$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: eelNdGgG3S6IiddEdKPZpBy9VeQBjJjR2pIJrh9SWMk= Subject key identifier: 27:0A:5B:7C:52:2E:6D:4B:42:BB:B7:ED:FE:F8:D1:FD:46:C5:5E:6E Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 15C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 159A Signing time: Fri 02 Oct 2026 16:54:42 +0000 Manifest this update: Fri 02 Oct 2026 16:54:41 +0000 Manifest next update: Fri 09 Oct 2026 16:54:41 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: bYNRyTz4aB56IDT8hKh5me+wqof2WkagIHHGDlPIaGM=) 2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=) 3: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=) 4: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5572 (0x15c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Oct 2 16:54:41 2026 GMT Not After : Oct 9 16:54:41 2026 GMT Subject: CN=6abfe1d2-dd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:d4:a5:25:9a:39:13:a6:28:47:bf:40:65: fa:34:83:fd:a0:f4:62:4e:c7:2f:bf:9c:7d:ad:b9: 37:fe:57:3f:aa:ab:c3:76:06:43:21:0a:f1:ab:5e: f8:7f:c3:37:e3:09:0c:11:e1:50:15:be:1a:a7:08: 1a:da:08:d4:56:fa:f4:8a:0d:04:db:82:ba:08:83: 34:e8:21:52:f0:65:15:8b:ad:df:14:a7:e6:f4:9d: c1:36:f8:d5:85:8b:3d:10:fa:93:a2:e9:d0:29:c0: e0:23:f0:30:52:3e:4a:c7:98:52:80:bb:c1:0a:31: bb:31:07:8d:06:47:b0:90:ed:74:f5:28:79:5c:c6: a9:cd:c5:c6:19:25:a9:98:34:18:21:cb:2e:f1:e5: 89:7e:a9:1d:0b:26:6f:b4:4e:c6:74:31:53:65:4a: 88:c9:cf:4b:17:83:3f:1e:de:5e:b8:bd:c1:de:df: bb:1e:52:74:aa:a7:32:ce:9b:e1:72:b1:72:65:ba: 24:98:a6:57:4e:88:bd:c9:53:94:53:c2:14:2b:9f: a7:52:28:97:fe:2f:cd:55:64:c7:20:02:3a:0a:99: 59:59:71:0d:90:dc:85:1e:32:e5:08:07:49:94:14: f8:f1:ec:c2:36:fd:02:13:87:4d:0c:88:75:d6:72: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:5B:7C:52:2E:6D:4B:42:BB:B7:ED:FE:F8:D1:FD:46:C5:5E:6E X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:93:74:c3:f1:98:fa:9a:b5:6a:c5:ae:0d:de:c2:bd:40: de:f1:88:83:fc:d1:08:b7:61:67:11:bf:be:56:a7:12:5c:9d: 70:05:45:a9:7c:7b:09:27:3b:ac:38:16:6b:da:cc:b8:08:51: 76:19:67:b5:0e:65:5b:7c:85:63:19:23:d9:e6:cd:06:05:0b: 33:80:51:20:b9:f3:ec:37:cb:66:89:75:66:a5:64:2e:87:da: 3c:fe:fc:39:50:aa:7b:1c:21:e7:01:a2:97:06:da:d6:7b:28: 9a:8a:87:fb:4e:e7:b4:f0:b0:86:dd:a4:c1:8a:94:04:6e:73: 35:14:db:40:03:84:83:b0:84:f3:b7:cb:a0:f3:47:f1:3f:37: 91:2e:d1:11:b1:7b:01:66:52:9f:16:db:2e:06:0a:5c:9f:c0: 75:3b:17:ba:48:01:e6:86:f3:5e:59:d3:99:13:6f:88:bf:de: aa:dd:e5:06:cb:f2:af:4e:e0:4e:fd:ab:0b:d5:66:29:85:13: 89:a4:41:48:30:fd:cb:46:fa:7b:e6:63:d9:cb:a3:e0:df:ad: be:3e:e8:70:f8:43:3b:88:a4:59:d5:77:c6:03:cd:77:ae:3e: ad:8a:b7:08:f6:11:84:9e:5f:b2:8b:be:eb:bc:ee:d5:49:5d: d0:18:ad:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYxMDAyMTY1NDQxWhcNMjYxMDA5MTY1NDQxWjAYMRYwFAYD VQQDEw02YWJmZTFkMi1kZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYLUpSWaOROmKEe/QGX6NIP9oPRiTscvv5x9rbk3/lc/qqvDdgZDIQrxq174 f8M34wkMEeFQFb4apwga2gjUVvr0ig0E24K6CIM06CFS8GUVi63fFKfm9J3BNvjV hYs9EPqTounQKcDgI/AwUj5Kx5hSgLvBCjG7MQeNBkewkO109Sh5XMapzcXGGSWp mDQYIcsu8eWJfqkdCyZvtE7GdDFTZUqIyc9LF4M/Ht5euL3B3t+7HlJ0qqcyzpvh crFyZbokmKZXToi9yVOUU8IUK5+nUiiX/i/NVWTHIAI6CplZWXENkNyFHjLlCAdJ lBT48ezCNv0CE4dNDIh11nLo9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcKW3xS Lm1LQru37f740f1GxV5uMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9CTdMPxmPqatWrFrg3ewr1A3vGIg/zRCLdhZxG/vlanElydcAVFqXx7CSc7 rDgWa9rMuAhRdhlntQ5lW3yFYxkj2ebNBgULM4BRILnz7DfLZol1ZqVkLofaPP78 OVCqexwh5wGilwba1nsomoqH+07ntPCwht2kwYqUBG5zNRTbQAOEg7CE87fLoPNH 8T83kS7REbF7AWZSnxbbLgYKXJ/AdTsXukgB5obzXlnTmRNviL/eqt3lBsvyr07g Tv2rC9VmKYUTiaRBSDD9y0b6e+Zj2cuj4N+tvj7ocPhDO4ikWdV3xgPNd64+rYq3 CPYRhJ5fsou+67zu1Uld0BitEA== -----END CERTIFICATE-----Generated at Sun Oct 4 11:38:53 2026 by rpki-client