$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: z7cfBWZF4OQqGcYqhtt4DM6fiy/1Y6WBwUOvsHzjhdQ= Subject key identifier: 72:DD:8D:A5:D6:DD:FF:50:87:82:BF:98:77:A6:C9:9A:E3:23:15:48 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 02A1 Signing time: Tue 29 Sep 2026 01:59:52 +0000 Manifest this update: Tue 29 Sep 2026 01:59:52 +0000 Manifest next update: Tue 06 Oct 2026 01:59:52 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: kt8q1ix3dmfDJQpuOaXhDLEYphdUpHwoZNhJncDwd24=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: 0tGrUYawd9sMWVYCt8qeQNs8Dy+OY7IGn4NZ/aaWN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 01:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Sep 29 01:59:52 2026 GMT Not After : Oct 6 01:59:52 2026 GMT Subject: CN=6abb1b98-6177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:d2:88:7d:5d:d5:3e:c7:96:7e:97:41:ac: 86:75:8f:1a:aa:c7:3f:8d:d5:d7:3e:a8:99:c7:6e: 0a:79:5e:43:be:68:17:26:12:5e:b0:bc:82:d9:ac: 19:8c:9f:70:4f:bd:83:a2:07:88:71:d8:64:d7:1c: 02:a8:ce:f6:87:22:b5:40:bd:69:f5:d6:a4:54:18: 45:4f:40:b4:18:cc:31:3f:b6:cb:41:de:e3:6b:50: 36:d5:80:2c:0b:e9:10:16:86:79:b6:4b:b6:ee:c7: d5:b2:c4:98:df:47:ad:dc:cd:fc:60:f0:a0:ad:6c: 6f:37:e5:51:3f:ed:13:ab:c7:ba:fa:10:5b:58:8e: d3:4c:5e:04:c2:5d:70:71:75:64:22:77:54:02:0d: c3:9c:b8:cc:09:75:f3:af:d1:b9:14:a1:63:b0:b9: 24:75:3e:45:07:d4:38:d7:97:77:27:d0:bd:79:87: c9:0b:51:13:e3:6e:92:4a:84:64:21:b3:65:85:41: f7:a9:26:1c:0c:71:ce:7e:a6:db:54:fc:5c:53:1a: e7:4c:54:12:c5:3a:07:9c:43:d6:62:a9:50:16:c5: 6f:bd:dc:8c:1a:2d:03:a3:80:15:4d:43:0c:8c:59: ec:4e:53:69:31:de:4c:c5:c6:2d:14:40:f6:e6:a6: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:8D:A5:D6:DD:FF:50:87:82:BF:98:77:A6:C9:9A:E3:23:15:48 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:aa:13:99:4f:3f:fe:d7:f8:cd:af:50:d8:b4:16:76:08:4d: 62:52:ae:bd:81:1f:a4:10:cb:4a:c3:ea:d6:c7:bd:c1:98:81: d6:3c:89:b2:33:b0:a3:fe:28:ef:bf:d8:c4:86:cd:e4:b5:65: f7:85:ec:eb:6f:7b:38:d6:8a:08:31:e1:30:d4:bb:f5:5a:25: 51:71:01:d5:48:fb:c5:08:82:14:f3:9f:b2:bc:2c:68:88:7c: 72:fb:10:c0:13:53:95:43:4f:ae:b5:7c:7e:25:e8:fc:9b:db: 0c:09:7d:df:93:8b:bd:19:33:98:03:91:30:45:b9:b1:62:50: ff:70:66:d7:c4:5d:a1:c4:51:86:3f:21:02:2f:26:08:bc:6c: 16:a5:b8:bb:35:79:15:ff:6a:cf:20:b3:c3:cd:05:22:c5:1a: 66:97:f9:76:ff:2a:69:92:17:29:17:7e:ce:01:fe:85:e3:85: b4:48:89:65:1a:d0:45:c2:bf:62:7f:a1:b6:c5:ea:dd:d9:0f: 83:56:81:85:f1:86:a6:17:55:cc:44:a8:94:b2:22:ca:af:25: c4:47:2b:43:34:0b:33:14:4b:bc:4d:ad:87:ad:92:33:31:1a: 12:06:6c:56:0d:c6:9b:8a:d8:a8:78:fc:9a:a0:df:14:7b:b2: 0d:b7:92:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjYwOTI5MDE1OTUyWhcNMjYxMDA2MDE1OTUyWjAYMRYwFAYD VQQDEw02YWJiMWI5OC02MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumvSiH1d1T7Hln6XQayGdY8aqsc/jdXXPqiZx24KeV5DvmgXJhJesLyC2awZ jJ9wT72DogeIcdhk1xwCqM72hyK1QL1p9dakVBhFT0C0GMwxP7bLQd7ja1A21YAs C+kQFoZ5tku27sfVssSY30et3M38YPCgrWxvN+VRP+0Tq8e6+hBbWI7TTF4Ewl1w cXVkIndUAg3DnLjMCXXzr9G5FKFjsLkkdT5FB9Q415d3J9C9eYfJC1ET426SSoRk IbNlhUH3qSYcDHHOfqbbVPxcUxrnTFQSxToHnEPWYqlQFsVvvdyMGi0Do4AVTUMM jFnsTlNpMd5MxcYtFED25qZCMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLdjaXW 3f9Qh4K/mHemyZrjIxVIMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwqoTmU8//tf4za9Q2LQWdghNYlKuvYEfpBDLSsPq1se9wZiB1jyJsjOwo/4o 77/YxIbN5LVl94Xs6297ONaKCDHhMNS79VolUXEB1Uj7xQiCFPOfsrwsaIh8cvsQ wBNTlUNPrrV8fiXo/JvbDAl935OLvRkzmAORMEW5sWJQ/3Bm18RdocRRhj8hAi8m CLxsFqW4uzV5Ff9qzyCzw80FIsUaZpf5dv8qaZIXKRd+zgH+heOFtEiJZRrQRcK/ Yn+htsXq3dkPg1aBhfGGphdVzESolLIiyq8lxEcrQzQLMxRLvE2th62SMzEaEgZs Vg3Gm4rYqHj8mqDfFHuyDbeSag== -----END CERTIFICATE-----Generated at Tue Sep 29 15:08:51 2026 by rpki-client