac:15:54:0f:4b:c3:7a:e4:de: d2:6e:37:93:92:5b:a0:22:04:78:aa:e7:6a:b6:e3:3b:be:d1: 8d:97:0d:81:9d:75:83:40:82:cf:c8:4e:bf:3a:cb:43:ee:c2: 11:d6:8a:6b:3a:ea:b3:6b:d8:5e:73:32:d8:b1:c5:67:73:f4: ca:b9:dd:ea:e9:ab:b4:3a:fa:78:1f:0d:6c:27:2a:6d:ba:ca: 1d:b2:04:01:23:ec:59:07:06:a9:9f:35:6c:5a:5f:01:87:2d: e2:48:0d:d1:39:bb:0d:9f:ac:71:b4:0b:81:b8:43:90:91:cc: a7:d8:ba:88:ff:cb:3b:a2:07:d7:fc:1a:06:82:de:5a:e9:56: c0:e2:f4:03:48:3b:5f:11:15:db:20:aa:5b:46:d5:50:80:04: 48:0b:c3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjYwOTIwMTczOTE0WhcNMjYwOTI3MTczOTE0WjAYMRYwFAYD VQQDEw02YWIwMWE0Mi1iNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbMOOdLqTasQgwwaZI+s1lPDzvuH6cIOBI0lkaM6GvmEvhxXrJxDsM0GvzZZ SlUTy/v9MvpmddM3DF3r5k2lbgPb4DE2uyAKqhEm6BJLro9V6U2MAVyN58/hkqMu fmgu6xZXf8ZkzcwlBaFCZSwagn/PoW8+CMgZK5iLlAcFIHyoPN/X6UGbAqIC4wfC Gh3ggQ8RYMdDD233pfo2h5I32NzDDFDYN6AuVILeEkJbeaf0c4deYcShE2z5RXRg 0JO6XSVx49ZuFRwlhqPFMopWtKJPFF9riFeqjXFnJGkndUZ8n8CLLAF4zTzsNbI9 CUfe/lFfZfWSsv8XJNoZZpkKEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEs0gatq ds/e19QOUdnmuu/FqbbOMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnh+xWU5mjjqM/WFqt+snw73VrMgWa/RaVgy59fm+JPpxialKxh3oMoEs77jr QyTxMQhdQ75ejpnu7gxU+u3qPgZjrp9qbWt1IF3YjPNH8gqXQdNe3JqfNuEkQMdf FxXGkRO9rBVUD0vDeuTe0m43k5JboCIEeKrnarbjO77RjZcNgZ11g0CCz8hOvzrL Q+7CEdaKazrqs2vYXnMy2LHFZ3P0yrnd6umrtDr6eB8NbCcqbbrKHbIEASPsWQcG qZ81bFpfAYct4kgN0Tm7DZ+scbQLgbhDkJHMp9i6iP/LO6IH1/waBoLeWulWwOL0 A0g7XxEV2yCqW0bVUIAESAvDfg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:39:58 2026 by rpki-client