$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: POGr7438yI+R4r7/zF/xzpbMKvfpWaCMZ6CduAZTXnA= Subject key identifier: 06:2D:71:A7:A0:11:07:5C:A8:A2:C9:E0:75:4C:25:C9:92:E5:03:B0 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 012C Signing time: Mon 27 Jul 2026 07:43:00 +0000 Manifest this update: Mon 27 Jul 2026 07:42:59 +0000 Manifest next update: Mon 03 Aug 2026 07:42:59 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: ZnblpIqsMaW1J3aHvgGIozwFixwigHyuJLXIwIPalKI=) 2: 1C8B6124661011F1A974D2FD9847A888.roa (hash: hn2esQSg/WUNR7xONxQYmS7L1amPZzYcuBNv+RXLQaw=) 3: 015076D8661011F1AB7222E09847A888.roa (hash: mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=) 4: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Jul 27 07:42:59 2026 GMT Not After : Aug 3 07:42:59 2026 GMT Subject: CN=6a670c04-5406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:75:1f:4c:ce:70:9e:36:39:3d:48:a2:35: cd:a3:5f:0f:a0:d2:a1:5f:51:14:0a:c0:87:aa:fc: e6:5b:01:24:d6:96:a2:87:da:f7:fa:56:fc:aa:0b: 25:04:72:53:45:e3:bf:58:a5:ee:f1:b0:40:01:f5: 71:36:cc:3c:4f:20:eb:d1:cd:86:4e:27:e8:c0:21: b2:d4:39:3e:86:1b:60:b4:ce:57:46:e9:d3:79:fe: ac:8b:aa:4c:81:35:3a:4e:db:b1:96:f3:57:a8:f6: 94:dd:d9:4d:86:5b:10:57:c3:b4:78:c6:b1:62:2a: e5:14:73:74:e0:2c:fe:5a:3e:dd:c4:b8:59:b8:9e: 4a:76:29:e4:f3:48:ea:e8:d3:f6:15:5d:69:6b:32: 4b:dd:1e:3f:58:27:da:8a:3c:24:ec:bb:79:18:b8: 7a:89:c4:bf:42:a3:44:6d:77:e5:ad:08:4e:23:8d: a0:f3:0c:da:2e:b1:21:18:26:91:cc:54:84:d1:f5: 90:02:df:07:03:57:98:e0:b3:e9:00:0e:ac:2e:68: 7f:dc:43:63:d5:c3:be:8b:61:50:5d:3b:d2:dd:bd: a4:55:6e:e7:0e:77:a5:2e:50:85:c0:e6:ab:c6:1f: 5c:4b:3b:38:8a:05:5a:4c:ba:b8:c0:d3:85:05:32: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:71:A7:A0:11:07:5C:A8:A2:C9:E0:75:4C:25:C9:92:E5:03:B0 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:27:db:a9:14:22:c6:62:60:c4:4e:f5:a9:d0:40:d4:61:ba: ab:87:01:07:80:b7:81:25:83:f6:50:b0:67:d7:e5:38:d5:3c: ce:bc:26:1e:43:9d:b6:4b:5e:ac:d7:b2:fb:d8:0b:eb:ed:eb: 13:2f:5c:1d:98:30:6f:4e:a9:e6:c1:32:dc:4b:d2:ca:06:a8: cc:23:cb:3f:8d:33:81:e2:eb:d5:16:c9:ce:b5:b6:3e:be:18: 6a:bb:9c:46:8c:18:4c:ca:7e:10:99:b1:b7:d3:52:30:ac:fe: 53:d7:30:73:2a:59:15:80:40:fb:13:25:64:ea:60:8e:71:5e: b3:56:6c:a3:ea:62:ae:31:af:fa:54:25:9c:58:d5:95:c8:e3: 6a:e0:6b:9f:97:92:f2:4d:16:bf:b6:15:38:4e:01:6a:9a:8a: a5:51:76:98:e9:a7:96:a0:aa:d9:87:c2:29:8a:ce:53:8f:7f: c2:e4:4d:b1:00:75:a5:a0:be:52:51:54:1f:a7:65:61:b1:55: 7f:7a:95:0a:fa:2a:d9:ce:c1:c6:a8:ee:eb:11:e0:67:89:a7: a5:17:4f:cd:5c:c9:ae:d0:ed:f7:1e:bf:5c:f0:8f:dd:17:13: 46:34:a9:bd:ad:d4:d3:82:8b:db:9e:ad:e8:67:3b:da:43:e9: 5a:83:50:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjYwNzI3MDc0MjU5WhcNMjYwODAzMDc0MjU5WjAYMRYwFAYD VQQDEw02YTY3MGMwNC01NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj4x1H0zOcJ42OT1IojXNo18PoNKhX1EUCsCHqvzmWwEk1paih9r3+lb8qgsl BHJTReO/WKXu8bBAAfVxNsw8TyDr0c2GTifowCGy1Dk+hhtgtM5XRunTef6si6pM gTU6TtuxlvNXqPaU3dlNhlsQV8O0eMaxYirlFHN04Cz+Wj7dxLhZuJ5Kdink80jq 6NP2FV1pazJL3R4/WCfaijwk7Lt5GLh6icS/QqNEbXflrQhOI42g8wzaLrEhGCaR zFSE0fWQAt8HA1eY4LPpAA6sLmh/3ENj1cO+i2FQXTvS3b2kVW7nDnelLlCFwOar xh9cSzs4igVaTLq4wNOFBTLKvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYtcaeg EQdcqKLJ4HVMJcmS5QOwMB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKifbqRQixmJgxE71qdBA1GG6q4cBB4C3gSWD9lCwZ9flONU8zrwmHkOdtkte rNey+9gL6+3rEy9cHZgwb06p5sEy3EvSygaozCPLP40zgeLr1RbJzrW2Pr4Yaruc RowYTMp+EJmxt9NSMKz+U9cwcypZFYBA+xMlZOpgjnFes1Zso+pirjGv+lQlnFjV lcjjauBrn5eS8k0Wv7YVOE4BapqKpVF2mOmnlqCq2YfCKYrOU49/wuRNsQB1paC+ UlFUH6dlYbFVf3qVCvoq2c7Bxqju6xHgZ4mnpRdPzVzJrtDt9x6/XPCP3RcTRjSp va3U04KL256t6Gc72kPpWoNQHA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:53 2026 by rpki-client