$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: aJ+H3OZNBeCFhEMrofK7i3AYrfhHrFFWiiMCf7NEEL8= Subject key identifier: 98:55:7C:40:A1:3D:B1:B2:BA:50:5B:25:49:DF:15:28:12:AB:0D:D1 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 81 Signing time: Thu 23 Jul 2026 09:38:52 +0000 Manifest this update: Thu 23 Jul 2026 09:38:52 +0000 Manifest next update: Thu 30 Jul 2026 09:38:52 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: 7iPOMaypr4XxhdPdRqWDSgqg9xz+3rbagwQLIEVznrg=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) 3: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Jul 23 09:38:52 2026 GMT Not After : Jul 30 09:38:52 2026 GMT Subject: CN=6a61e12c-63e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:d5:9d:04:85:fa:95:5a:c2:08:ae:c8:79: 12:9d:00:77:bd:1c:5e:7a:5d:ee:b4:c1:01:32:01: 71:fd:95:93:6f:6a:64:a6:27:1f:18:c9:5b:34:63: 12:94:57:1e:d4:cc:0e:10:4e:f7:44:f4:c1:c5:e1: d0:ef:c5:fc:d8:14:ae:35:ae:b5:03:86:21:52:76: cb:8d:33:10:5a:af:f6:2b:f0:32:45:1e:c0:d7:97: 8d:f5:da:6a:99:be:b7:69:a4:58:4b:72:b3:25:84: 48:28:db:48:db:6e:0d:39:41:f6:34:2c:8a:0f:ae: 75:c2:4a:e7:82:6e:95:e4:9d:60:c7:7d:a9:11:c6: 5f:1c:98:fb:1c:8b:41:5d:43:c3:74:8a:71:92:a4: 35:4e:61:d2:e6:8a:e0:c7:a7:08:3a:d9:25:96:b6: 35:cc:33:ac:1a:bf:43:98:b5:e7:62:d8:8d:bc:0f: a0:ef:0b:ca:26:7c:3f:48:de:25:7d:ed:15:c7:f8: f3:a9:7b:dc:38:c5:49:7a:16:ba:75:63:74:29:6a: e0:e9:eb:21:e4:65:28:7f:dd:2c:d4:bb:ef:8c:09: 6f:ac:ec:b8:7c:72:80:0e:30:76:cc:94:33:b3:ff: 58:14:02:bd:5e:68:c4:5c:72:4f:73:d5:5e:b7:45: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:7C:40:A1:3D:B1:B2:BA:50:5B:25:49:DF:15:28:12:AB:0D:D1 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:aa:21:83:f2:45:63:99:af:1c:81:be:17:af:93:fd:e6:df: 35:49:ab:6a:18:aa:c0:9b:6d:1b:06:f6:92:7e:e1:3c:5f:c3: 31:aa:35:b2:de:50:94:26:f5:d6:c0:47:8c:83:d4:a8:53:40: b8:97:5d:00:94:5a:28:c6:d1:56:ad:c9:a6:44:c2:7a:c3:90: 5c:b8:6f:f2:62:ba:6b:3e:f0:66:c5:5f:6a:a9:6d:10:5a:5b: 8f:62:12:6d:4a:55:36:87:5c:22:b6:03:d5:f2:40:97:a9:74: 39:ae:57:20:8b:32:d2:90:30:4d:60:41:0d:da:ef:71:1b:12: 95:74:65:da:8a:25:f5:aa:df:5f:01:06:f4:21:b0:03:21:2b: f4:0d:21:61:fb:1a:24:27:47:40:14:00:5f:35:08:8d:da:cb: c1:8f:09:b0:e3:0e:5e:41:18:b6:79:10:55:ba:0c:7c:5c:7f: c6:d3:5d:6d:08:47:dc:a5:3d:f9:70:60:7e:31:c1:05:5c:33: b2:84:fc:4f:60:c3:c6:ce:a7:76:dd:c7:9b:12:66:16:7c:57: 83:f7:f4:b5:ed:3e:dc:e9:7b:16:c5:d9:fe:d3:2c:62:3f:e6: 3a:4b:2c:3c:a1:9f:09:1f:4b:a0:1a:24:1d:2f:29:b8:e5:96: 7a:eb:42:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxODcxMTAvBgNVBAUTKDY1QTFEMjVBRkI2NkE3NkU3OTRBOTY2RkYzM0I2QjA2 MEM3RjgwREYwHhcNMjYwNzIzMDkzODUyWhcNMjYwNzMwMDkzODUyWjAYMRYwFAYD VQQDEw02YTYxZTEyYy02M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3TVnQSF+pVawgiuyHkSnQB3vRxeel3utMEBMgFx/ZWTb2pkpicfGMlbNGMS lFce1MwOEE73RPTBxeHQ78X82BSuNa61A4YhUnbLjTMQWq/2K/AyRR7A15eN9dpq mb63aaRYS3KzJYRIKNtI224NOUH2NCyKD651wkrngm6V5J1gx32pEcZfHJj7HItB XUPDdIpxkqQ1TmHS5orgx6cIOtkllrY1zDOsGr9DmLXnYtiNvA+g7wvKJnw/SN4l fe0Vx/jzqXvcOMVJeha6dWN0KWrg6esh5GUof90s1LvvjAlvrOy4fHKADjB2zJQz s/9YFAK9XmjEXHJPc9Vet0XJ8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhVfECh PbGyulBbJUnfFSgSqw3RMB8GA1UdIwQYMBaAFGWh0lr7ZqdueUqWb/M7awYMf4Df MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Ny8zOTJDMTgyNkNB NTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAyNTVTcFp2OHp0ckJneF9n TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjE4Ny8zOTJDMTgyNkNBNTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAy NTVTcFp2OHp0ckJneF9nTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcaohg/JFY5mvHIG+F6+T/ebfNUmrahiqwJttGwb2kn7hPF/DMao1st5QlCb1 1sBHjIPUqFNAuJddAJRaKMbRVq3JpkTCesOQXLhv8mK6az7wZsVfaqltEFpbj2IS bUpVNodcIrYD1fJAl6l0Oa5XIIsy0pAwTWBBDdrvcRsSlXRl2ool9arfXwEG9CGw AyEr9A0hYfsaJCdHQBQAXzUIjdrLwY8JsOMOXkEYtnkQVboMfFx/xtNdbQhH3KU9 +XBgfjHBBVwzsoT8T2DDxs6ndt3HmxJmFnxXg/f0te0+3Ol7FsXZ/tMsYj/mOkss PKGfCR9LoBokHS8puOWWeutCvQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:52:07 2026 by rpki-client