$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: VO0UG9J42H/YRbjOb4I72xT+AAMNl0YeA7h0dF1AH/M= Subject key identifier: 00:44:9A:EE:B3:1C:D4:DD:D5:41:AD:54:45:06:2B:03:92:78:67:D2 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 10B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 1099 Signing time: Sun 20 Sep 2026 17:19:39 +0000 Manifest this update: Sun 20 Sep 2026 17:19:39 +0000 Manifest next update: Sun 27 Sep 2026 17:19:39 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: Fe6QOGmqOfKRwuPaveRkUZfWutcxTP1a34jh8xQkeR4=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4272 (0x10b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Sep 20 17:19:39 2026 GMT Not After : Sep 27 17:19:39 2026 GMT Subject: CN=6ab015ab-6082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:b9:3e:6d:14:22:58:66:89:b8:4e:3f:dc: c6:e4:04:8f:3f:76:e6:10:c6:f7:30:33:2b:10:8d: ff:26:67:08:fc:cc:4c:a9:82:60:f6:6a:75:7a:0a: e6:8f:42:af:fe:74:bb:6d:5d:cd:00:f3:f9:88:c3: de:e6:7c:20:5f:74:0c:b8:63:57:4e:9d:75:37:de: 73:2e:49:c3:e9:bd:49:fb:14:cc:06:ce:aa:d4:2d: 63:d7:27:4e:aa:e7:d3:7d:c7:51:24:0f:7f:3b:79: 86:15:cc:b4:67:a4:4e:46:e4:ad:e7:53:56:04:ea: 6d:b8:4b:af:03:4a:db:6c:1a:47:a4:4b:73:eb:c3: 9f:8b:f9:4c:49:02:50:8c:7d:88:39:ab:b8:45:a5: ae:aa:5d:1d:08:72:83:7d:cc:8b:81:eb:5f:76:a7: 93:70:ab:cb:90:85:97:3b:78:73:9d:81:21:95:bb: b9:97:ee:0b:e2:30:8f:c1:58:2e:ec:a0:25:87:ce: 25:f2:4d:f7:b4:a7:c4:fa:d3:38:59:d8:3d:10:c0: b4:6b:73:51:9a:f8:c3:e7:91:ef:c2:fa:87:87:96: bb:0c:1f:60:69:d3:40:50:6d:c5:21:1b:55:b8:d9: 4a:e4:5f:da:94:e3:6a:d7:1a:15:c9:06:43:89:dc: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:44:9A:EE:B3:1C:D4:DD:D5:41:AD:54:45:06:2B:03:92:78:67:D2 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:19:5c:38:38:1c:f1:cc:5c:e3:f5:7f:2c:17:2d:8f:14: 43:bc:e2:a4:36:67:a4:58:48:9c:e3:95:dc:ee:70:6e:ac:83: 88:3e:72:36:1d:16:a3:08:84:3f:85:3f:ab:14:20:fc:c6:93: 3a:c4:45:a1:46:a1:70:9d:ea:2c:a7:6b:a9:fa:ab:20:55:c7: c8:07:37:69:e2:a9:ef:33:a1:c4:07:92:cf:bf:1b:82:c4:6f: 53:a2:50:f6:a6:03:b9:e9:0f:ca:5d:9c:87:1b:af:8d:61:5f: 72:c1:a8:87:72:cc:ac:fe:8c:85:b4:46:5f:ab:3b:6d:6a:55: 6f:54:52:06:e1:a4:b2:f6:9c:03:59:e6:b8:e0:00:cf:15:30: e1:13:d0:b4:88:3f:2e:ec:ce:d8:d7:dc:65:a1:24:f2:bc:1c: 66:dd:27:1b:dd:47:90:ea:ea:90:76:47:88:f2:d4:c8:11:9b: ac:83:13:8f:e7:74:56:17:c4:9f:93:fc:87:c6:ee:dc:10:2b: 64:20:7b:f5:80:54:2e:fd:84:b8:e9:b9:98:98:96:17:58:2e: 7e:c8:f5:ce:4f:18:a4:f3:a2:78:8c:dd:d0:fb:4b:41:9e:8c: 98:aa:c3:1f:b9:6e:64:9c:8c:b1:8a:9c:8b:9f:ba:6e:56:c1: 46:ba:08:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjYwOTIwMTcxOTM5WhcNMjYwOTI3MTcxOTM5WjAYMRYwFAYD VQQDEw02YWIwMTVhYi02MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPq5Pm0UIlhmibhOP9zG5ASPP3bmEMb3MDMrEI3/JmcI/MxMqYJg9mp1egrm j0Kv/nS7bV3NAPP5iMPe5nwgX3QMuGNXTp11N95zLknD6b1J+xTMBs6q1C1j1ydO qufTfcdRJA9/O3mGFcy0Z6RORuSt51NWBOptuEuvA0rbbBpHpEtz68Ofi/lMSQJQ jH2IOau4RaWuql0dCHKDfcyLgetfdqeTcKvLkIWXO3hznYEhlbu5l+4L4jCPwVgu 7KAlh84l8k33tKfE+tM4Wdg9EMC0a3NRmvjD55HvwvqHh5a7DB9gadNAUG3FIRtV uNlK5F/alONq1xoVyQZDidzlywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABEmu6z HNTd1UGtVEUGKwOSeGfSMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZNwZXDg4HPHMXOP1fywXLY8UQ7zipDZnpFhInOOV3O5wbqyDiD5yNh0WowiE P4U/qxQg/MaTOsRFoUahcJ3qLKdrqfqrIFXHyAc3aeKp7zOhxAeSz78bgsRvU6JQ 9qYDuekPyl2chxuvjWFfcsGoh3LMrP6MhbRGX6s7bWpVb1RSBuGksvacA1nmuOAA zxUw4RPQtIg/LuzO2NfcZaEk8rwcZt0nG91HkOrqkHZHiPLUyBGbrIMTj+d0VhfE n5P8h8bu3BArZCB79YBULv2EuOm5mJiWF1gufsj1zk8YpPOieIzd0PtLQZ6MmKrD H7luZJyMsYqci5+6blbBRroIGQ== -----END CERTIFICATE-----Generated at Mon Sep 21 21:05:45 2026 by rpki-client