$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: wVggsW9dqqNDMfcIzX9jW5cucsd59SGaiZOWbICWMbk= Subject key identifier: 38:5B:A6:43:07:FE:C6:C5:99:79:99:38:BC:FB:CB:18:98:DC:80:F1 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0251 Signing time: Wed 23 Sep 2026 02:12:23 +0000 Manifest this update: Wed 23 Sep 2026 02:12:22 +0000 Manifest next update: Wed 30 Sep 2026 02:12:22 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: 17OOQBniEMJc1Pfh/DUFaJssUHEvFpF01qx2Cfcm84k=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: h+trzDuVn/VxJ7NUrcdT4bIR95bu+vkwOYNceyRvSr4=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: PTrTgiDcbO2YvppMDaBYJ62Z5LbYQjQvQ/7KPileW8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Sep 23 02:12:22 2026 GMT Not After : Sep 30 02:12:22 2026 GMT Subject: CN=6ab33587-90f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:d5:80:c7:08:04:84:ca:75:05:04:e2:ff: 33:75:d9:46:a6:00:f6:12:cd:56:67:8c:03:fa:a6: ec:1d:59:0b:40:1f:d1:9d:9e:9c:d9:69:10:ed:02: 96:6f:60:ed:5d:7f:73:a8:e2:ae:40:4e:c2:c7:a5: 5a:cc:36:53:03:a2:ad:2a:56:7d:61:4c:f8:0f:ec: a9:aa:08:d8:78:7f:57:26:ca:74:0f:54:f4:3a:02: 3e:71:1b:ef:d0:1d:d0:72:7e:b7:e5:de:53:ad:02: ff:4f:7d:cf:44:5b:2b:98:1c:68:8a:c5:b2:e4:f7: a8:84:de:82:a7:54:5b:86:56:18:79:83:eb:e3:4a: 86:19:70:60:5a:e2:07:f0:25:bc:38:ab:2e:44:9b: 57:15:3e:aa:54:26:42:ef:19:13:d1:de:c7:85:99: b5:0f:a7:8e:dd:e5:eb:e8:c0:eb:f6:c7:51:63:91: 80:96:1e:fc:34:3a:1e:d5:d1:8f:0b:e8:a2:72:a8: fa:d5:38:9f:8c:c2:f6:cd:bf:8b:4f:42:5b:b2:96: e2:93:b3:08:ee:fd:d1:51:36:0b:6c:ca:69:96:f7: e1:17:3e:29:44:13:99:51:60:1d:b8:71:42:ec:95: 47:33:f0:a0:3a:10:c6:80:e6:48:81:6a:5e:1c:96: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5B:A6:43:07:FE:C6:C5:99:79:99:38:BC:FB:CB:18:98:DC:80:F1 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:35:23:bd:cd:87:72:b2:7d:93:0e:c9:cb:ff:92:73:0b: 82:73:d9:20:00:85:ad:f5:fc:61:00:07:81:fa:fb:e9:a4:1f: ec:8b:aa:b0:3b:7b:37:75:db:69:b5:27:12:47:9c:80:1a:02: 8f:a4:ae:bb:2f:7b:bb:ed:5f:a1:ce:61:ee:a6:c0:37:ff:aa: 54:71:89:37:92:07:dc:88:dc:23:cf:1a:77:e7:df:07:15:d7: 40:40:0a:44:9a:51:13:25:5f:40:d8:6b:b2:fb:d9:71:2f:fe: 2c:15:7e:1f:fc:cd:2c:59:04:96:6a:25:e2:8e:1c:80:be:8f: 34:bd:33:2e:8d:7c:7b:63:b4:86:c0:c7:f0:30:3e:bd:ed:ab: 6c:db:f0:b8:48:2d:00:50:66:a2:5c:1a:48:89:ad:5c:a0:25: d6:f9:19:56:b6:b2:fd:18:34:26:5b:db:ac:4c:49:1a:d7:24: f8:31:81:c7:b0:08:ca:3e:53:7d:71:47:bc:c2:b9:38:a5:3c: dc:97:05:ef:86:5a:12:93:51:5c:a6:d9:92:0e:1c:a9:73:22: 96:3d:f3:f9:5c:eb:31:07:78:1c:72:e0:64:4b:92:da:59:29: f5:f9:ad:36:fa:20:7d:a6:02:53:49:97:ac:38:1d:cd:59:d3: ae:c0:b7:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjYwOTIzMDIxMjIyWhcNMjYwOTMwMDIxMjIyWjAYMRYwFAYD VQQDEw02YWIzMzU4Ny05MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxfVgMcIBITKdQUE4v8zddlGpgD2Es1WZ4wD+qbsHVkLQB/RnZ6c2WkQ7QKW b2DtXX9zqOKuQE7Cx6VazDZTA6KtKlZ9YUz4D+ypqgjYeH9XJsp0D1T0OgI+cRvv 0B3Qcn635d5TrQL/T33PRFsrmBxoisWy5PeohN6Cp1RbhlYYeYPr40qGGXBgWuIH 8CW8OKsuRJtXFT6qVCZC7xkT0d7HhZm1D6eO3eXr6MDr9sdRY5GAlh78NDoe1dGP C+iicqj61TifjML2zb+LT0Jbspbik7MI7v3RUTYLbMpplvfhFz4pRBOZUWAduHFC 7JVHM/CgOhDGgOZIgWpeHJYXzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhbpkMH /sbFmXmZOLz7yxiY3IDxMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIl01I73Nh3KyfZMOycv/knMLgnPZIACFrfX8YQAHgfr76aQf7IuqsDt7N3Xb abUnEkecgBoCj6Suuy97u+1foc5h7qbAN/+qVHGJN5IH3IjcI88ad+ffBxXXQEAK RJpREyVfQNhrsvvZcS/+LBV+H/zNLFkElmol4o4cgL6PNL0zLo18e2O0hsDH8DA+ ve2rbNvwuEgtAFBmolwaSImtXKAl1vkZVray/Rg0JlvbrExJGtck+DGBx7AIyj5T fXFHvMK5OKU83JcF74ZaEpNRXKbZkg4cqXMilj3z+VzrMQd4HHLgZEuS2lkp9fmt NvogfaYCU0mXrDgdzVnTrsC3qA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:01:54 2026 by rpki-client