$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: VoDQvVK+t3ZsZmn8SgjMcUPx113/D8xv+y19QOdABvs= Subject key identifier: 89:B5:75:7A:63:AF:24:6B:A0:4D:17:EF:A1:DC:4D:35:01:A2:2B:9E Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0961 Signing time: Tue 22 Sep 2026 19:55:25 +0000 Manifest this update: Tue 22 Sep 2026 19:55:24 +0000 Manifest next update: Tue 29 Sep 2026 19:55:24 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: L3WnASnItg2CUPMDui6GDD+GpVJpyA0WJcLF0UKNTWE=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: +Xkt2DNTJOCdZPYjlojg86qpKWb+zZHgvK4oGpILdiQ=) 3: D8F7EBB0A5DB11F1B9CB19293711F970.roa (hash: oTvEKrWFUenaamzbuTSgsu0SUBBagSjY4Cjk6T15Eow=) 4: D9B2964AA5DB11F1B9CB19293711F970.roa (hash: vWd7+BKeQMnGaY6COlgtppO/23CwodtQYfzckHxeGls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Sep 22 19:55:24 2026 GMT Not After : Sep 29 19:55:24 2026 GMT Subject: CN=6ab2dd2d-16fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:af:53:73:d4:21:af:6f:ac:c2:0d:91:43: 40:58:69:1f:76:b3:3a:9d:5e:e5:0b:f8:36:5e:06: 45:4f:2e:80:c6:b8:57:17:95:fe:33:06:73:be:a0: 79:b3:44:64:58:8c:03:75:b4:1f:ca:ee:fa:42:44: bd:89:c2:55:29:39:bb:51:be:b6:e0:64:e0:8e:ef: 40:53:e3:50:02:93:e8:64:95:7b:1e:7f:d6:b4:4b: cf:b8:58:94:51:b9:dc:69:a0:ce:64:e4:ae:fd:61: 9b:b9:6a:72:00:8b:1f:68:67:40:44:5d:30:9f:45: 22:b3:77:12:1b:e4:4a:5a:9a:4a:55:6b:0a:03:42: 78:08:d6:50:ff:63:6e:ba:82:f1:07:f9:66:00:0f: c5:d1:42:6a:db:47:11:60:89:03:da:8d:9d:57:00: 11:d7:af:51:eb:14:9f:9e:1e:29:62:95:c7:53:3f: 08:30:a6:97:43:a7:8e:12:8a:78:f8:f4:be:2f:76: 0f:09:af:90:74:05:18:58:2f:10:6a:36:fe:d5:81: f0:3e:7e:dd:e6:07:b9:92:53:b5:3f:9f:d1:4b:68: fd:cf:8b:21:96:da:c1:11:c4:d2:e2:11:5e:28:c3: b2:89:bb:14:de:28:8f:db:5f:79:c1:00:8a:1d:ee: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B5:75:7A:63:AF:24:6B:A0:4D:17:EF:A1:DC:4D:35:01:A2:2B:9E X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ef:63:b7:1f:37:7d:cc:d0:8f:8a:4a:be:ba:78:3c:a9:86: fb:91:11:54:a7:ad:05:20:cf:e0:08:ed:a0:c5:2d:0f:b1:ff: 14:09:28:80:4e:e6:8e:12:fa:e7:36:0f:d5:c5:42:d6:6d:79: 71:02:5f:c5:6f:56:2a:38:2b:45:33:26:b3:6a:5d:9a:d7:93: 44:81:88:74:23:32:ff:d6:54:8d:a4:43:97:1b:18:0e:fb:f1: d1:29:74:9e:e2:ed:78:b2:93:93:5a:f4:d5:82:24:82:a1:34: b9:30:1e:15:bc:d4:e5:df:77:d4:d5:09:1d:5f:dc:7b:c5:b8: a2:4a:2a:d4:35:1d:e4:52:e5:9c:25:2c:78:83:f2:cb:77:28: 48:da:25:a1:64:29:f5:a3:47:ce:37:fc:83:27:72:59:6d:d2: 97:e5:e1:04:84:64:fc:e7:02:3e:ed:47:7f:3d:6f:2d:5e:e2: 4b:14:87:c7:ac:ad:f4:ef:21:30:c7:da:ac:ef:18:9b:18:53: 77:28:e6:63:60:f2:a5:fa:b5:3e:6c:1d:e3:67:3b:86:39:3a: 4c:35:fa:fe:73:88:e6:1b:64:2a:24:b1:e5:4f:39:0b:9e:e5: 62:6a:dc:aa:92:1c:67:06:ce:1f:43:08:2a:29:a3:5e:81:ca: 45:3a:52:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwOTIyMTk1NTI0WhcNMjYwOTI5MTk1NTI0WjAYMRYwFAYD VQQDEw02YWIyZGQyZC0xNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0mvU3PUIa9vrMINkUNAWGkfdrM6nV7lC/g2XgZFTy6AxrhXF5X+MwZzvqB5 s0RkWIwDdbQfyu76QkS9icJVKTm7Ub624GTgju9AU+NQApPoZJV7Hn/WtEvPuFiU UbncaaDOZOSu/WGbuWpyAIsfaGdARF0wn0Uis3cSG+RKWppKVWsKA0J4CNZQ/2Nu uoLxB/lmAA/F0UJq20cRYIkD2o2dVwAR169R6xSfnh4pYpXHUz8IMKaXQ6eOEop4 +PS+L3YPCa+QdAUYWC8Qajb+1YHwPn7d5ge5klO1P5/RS2j9z4shltrBEcTS4hFe KMOyibsU3iiP2195wQCKHe4RFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm1dXpj ryRroE0X76HcTTUBoiueMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANu9jtx83fczQj4pKvrp4PKmG+5ERVKetBSDP4AjtoMUtD7H/FAkogE7mjhL6 5zYP1cVC1m15cQJfxW9WKjgrRTMms2pdmteTRIGIdCMy/9ZUjaRDlxsYDvvx0Sl0 nuLteLKTk1r01YIkgqE0uTAeFbzU5d931NUJHV/ce8W4okoq1DUd5FLlnCUseIPy y3coSNoloWQp9aNHzjf8gydyWW3Sl+XhBIRk/OcCPu1Hfz1vLV7iSxSHx6yt9O8h MMfarO8YmxhTdyjmY2Dypfq1Pmwd42c7hjk6TDX6/nOI5htkKiSx5U85C57lYmrc qpIcZwbOH0MIKimjXoHKRTpS7g== -----END CERTIFICATE-----Generated at Thu Sep 24 10:56:35 2026 by rpki-client