$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json) Hash identifier: Qou9yFy2a2zCTrNVXWXXjXm+Ud4ayOVTY905z2yvYOo= Subject key identifier: EF:8A:C3:8B:D1:7A:76:17:9A:83:18:DE:E2:54:67:5A:6D:D9:07:21 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft Manifest number: 0204 Signing time: Mon 21 Sep 2026 03:40:53 +0000 Manifest this update: Mon 21 Sep 2026 03:40:53 +0000 Manifest next update: Mon 28 Sep 2026 03:40:53 +0000 Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: s1u2FCIT/rNiFmujNShzY3utBrQpAyC8nAOf9aiI8Qk=) 2: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: utg9UGvvmJf23Cct3Vn7nNyRBeeVqf8DmiJ8n2ds57Q=) 3: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: LfeLDqZgOoUvx3xqv6Ht7g9P40TavwQoxPoQr/2SOEQ=) 4: 9E0DB32CB2B511F1801B1A934811F970.roa (hash: 1dIkUQs+9ySkSsx6ExBW7U2VgOdoQ5ewbH5wGx2owX8=) 5: 13575F56A89411F1A427B8625411F970.roa (hash: oc1DIl2N5MD23zN4XtzJJ4lPESxWVTRUjO97J2hA5qM=) 6: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: 2pI1bzUTUq/EmFMii6AUxvtNgZI/E8A87UU703pgGXc=) 7: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: JGQRbpl0M55NntpmR47Eb0pdReArMEukNBhmpq072fU=) 8: D88897C8959711F1B1C0CE483911F970.roa (hash: C/gGnErLDGVKPL88vLANoUbJPDGKaAM8xEF7HVLaqC0=) 9: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: yrdHbYaEemEUb/B0NgVfLS1kZDvbMggamXHtKz3ZUfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Sep 21 03:40:53 2026 GMT Not After : Sep 28 03:40:53 2026 GMT Subject: CN=6ab0a745-ef52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:6b:fa:83:59:ae:2a:b5:3e:9c:27:58:a5: 27:be:3d:34:e5:0b:11:45:69:ff:b8:d0:9d:8e:7a: 88:f8:1a:3f:fb:09:ca:5d:1b:b4:a0:bc:72:03:53: 29:a8:e9:34:0b:41:2f:c7:85:4a:9f:19:f1:2e:42: 69:12:7c:03:64:36:2c:c9:4f:74:98:d2:02:fb:ac: 2a:36:c2:75:de:67:b4:27:9d:81:f6:a5:7d:ea:82: 57:9e:b7:9b:9c:04:bd:d8:6d:89:f4:f6:cf:fe:9f: 2f:ce:d5:48:95:ad:25:43:55:52:58:cc:d4:c7:a6: 37:fb:b2:76:81:dd:d2:77:d6:c5:c9:35:85:fe:10: fa:c9:c5:ea:1f:e1:4f:bd:6e:d4:35:28:b1:1a:92: 70:78:d2:52:4e:a6:d0:17:e6:39:df:2a:d1:56:d6: 20:5a:47:4a:d7:78:d3:de:63:b9:3b:5f:bb:63:94: 5f:7f:28:b0:eb:47:89:1f:be:42:26:71:d9:e1:7b: 16:aa:b3:80:d1:56:3b:85:78:cc:60:e7:ce:26:66: 54:eb:8a:48:f3:6a:60:86:b8:bf:6c:fe:ae:23:e2: 06:be:bb:0e:54:de:e6:71:96:54:86:02:b7:64:d1: dc:69:c6:08:61:10:40:ed:21:49:10:20:1e:16:91: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8A:C3:8B:D1:7A:76:17:9A:83:18:DE:E2:54:67:5A:6D:D9:07:21 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:0b:09:66:9a:18:43:c7:03:bc:ea:94:1f:bd:d2:17:7a:81: 33:82:bf:b0:ad:ac:26:cf:49:aa:03:4f:05:73:79:ea:dc:c2: ab:13:a6:ae:a7:78:40:00:9e:60:72:7d:9c:19:51:b6:a6:f8: 02:da:4e:b2:e7:bf:e1:50:08:66:d2:34:ba:c4:89:f5:17:04: 09:bd:2b:15:12:f8:b0:db:0d:5f:08:96:c9:c0:84:cb:99:f1: aa:93:be:1f:35:6f:49:f2:99:d4:2d:c9:11:19:b9:9b:4b:c9: 19:81:58:ab:c9:4a:a9:52:80:bc:68:59:23:14:55:dc:75:db: 8f:ac:fc:21:81:8f:91:1f:1a:a1:c6:a3:53:3f:86:db:5c:49: ff:0a:83:ab:47:4d:e3:97:7a:44:26:1a:8c:1b:3a:2a:cc:63: a2:f3:06:39:3a:21:84:79:9f:a9:8b:1c:1d:61:8c:fa:f8:70: ec:a0:39:17:5e:14:00:aa:93:82:82:9f:61:a0:2b:cc:37:42: 6b:36:35:8e:c0:39:f5:16:fe:f7:6b:23:bc:22:47:a0:1c:42: 31:0d:12:aa:85:68:f9:1f:08:54:12:f5:ad:b6:e4:53:95:f7: d9:1e:21:d5:73:00:70:15:51:9a:13:d7:4c:07:13:f3:cf:7f: 55:a9:55:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjYwOTIxMDM0MDUzWhcNMjYwOTI4MDM0MDUzWjAYMRYwFAYD VQQDEw02YWIwYTc0NS1lZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbdr+oNZriq1PpwnWKUnvj005QsRRWn/uNCdjnqI+Bo/+wnKXRu0oLxyA1Mp qOk0C0Evx4VKnxnxLkJpEnwDZDYsyU90mNIC+6wqNsJ13me0J52B9qV96oJXnreb nAS92G2J9PbP/p8vztVIla0lQ1VSWMzUx6Y3+7J2gd3Sd9bFyTWF/hD6ycXqH+FP vW7UNSixGpJweNJSTqbQF+Y53yrRVtYgWkdK13jT3mO5O1+7Y5Rffyiw60eJH75C JnHZ4XsWqrOA0VY7hXjMYOfOJmZU64pI82pghri/bP6uI+IGvrsOVN7mcZZUhgK3 ZNHcacYIYRBA7SFJECAeFpF8lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+Kw4vR enYXmoMY3uJUZ1pt2QchMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0 NHZaVW95YUZWXzViWFdjcHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAwsJZpoYQ8cDvOqUH73SF3qBM4K/sK2sJs9JqgNPBXN56tzCqxOmrqd4QACe YHJ9nBlRtqb4AtpOsue/4VAIZtI0usSJ9RcECb0rFRL4sNsNXwiWycCEy5nxqpO+ HzVvSfKZ1C3JERm5m0vJGYFYq8lKqVKAvGhZIxRV3HXbj6z8IYGPkR8aocajUz+G 21xJ/wqDq0dN45d6RCYajBs6KsxjovMGOTohhHmfqYscHWGM+vhw7KA5F14UAKqT goKfYaArzDdCazY1jsA59Rb+92sjvCJHoBxCMQ0SqoVo+R8IVBL1rbbkU5X32R4h 1XMAcBVRmhPXTAcT889/ValVdw== -----END CERTIFICATE-----Generated at Tue Sep 22 05:16:14 2026 by rpki-client