$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: a/iUujdVGrf1633KcR/mfd73p+E6fedHAOasa+w7k0M= Subject key identifier: E9:E7:A6:CE:89:09:E1:AD:60:52:57:CD:7A:BA:A0:8C:14:1E:0D:66 Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: C3 Signing time: Sun 27 Sep 2026 07:22:29 +0000 Manifest this update: Sun 27 Sep 2026 07:22:28 +0000 Manifest next update: Sun 04 Oct 2026 07:22:28 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: 7XbALydwIe9OsIMdMcGevmcgVvyIHxFWIy1Y0+GGOug=) 2: 0C4B4A28892811F1A62CD15C5611F970.roa (hash: QmtANBl3xbqi6d33sHeUXu4Ac01FQws4OrK79nYT1zU=) 3: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 07:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Sep 27 07:22:28 2026 GMT Not After : Oct 4 07:22:28 2026 GMT Subject: CN=6ab8c435-f882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:01:e1:8d:89:e3:f3:da:75:7c:2e:46:13: 0c:e7:9d:19:ed:0e:71:31:27:06:a0:60:cd:74:3f: 89:9b:d3:f8:e3:e4:e9:84:84:f2:99:43:58:55:a9: 52:18:b7:c7:31:3f:fc:47:b3:b5:a6:8f:7b:46:fe: f1:1d:ad:76:e4:fd:c1:eb:bc:18:c4:df:21:83:64: 89:2c:8f:10:ac:7b:97:44:6d:60:00:3c:b6:52:e9: 2d:0e:a4:da:75:36:c6:5f:20:5a:98:85:a6:7d:2f: 2a:45:f0:a2:77:eb:58:ca:00:41:57:34:f6:de:9f: 10:71:d2:b3:ad:cb:34:c7:51:dd:fb:7c:90:96:58: 4f:57:4d:fe:7e:b8:d7:69:dd:e4:7d:6f:6a:dd:61: 7b:07:ae:63:ae:7a:b9:0c:00:1f:7e:1c:4e:fd:da: 68:08:3b:2e:3d:1a:c1:9e:09:17:48:da:ff:53:14: df:b5:a1:c2:a2:ec:27:02:07:e1:04:66:a6:76:86: d2:b8:93:db:c4:30:6e:4d:0e:15:c4:d0:60:42:f0: 22:46:82:53:03:83:ad:fe:c2:9a:1e:56:8a:8f:64: 4b:33:bb:b0:05:4e:79:2d:70:cd:0a:5a:a2:4a:bc: d9:5c:95:f2:26:ed:ca:48:4e:67:38:4b:fa:2d:be: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E7:A6:CE:89:09:E1:AD:60:52:57:CD:7A:BA:A0:8C:14:1E:0D:66 X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f7:21:fe:5d:2f:78:c8:38:07:67:d1:86:1d:37:16:59:77: d3:32:7c:ce:b8:74:a4:b6:85:81:88:6a:9d:91:12:46:50:ab: 8f:df:96:f3:aa:b2:95:3d:28:0d:36:26:45:13:90:37:e1:42: 8f:c2:42:61:85:a3:44:60:1e:b8:bb:40:88:22:99:5c:9f:ff: 33:f2:73:d9:b4:4d:39:fd:0c:d4:6b:b6:e6:12:cd:10:bf:6c: e5:c5:75:de:58:f0:34:26:58:e8:84:77:3e:2b:1d:11:c7:6e: 21:67:31:d7:a3:9e:d3:cb:48:67:0c:48:9b:92:04:0b:7c:47: 6e:fe:f9:d1:7b:d6:46:fc:87:17:0d:d8:53:30:ab:f0:81:93: bb:58:ed:5d:35:b2:ff:6c:6e:bd:60:a2:8c:c2:5f:d6:c5:4d: 6d:70:6b:ca:77:26:45:91:48:c8:0f:f6:21:31:b2:9c:36:5c: 30:2d:ec:a8:7f:e0:3a:38:f5:07:f2:e0:b2:36:3a:53:46:c9: 3d:82:4c:6e:cf:56:8e:2e:52:12:93:a1:5b:91:3f:07:d5:3e: a0:48:03:55:53:b6:d4:ac:1c:7d:f0:72:59:ed:4a:f1:0d:fa: 9e:d0:f5:3b:c8:b6:0d:0f:99:40:60:91:1c:11:b8:af:16:e9: 71:75:3b:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy RDg2RDgyQUUwHhcNMjYwOTI3MDcyMjI4WhcNMjYxMDA0MDcyMjI4WjAYMRYwFAYD VQQDEw02YWI4YzQzNS1mODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPgB4Y2J4/PadXwuRhMM550Z7Q5xMScGoGDNdD+Jm9P44+TphITymUNYValS GLfHMT/8R7O1po97Rv7xHa125P3B67wYxN8hg2SJLI8QrHuXRG1gADy2UuktDqTa dTbGXyBamIWmfS8qRfCid+tYygBBVzT23p8QcdKzrcs0x1Hd+3yQllhPV03+frjX ad3kfW9q3WF7B65jrnq5DAAffhxO/dpoCDsuPRrBngkXSNr/UxTftaHCouwnAgfh BGamdobSuJPbxDBuTQ4VxNBgQvAiRoJTA4Ot/sKaHlaKj2RLM7uwBU55LXDNClqi SrzZXJXyJu3KSE5nOEv6Lb7wqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnnps6J CeGtYFJXzXq6oIwUHg1mMB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0IwNy9EODg1NDQ5MjhGRDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1k Q1lYajh0YmpIbXN0aHRncTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPch/l0veMg4B2fRhh03Fll30zJ8zrh0pLaFgYhqnZESRlCrj9+W86qylT0o DTYmRROQN+FCj8JCYYWjRGAeuLtAiCKZXJ//M/Jz2bRNOf0M1Gu25hLNEL9s5cV1 3ljwNCZY6IR3PisdEcduIWcx16Oe08tIZwxIm5IEC3xHbv750XvWRvyHFw3YUzCr 8IGTu1jtXTWy/2xuvWCijMJf1sVNbXBryncmRZFIyA/2ITGynDZcMC3sqH/gOjj1 B/LgsjY6U0bJPYJMbs9Wji5SEpOhW5E/B9U+oEgDVVO21KwcffByWe1K8Q36ntD1 O8i2DQ+ZQGCRHBG4rxbpcXU76g== -----END CERTIFICATE-----Generated at Mon Sep 28 02:29:01 2026 by rpki-client