$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft File: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft (raw, json) Hash identifier: E32XPXGYvT/YSswFXpCnRsZ6FM5jHp1NdeaoKNtfqQM= Subject key identifier: 64:77:76:15:42:86:B8:4F:E7:E9:BD:5A:25:9D:D0:6D:B7:CA:5D:21 Authority key identifier: CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 Certificate issuer: /CN=A9124C06/serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft Manifest number: 15 Signing time: Wed 23 Sep 2026 08:51:35 +0000 Manifest this update: Wed 23 Sep 2026 08:51:34 +0000 Manifest next update: Wed 30 Sep 2026 08:51:34 +0000 Files and hashes: 1: zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl (hash: tsZ+uDhZRFE9H7rJaYqIZOv5p0KH8TnUMKgqYF/E5l4=) 2: EF2CC9E0A29911F1827177C63211F970.roa (hash: HJA/q04RDyl2JEG0dRoW3kH0vkMNWEvJkvC8X6wdzMQ=) 3: 8597EE8AA4E011F1A0ADAD456711F970.roa (hash: DV23XeE7JQliptVufUxF5lM38uYKhAPS5yKJOSyijiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124C06, serialNumber=CC2BCAEC573DFE5428EC3375C6FA5D70C5EA3570 Validity Not Before: Sep 23 08:51:34 2026 GMT Not After : Sep 30 08:51:34 2026 GMT Subject: CN=6ab39317-e0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:51:0e:6a:fa:72:af:96:84:5d:a1:51:1d: 28:12:1f:67:fe:9b:7f:9d:c4:9b:48:bb:6b:7a:f6: 82:e8:34:ad:07:8d:a9:72:1a:cb:91:64:63:61:74: 5c:1f:7d:d0:08:ee:f0:9e:95:ad:59:82:94:2f:ae: 0e:1b:4f:56:ee:a2:d7:4a:20:e6:62:41:05:b0:31: 9d:cc:49:4b:53:26:6c:92:de:ba:cb:c1:ae:00:fb: c9:a8:26:7b:d3:9b:46:60:8a:e3:55:16:fd:e9:d4: 60:59:6d:a2:ac:6c:95:3e:52:b3:8d:3d:e8:03:48: b7:5d:12:0e:12:3d:60:3a:6b:cf:6b:75:a4:0a:e7: 93:4e:65:5d:0a:70:c1:1d:70:90:fe:8c:a9:49:65: e8:8f:97:22:3d:db:2a:b2:d2:c2:46:5d:c9:df:9a: 19:04:ac:7d:dd:47:0c:2f:20:7f:5e:6c:ef:7a:be: 9a:b0:fe:83:bc:4d:1f:08:2a:d5:5c:59:82:10:9c: 43:2a:a6:d5:a8:79:2a:fe:a1:20:64:53:d7:3d:6e: a9:ce:c2:df:23:97:b9:60:cf:0f:3d:d7:ed:93:05: 21:d8:ec:6b:0d:e6:20:1b:9f:a1:3e:06:a0:27:cb: 90:bf:8c:65:8c:af:9f:cb:6b:07:b2:30:86:8c:49: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:77:76:15:42:86:B8:4F:E7:E9:BD:5A:25:9D:D0:6D:B7:CA:5D:21 X509v3 Authority Key Identifier: keyid:CC:2B:CA:EC:57:3D:FE:54:28:EC:33:75:C6:FA:5D:70:C5:EA:35:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124C06/71FCC628A1CC11F1A889E7AD3211F970/zCvK7Fc9_lQo7DN1xvpdcMXqNXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:75:a8:0b:dc:c9:15:a9:ed:38:19:ed:f4:b6:78:dc:38:d9: 