$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: lc8572JYDnzaPOnpon4t9829SVszftVcS+jv1QuIXO4= Subject key identifier: B9:B5:2E:94:4A:AB:95:6D:A8:6E:FD:82:6E:16:57:56:33:E5:E2:34 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 0149 Signing time: Mon 21 Sep 2026 05:25:08 +0000 Manifest this update: Mon 21 Sep 2026 05:25:07 +0000 Manifest next update: Mon 28 Sep 2026 05:25:07 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: LPLejB3a+Ng/xcNOkST8bEbikghjMRF+Wr1V4nAc4uo=) 2: 1C8B6124661011F1A974D2FD9847A888.roa (hash: hn2esQSg/WUNR7xONxQYmS7L1amPZzYcuBNv+RXLQaw=) 3: 015076D8661011F1AB7222E09847A888.roa (hash: mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=) 4: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Sep 21 05:25:07 2026 GMT Not After : Sep 28 05:25:07 2026 GMT Subject: CN=6ab0bfb4-bfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:9b:cf:31:78:50:0d:4e:43:e8:38:07:96: ba:9d:2a:7b:02:ba:1a:0d:f5:31:e9:8a:14:aa:06: ed:65:8b:75:12:b8:89:81:d0:cd:00:de:5f:48:ee: b9:02:f6:90:c3:fe:d6:23:77:38:c5:27:1a:00:c6: b6:ef:1a:50:2c:c8:fa:c2:e9:1e:2a:81:75:01:60: 96:da:21:f8:b6:f2:d5:9a:86:9b:82:ac:f0:4b:55: d0:0c:dd:3b:46:fb:98:32:33:93:b4:de:48:38:4c: f1:e1:23:b7:c1:07:e2:2e:76:5e:4a:f7:8a:33:d2: 73:b4:58:b3:06:18:f4:1e:86:2c:cd:70:65:e5:2d: 44:b5:0b:c3:30:18:53:3d:ad:15:71:6d:b8:9b:23: 2a:5a:ef:75:13:29:1e:a0:e0:e4:4b:d6:25:0b:1a: c6:55:e0:d5:24:c4:df:08:f1:17:12:54:52:b1:c8: 43:f4:8e:08:73:80:ec:51:c6:02:d2:76:4c:10:f4: e2:6c:f9:53:8e:4b:25:98:8c:f4:2e:57:66:bc:51: 2e:1f:cc:de:a6:6e:67:61:87:f4:69:76:8f:10:a5: e7:ce:b0:f5:41:0a:2a:ca:67:79:f5:52:8b:11:e4: 86:98:a1:97:70:2d:0e:2a:41:1b:ce:a6:d2:83:0a: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:2E:94:4A:AB:95:6D:A8:6E:FD:82:6E:16:57:56:33:E5:E2:34 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:d5:b4:fc:a0:de:62:33:02:ab:ac:27:f4:06:b6:9d:a2: 05:66:1e:5c:05:4a:95:6c:d9:f1:a4:f5:ba:1e:26:32:6e:ec: 61:56:11:5c:91:55:48:08:e0:c1:c8:80:2c:fb:88:a5:c8:0a: c0:95:74:18:f6:02:4f:ab:25:e6:b0:e5:f8:e9:87:7b:58:57: b1:65:1d:e0:70:2c:44:ab:4d:b5:6d:26:fd:98:8e:66:a2:fa: b9:e5:dc:de:79:86:98:66:84:73:67:e2:f5:a3:7e:b6:c7:ba: d2:11:42:8b:9c:49:51:19:22:b1:1e:73:5b:8b:b4:4b:3c:59: 49:06:ac:90:de:c2:02:8c:21:82:d3:49:eb:f2:b8:b0:f0:25: ae:f6:80:ac:56:85:e6:42:78:14:45:1e:8e:6c:cb:85:f7:6f: a7:38:e6:d8:1f:d0:a7:62:78:74:e0:a2:8b:5b:76:dc:cb:19: d5:46:ec:c4:38:f2:d7:35:48:23:0a:4b:20:f6:a2:48:2f:2b: 12:0a:60:fa:99:18:58:40:ea:ca:07:21:c9:be:11:8e:af:16: 53:65:ac:e6:9c:53:34:eb:2c:76:7f:55:33:22:9b:35:43:de: d9:d4:4f:df:3b:eb:76:06:14:d3:db:8b:e4:1c:0b:7c:94:ad: 51:d5:94:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjYwOTIxMDUyNTA3WhcNMjYwOTI4MDUyNTA3WjAYMRYwFAYD VQQDEw02YWIwYmZiNC1iZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LSbzzF4UA1OQ+g4B5a6nSp7AroaDfUx6YoUqgbtZYt1EriJgdDNAN5fSO65 AvaQw/7WI3c4xScaAMa27xpQLMj6wukeKoF1AWCW2iH4tvLVmoabgqzwS1XQDN07 RvuYMjOTtN5IOEzx4SO3wQfiLnZeSveKM9JztFizBhj0HoYszXBl5S1EtQvDMBhT Pa0VcW24myMqWu91EykeoODkS9YlCxrGVeDVJMTfCPEXElRSschD9I4Ic4DsUcYC 0nZMEPTibPlTjkslmIz0LldmvFEuH8zepm5nYYf0aXaPEKXnzrD1QQoqymd59VKL EeSGmKGXcC0OKkEbzqbSgwr1cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLm1LpRK q5VtqG79gm4WV1Yz5eI0MB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkDVtPyg3mIzAqusJ/QGtp2iBWYeXAVKlWzZ8aT1uh4mMm7sYVYRXJFVSAjg wciALPuIpcgKwJV0GPYCT6sl5rDl+OmHe1hXsWUd4HAsRKtNtW0m/ZiOZqL6ueXc 3nmGmGaEc2fi9aN+tse60hFCi5xJURkisR5zW4u0SzxZSQaskN7CAowhgtNJ6/K4 sPAlrvaArFaF5kJ4FEUejmzLhfdvpzjm2B/Qp2J4dOCii1t23MsZ1UbsxDjy1zVI IwpLIPaiSC8rEgpg+pkYWEDqygchyb4Rjq8WU2Ws5pxTNOssdn9VMyKbNUPe2dRP 3zvrdgYU09uL5BwLfJStUdWUPw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:38:05 2026 by rpki-client