$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: dBDVNeauKkkD8E++9zpuxUY+CtlurnBnBQHHHbzyiZ4= Subject key identifier: 87:02:E2:59:B7:36:2B:29:47:8C:07:4C:FD:00:BA:DE:99:1E:94:DB Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 0287 Signing time: Wed 23 Sep 2026 01:50:33 +0000 Manifest this update: Wed 23 Sep 2026 01:50:32 +0000 Manifest next update: Wed 30 Sep 2026 01:50:32 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: OW1I1A55KKP7EGjT0yGk+Suvak+kCZSzRmj3in9exAU=) 2: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=) 3: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=) 4: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=) 5: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: tzLUCAxcW3rpxPK1kY7IUqcMJWiwQOOzumNiMYyBy+Y=) 6: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Sep 23 01:50:32 2026 GMT Not After : Sep 30 01:50:32 2026 GMT Subject: CN=6ab33069-1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:64:35:6e:c2:71:6f:48:92:d5:bd:e6:62: ac:d8:a7:4e:4d:6f:4d:9a:dc:34:02:c5:dd:2a:5b: 2d:4f:cc:b5:2d:97:ab:8e:1f:de:39:9f:78:dc:d8: d7:34:76:fd:87:88:cb:f6:eb:f6:64:e4:8e:89:a0: 0f:f7:13:7c:91:c7:34:6f:6b:10:2c:24:c2:46:3e: a9:cf:32:1c:77:5a:7f:50:cf:a2:e1:2c:3b:dc:45: 96:72:5a:c5:aa:f9:71:d4:6e:e9:4f:5f:95:b5:b0: 04:0d:4a:2d:fe:ee:21:0f:8a:88:92:37:40:6d:bd: da:3e:d8:7a:b1:07:48:88:36:98:90:bb:1b:77:aa: 4a:82:8f:c3:e4:ea:ce:68:b4:df:fa:d0:d5:b8:8c: bd:fb:f5:26:f8:63:ce:26:02:c8:e4:fd:ad:f4:98: 1b:5e:01:b3:cf:c0:ca:e0:8a:cc:f8:b4:47:12:99: 1a:4f:2f:23:94:bf:b7:61:3e:b0:c5:82:ba:2f:95: 3d:8c:a5:4f:99:57:75:f3:a2:f1:de:90:7b:23:f4: 2a:a9:2d:8c:c6:96:92:53:cd:89:b3:3f:5c:9e:b2: e9:a1:32:cd:65:20:12:ca:a8:ce:d5:6f:47:a1:92: 72:40:f0:f1:d1:a4:4c:2d:80:d9:87:b2:80:89:47: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:02:E2:59:B7:36:2B:29:47:8C:07:4C:FD:00:BA:DE:99:1E:94:DB X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:10:8c:ce:76:b2:c1:a6:47:4f:7c:d5:d9:73:d1:9e:3a:49: a8:86:c4:8a:8e:ae:17:56:a8:31:b8:ff:91:54:32:fb:95:bd: 0e:fb:22:25:6a:71:eb:85:73:8e:01:73:a7:ad:bb:55:da:c0: af:08:e8:0a:f8:23:73:37:bc:4d:9e:b1:c7:0b:d4:a9:9b:eb: b4:c3:ea:5e:e7:b5:47:19:a9:f1:6e:79:9c:82:d0:6f:65:a1: 09:2b:1e:97:cc:8f:19:a2:8a:03:f0:59:5a:60:c4:e0:dc:1e: 14:9e:26:3b:e4:24:cc:43:8b:4b:44:66:51:6b:1f:3b:47:b4: d2:79:46:39:4d:24:0c:cd:84:0c:19:17:ce:81:7c:21:b8:df: 39:43:ce:a0:2f:b3:53:d9:5f:93:a1:92:4d:fb:98:d1:28:db: 85:bb:d4:de:72:12:63:de:ef:bc:0c:53:bf:8e:30:d1:c9:61: 6a:55:84:f2:c0:1a:a7:1e:f2:ca:f5:c4:e6:bf:00:26:fa:f4: 65:95:d4:03:d5:ec:95:8e:1e:eb:8e:83:e9:76:c5:8a:5e:c2: da:90:bb:f2:75:e0:32:46:71:f1:a4:55:b7:aa:57:a8:a7:db: fc:81:37:e9:62:f1:54:0a:7d:30:e0:9b:2e:25:c0:e6:1b:8e: 2c:d8:4b:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjYwOTIzMDE1MDMyWhcNMjYwOTMwMDE1MDMyWjAYMRYwFAYD VQQDEw02YWIzMzA2OS0xZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnf9kNW7CcW9IktW95mKs2KdOTW9Nmtw0AsXdKlstT8y1LZerjh/eOZ943NjX NHb9h4jL9uv2ZOSOiaAP9xN8kcc0b2sQLCTCRj6pzzIcd1p/UM+i4Sw73EWWclrF qvlx1G7pT1+VtbAEDUot/u4hD4qIkjdAbb3aPth6sQdIiDaYkLsbd6pKgo/D5OrO aLTf+tDVuIy9+/Um+GPOJgLI5P2t9JgbXgGzz8DK4IrM+LRHEpkaTy8jlL+3YT6w xYK6L5U9jKVPmVd186Lx3pB7I/QqqS2MxpaSU82Jsz9cnrLpoTLNZSASyqjO1W9H oZJyQPDx0aRMLYDZh7KAiUeuCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcC4lm3 NispR4wHTP0Aut6ZHpTbMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfxCMznaywaZHT3zV2XPRnjpJqIbEio6uF1aoMbj/kVQy+5W9DvsiJWpx64Vz jgFzp627VdrArwjoCvgjcze8TZ6xxwvUqZvrtMPqXue1Rxmp8W55nILQb2WhCSse l8yPGaKKA/BZWmDE4NweFJ4mO+QkzEOLS0RmUWsfO0e00nlGOU0kDM2EDBkXzoF8 IbjfOUPOoC+zU9lfk6GSTfuY0SjbhbvU3nISY97vvAxTv44w0clhalWE8sAapx7y yvXE5r8AJvr0ZZXUA9XslY4e646D6XbFil7C2pC78nXgMkZx8aRVt6pXqKfb/IE3 6WLxVAp9MOCbLiXA5huOLNhLzQ== -----END CERTIFICATE-----Generated at Fri Sep 25 03:20:54 2026 by rpki-client