0e:e8:1e:02:ba:82:c9:9f:2d:6c:f4:a5:d5:31:fb:81:bb:5c: fa:6d:3b:09:dd:0c:fc:5e:46:6d:3e:bc:0b:3f:de:33:d7:32: 1d:53:8f:9e:21:29:8b:df:95:ee:93:5e:66:49:fb:f4:8d:a2: 3a:78:65:3e:ef:48:3d:8d:0f:77:d9:88:c9:ab:41:3a:bd:e0: c8:ce:a6:80:4c:37:57:94:e5:08:1d:f5:c6:c2:fa:8a:39:73: 54:fd:79:56:66:a5:1b:06:4a:25:87:5b:77:81:96:a2:dc:61: 4f:2a:21:e1:a1:60:3e:ef:d5:4c:dc:84:e3:26:54:57:e9:c1: 27:a8:90:fa:10:f6:b2:5a:6c:98:36:0e:aa:b6:61:13:41:6d: ed:51:b4:77:29:66:78:91:5a:90:db:fb:ee:7b:5d:fd:ff:11: b7:93:33:9c:80:be:09:3e:e3:b8:9c:52:9f:6b:f1:bb:47:fd: 02:af:73:d9:0d:22:40:51:72:34:13:7b:aa:60:6b:22:c1:32: 9e:ce:2d:2b:52:c4:09:12:34:8e:3b:e9:b5:fd:72:1a:c5:22: 5d:15:d4:9b:dd:f9:be:b6:98:1b:b1:5a:25:5e:e1:09:fd:36: 41:ea:ec:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NEMwNjExMC8GA1UEBRMoQ0MyQkNBRUM1NzNERkU1NDI4RUMzMzc1QzZGQTVENzBD NUVBMzU3MDAeFw0yNjA5MjMwODUxMzRaFw0yNjA5MzAwODUxMzRaMBgxFjAUBgNV BAMTDTZhYjM5MzE3LWUwYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwl1EOavpyr5aEXaFRHSgSH2f+m3+dxJtIu2t69oLoNK0HjalyGsuRZGNhdFwf fdAI7vCela1ZgpQvrg4bT1buotdKIOZiQQWwMZ3MSUtTJmyS3rrLwa4A+8moJnvT m0ZgiuNVFv3p1GBZbaKsbJU+UrONPegDSLddEg4SPWA6a89rdaQK55NOZV0KcMEd cJD+jKlJZeiPlyI92yqy0sJGXcnfmhkErH3dRwwvIH9ebO96vpqw/oO8TR8IKtVc WYIQnEMqptWoeSr+oSBkU9c9bqnOwt8jl7lgzw891+2TBSHY7GsN5iAbn6E+BqAn y5C/jGWMr5/LaweyMIaMSWvnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZHd2FUKG uE/n6b1aJZ3QbbfKXSEwHwYDVR0jBBgwFoAUzCvK7Fc9/lQo7DN1xvpdcMXqNXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0QzA2LzcxRkNDNjI4QTFD QzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xRbzdETjF4dnBkY01YcU5Y QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekN2SzdGYzlfbFFvN0ROMXh2cGRjTVhxTlhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 QzA2LzcxRkNDNjI4QTFDQzExRjFBODg5RTdBRDMyMTFGOTcwL3pDdks3RmM5X2xR bzdETjF4dnBkY01YcU5YQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwdagL3MkVqe04Ge30tnjcONkO6B4CuoLJny1s9KXVMfuBu1z6bTsJ3Qz8XkZt PrwLP94z1zIdU4+eISmL35Xuk15mSfv0jaI6eGU+70g9jQ932YjJq0E6veDIzqaA TDdXlOUIHfXGwvqKOXNU/XlWZqUbBkolh1t3gZai3GFPKiHhoWA+79VM3ITjJlRX 6cEnqJD6EPayWmyYNg6qtmETQW3tUbR3KWZ4kVqQ2/vue139/xG3kzOcgL4JPuO4 nFKfa/G7R/0Cr3PZDSJAUXI0E3uqYGsiwTKezi0rUsQJEjSOO+m1/XIaxSJdFdSb 3fm+tpgbsVolXuEJ/TZB6uzy -----END CERTIFICATE-----Generated at Thu Sep 24 04:00:11 2026 by rpki-client