$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: tRmUmykc4rnTN8fanGk6zNqX49/ylOreMbVtmnACZUo= Subject key identifier: 8F:FF:CC:0A:98:F8:4A:9E:AD:AA:01:D7:02:BD:1B:43:C6:48:A6:6F Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: A0 Signing time: Thu 23 Jul 2026 09:07:44 +0000 Manifest this update: Thu 23 Jul 2026 09:07:44 +0000 Manifest next update: Thu 30 Jul 2026 09:07:44 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: 6bq3fsyhQ1EkAWgYdki8HC4FEe+FL948QSlW2taLBwI=) 2: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Jul 23 09:07:44 2026 GMT Not After : Jul 30 09:07:44 2026 GMT Subject: CN=6a61d9e0-c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:fa:57:02:9f:dc:f4:30:26:54:a3:ba:e7: 91:71:39:4f:a1:78:93:10:1c:c2:73:1e:c4:de:08: e6:da:94:69:b4:3c:4a:00:18:97:40:fe:31:6a:10: 21:3b:4e:0a:89:db:9c:c3:a9:ad:01:9b:ab:b0:c2: ce:99:16:6e:a3:26:46:30:de:fe:f6:fc:34:31:b3: 9f:7b:78:81:1f:83:71:0c:05:9b:a2:e1:9e:f4:9f: cf:31:ed:66:51:b4:1d:28:f2:c1:f0:29:08:29:d9: 1e:a3:c5:b0:23:0b:a4:ce:f5:6d:8e:35:da:45:73: e1:3c:c0:3b:aa:23:15:34:fc:b7:7a:28:81:d2:6a: 2d:10:a2:de:fd:92:82:a4:dc:78:8f:ef:69:51:be: 8e:36:33:e9:4d:86:57:6c:85:1e:df:4d:16:4c:2e: 59:28:d9:c6:6c:fc:01:97:5d:85:2e:a4:bd:82:94: 3f:eb:8f:28:98:27:63:6c:8a:1b:09:8f:00:a0:9e: 82:84:a6:eb:78:d2:7b:62:51:a8:fc:cf:67:6c:48: 98:08:6c:5e:7f:02:55:78:5c:5b:aa:4d:34:c3:c8: c7:0f:8a:ff:f7:5b:2a:41:78:27:88:50:4e:4f:ac: 44:cd:93:0d:d0:07:bd:85:a5:09:81:2a:45:c6:87: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:CC:0A:98:F8:4A:9E:AD:AA:01:D7:02:BD:1B:43:C6:48:A6:6F X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4f:c8:11:ad:5c:f9:c1:db:83:f8:dc:e4:24:62:e5:63:6c: 3d:78:e3:f4:db:c8:c5:50:58:26:c7:44:b4:1a:d1:f7:10:4c: d2:c6:11:70:bb:c9:6e:da:cc:0e:d2:77:b0:b3:94:74:f1:2e: bc:72:01:b9:36:b8:a6:7a:b6:4f:9d:4f:f0:17:58:d6:2b:24: c9:b6:4e:d9:5d:7b:89:53:18:49:7c:e1:a8:29:fd:0d:b3:58: 5c:a9:ae:f4:c2:f8:a5:3b:0f:f5:aa:2b:e1:f1:94:99:4b:d3: 8f:a6:5e:78:eb:4b:91:0f:53:85:ab:e9:3a:d5:8e:e4:03:6e: 0a:86:8e:fa:89:45:49:6f:32:b2:00:ac:f0:52:25:73:d9:0d: 40:e4:b9:9a:7a:84:ec:67:ff:9b:1f:99:26:4d:f9:23:2e:30: 4a:10:95:8a:a5:42:65:8d:4c:a7:5d:e2:d1:4e:84:c1:f8:01: 28:81:5a:5f:24:43:68:0d:6e:ec:a1:fc:39:c5:0d:ee:18:5f: 5c:07:bf:5b:c9:64:ad:a1:8b:61:18:b6:c9:b3:66:28:ee:07: 62:2f:14:be:b7:38:64:4f:82:b2:76:94:0e:b8:6e:09:2b:29: 47:55:09:60:1b:16:23:ca:b5:71:45:49:cc:12:61:a8:34:9e: 95:c7:56:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy RDg2RDgyQUUwHhcNMjYwNzIzMDkwNzQ0WhcNMjYwNzMwMDkwNzQ0WjAYMRYwFAYD VQQDEw02YTYxZDllMC1jOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2v6VwKf3PQwJlSjuueRcTlPoXiTEBzCcx7E3gjm2pRptDxKABiXQP4xahAh O04Kiducw6mtAZursMLOmRZuoyZGMN7+9vw0MbOfe3iBH4NxDAWbouGe9J/PMe1m UbQdKPLB8CkIKdkeo8WwIwukzvVtjjXaRXPhPMA7qiMVNPy3eiiB0motEKLe/ZKC pNx4j+9pUb6ONjPpTYZXbIUe300WTC5ZKNnGbPwBl12FLqS9gpQ/648omCdjbIob CY8AoJ6ChKbreNJ7YlGo/M9nbEiYCGxefwJVeFxbqk00w8jHD4r/91sqQXgniFBO T6xEzZMN0Ae9haUJgSpFxod2xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI//zAqY +EqeraoB1wK9G0PGSKZvMB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0IwNy9EODg1NDQ5MjhGRDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1k Q1lYajh0YmpIbXN0aHRncTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOk/IEa1c+cHbg/jc5CRi5WNsPXjj9NvIxVBYJsdEtBrR9xBM0sYRcLvJbtrM DtJ3sLOUdPEuvHIBuTa4pnq2T51P8BdY1iskybZO2V17iVMYSXzhqCn9DbNYXKmu 9ML4pTsP9aor4fGUmUvTj6ZeeOtLkQ9ThavpOtWO5ANuCoaO+olFSW8ysgCs8FIl c9kNQOS5mnqE7Gf/mx+ZJk35Iy4wShCViqVCZY1Mp13i0U6EwfgBKIFaXyRDaA1u 7KH8OcUN7hhfXAe/W8lkraGLYRi2ybNmKO4HYi8Uvrc4ZE+CsnaUDrhuCSspR1UJ YBsWI8q1cUVJzBJhqDSelcdWqw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:20:15 2026 by rpki-client