$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: qPwyWA/HcYnk3Ofem6f8+xvxFV4or6XNaIbDmEdh3j8= Subject key identifier: 98:6C:0C:7B:5C:25:91:2B:58:AC:A0:97:0F:3A:93:F6:22:57:0E:56 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 14AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 145D Signing time: Wed 22 Jul 2026 17:00:30 +0000 Manifest this update: Wed 22 Jul 2026 17:00:29 +0000 Manifest next update: Wed 29 Jul 2026 17:00:29 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: X4yVTgvxrDbAki7cCl4puaeXgyWWLLQU3sTyfTb/BcA=) 2: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: 4WcbGVwImz8seR5eeb8tW47K/vTUw01C4QxrVOSwZCY=) 3: F4AD3064694911F1A16B262F6E47A888.roa (hash: R7CND86/KXzbzIBtAtGvKEvnXGb+FbDgfkcEDqCnjfE=) 4: 64ECE086686E11F1B5EC161EA247A888.roa (hash: 5hpmoAgrGo8NMXv9KWkRN9Mm+Hfns+DhrtgEm10TrKM=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: BQTtAnSnfeU6j7GQd538h0tAjgxRDhIC0Sugcv6CxzM=) 6: F41500DC694911F1A16B262F6E47A888.roa (hash: mYLHSdvlGwRDPAVGzq+8ergSoNzQOTGylMWMtNiRlVU=) 7: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: 7XZE+IKZBRrKqrGr1TDOGvqrZfzsrAMaTV6zeoCdboM=) 8: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: +43EWcQPQlSm8/TwDF0BrjdnQ7PM32bqPDOdiMbEwwI=) 9: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: yciUDDD/LAwvIfzlyMKdXRVsw2EraED3Doyb4sHdJn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5292 (0x14ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jul 22 17:00:29 2026 GMT Not After : Jul 29 17:00:29 2026 GMT Subject: CN=6a60f72e-717d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:2b:dd:10:ca:85:a3:11:7d:ff:53:9c:47: 06:c9:86:25:47:c6:d7:68:07:de:9b:6d:a0:02:82: f4:45:f3:9d:28:01:ed:1d:94:6b:75:33:02:95:da: 12:da:9b:09:a1:88:77:ad:91:df:a5:17:c6:5a:53: 67:e3:d7:fe:a5:ce:81:a7:ab:bf:33:82:94:a0:a1: 02:20:e9:52:28:fc:1f:a4:15:be:70:06:21:91:28: f4:cc:3d:a8:8d:06:63:5c:ed:3c:cc:a6:e4:e3:bc: 91:a2:23:26:14:00:2d:65:62:df:64:be:6a:49:77: d9:31:11:88:e9:0d:06:8f:48:76:6a:92:12:f0:9b: 76:03:5e:e0:a0:1a:6d:3d:08:dd:53:d2:4f:18:6b: bd:0e:09:53:a3:05:b1:88:c9:5e:5a:5a:8a:8a:d6: 57:ca:9d:23:af:85:13:03:9c:f8:d1:eb:97:59:be: 2b:a5:58:f9:94:a7:47:ca:e0:fe:a7:6f:fb:52:01: 57:a9:02:ac:a9:b3:ec:4d:19:d9:3e:8a:80:e2:fe: c3:f5:76:69:86:05:7c:75:99:09:3f:9a:56:18:d6: b9:52:e1:85:42:b8:ef:90:d3:cd:6c:52:20:6e:6d: fa:fb:dc:36:69:cf:f4:99:3c:52:21:cd:e2:6a:42: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:0C:7B:5C:25:91:2B:58:AC:A0:97:0F:3A:93:F6:22:57:0E:56 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:97:36:e0:5e:57:ed:e5:1b:e2:0b:61:02:25:51:4f:d2: ac:32:3d:35:d7:e5:92:60:8a:78:b1:82:2e:15:58:c0:db:91: e4:ba:f5:b4:fb:0f:9d:e3:92:b4:3b:91:56:7c:29:a5:ce:65: 72:71:44:1f:15:af:82:8f:85:8b:e3:c4:9b:6f:c4:77:f9:f6: 97:76:ee:d3:ad:ce:88:2c:f2:b3:6b:b9:41:b2:f0:d7:97:96: f4:73:04:d1:f0:2b:7d:59:cf:04:20:43:00:a7:79:73:b5:fa: 2e:88:35:6a:e6:85:be:dc:06:27:49:eb:5a:e6:17:59:b2:ee: f5:39:33:44:e1:e6:2c:18:77:85:a4:a4:c4:db:9d:06:d5:c9: 38:c5:10:9e:d7:9b:37:b8:6b:43:63:a0:69:7a:42:26:a2:62: 25:9a:b1:43:6b:54:a0:89:cf:7e:b1:39:93:a0:4e:3f:4b:a9: 9c:ce:a2:79:2b:2a:7e:92:e6:14:ab:83:1b:05:d3:e9:39:d4: be:08:d3:34:c8:bc:ea:a5:91:ba:22:47:96:9c:16:f7:e6:3c: 12:1e:48:42:69:c0:02:d8:54:e2:85:46:37:70:b6:54:59:25: 54:34:b1:72:dc:0f:b6:f3:71:b9:0c:91:e7:70:c2:c2:f3:c8: ba:32:b6:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwNzIyMTcwMDI5WhcNMjYwNzI5MTcwMDI5WjAYMRYwFAYD VQQDEw02YTYwZjcyZS03MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJcr3RDKhaMRff9TnEcGyYYlR8bXaAfem22gAoL0RfOdKAHtHZRrdTMCldoS 2psJoYh3rZHfpRfGWlNn49f+pc6Bp6u/M4KUoKECIOlSKPwfpBW+cAYhkSj0zD2o jQZjXO08zKbk47yRoiMmFAAtZWLfZL5qSXfZMRGI6Q0Gj0h2apIS8Jt2A17goBpt PQjdU9JPGGu9DglTowWxiMleWlqKitZXyp0jr4UTA5z40euXWb4rpVj5lKdHyuD+ p2/7UgFXqQKsqbPsTRnZPoqA4v7D9XZphgV8dZkJP5pWGNa5UuGFQrjvkNPNbFIg bm36+9w2ac/0mTxSIc3iakLm4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhsDHtc JZErWKyglw86k/YiVw5WMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdJ+XNuBeV+3lG+ILYQIlUU/SrDI9NdflkmCKeLGCLhVYwNuR5Lr1tPsPneOS tDuRVnwppc5lcnFEHxWvgo+Fi+PEm2/Ed/n2l3bu063OiCzys2u5QbLw15eW9HME 0fArfVnPBCBDAKd5c7X6Log1auaFvtwGJ0nrWuYXWbLu9TkzROHmLBh3haSkxNud BtXJOMUQntebN7hrQ2OgaXpCJqJiJZqxQ2tUoInPfrE5k6BOP0upnM6ieSsqfpLm FKuDGwXT6TnUvgjTNMi86qWRuiJHlpwW9+Y8Eh5IQmnAAthU4oVGN3C2VFklVDSx ctwPtvNxuQyR53DCwvPIujK2JA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:38:11 2026 by rpki-client