$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: R5bOI7GFMaBV/Q/Otip2jMF6Hh4NDkYn7d6RnyUxA6Y= Subject key identifier: BC:67:3B:1D:77:B0:81:01:B6:88:B9:51:B8:A1:6C:C6:EF:20:08:64 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 014A Signing time: Wed 23 Sep 2026 05:12:28 +0000 Manifest this update: Wed 23 Sep 2026 05:12:28 +0000 Manifest next update: Wed 30 Sep 2026 05:12:28 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: mBxgksG4VI93jcjYwUcYoFusi2vlfbWoWRWS6EPCpRg=) 2: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=) 3: 015076D8661011F1AB7222E09847A888.roa (hash: mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=) 4: 1C8B6124661011F1A974D2FD9847A888.roa (hash: hn2esQSg/WUNR7xONxQYmS7L1amPZzYcuBNv+RXLQaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Sep 23 05:12:28 2026 GMT Not After : Sep 30 05:12:28 2026 GMT Subject: CN=6ab35fbc-e5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:c2:9f:99:f1:e8:84:a7:f0:f2:c5:46:50: fb:42:b2:f7:d0:48:45:b4:fc:4f:53:55:b4:8c:50: 56:de:a9:8c:d6:62:58:15:37:37:96:42:a5:24:86: 40:10:db:67:ab:0c:ba:07:00:c0:17:c3:4b:ed:b8: 19:04:74:d3:5d:63:80:1a:5e:ba:eb:d2:b4:aa:72: d9:bb:03:ac:5a:09:64:e9:4b:7d:d7:79:49:c4:f8: 9f:87:a6:ab:1c:99:b1:53:6c:ea:8e:ed:31:2d:89: d7:78:75:7a:6d:8f:a2:6e:4a:80:d0:23:08:af:f9: d8:d6:1a:cc:85:ad:13:c8:2a:b1:7f:20:bb:55:69: ea:f2:ea:46:fa:c5:d3:07:72:7e:6d:79:f0:8d:b3: 87:58:24:1d:51:98:66:25:dd:1f:51:52:e3:c5:9e: 5c:3e:ea:5f:87:ee:23:8d:08:04:19:52:ce:c8:24: c9:f1:74:46:3e:7f:70:64:71:81:bf:41:3e:23:f6: b6:bf:fa:1d:bc:d7:3a:90:c3:39:a0:e3:99:f8:63: e6:a0:e5:ff:66:64:00:14:07:0a:9c:d8:b2:81:6c: 9b:c6:83:47:ac:d9:9d:34:25:05:c0:58:7e:58:b0: ae:36:a8:73:89:d5:55:76:65:18:97:df:dd:b3:4f: 0f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:67:3B:1D:77:B0:81:01:B6:88:B9:51:B8:A1:6C:C6:EF:20:08:64 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:56:4c:7e:a6:3d:f3:d8:6e:a0:fc:4e:94:8d:a3:6c:16:ba: d8:cf:0a:bb:a2:72:12:6a:23:a5:c0:80:18:15:65:ab:74:63: 94:cb:d0:7f:81:a1:13:7c:6a:e2:5c:9c:5a:fa:4e:fc:c8:c9: e1:2d:eb:ca:b3:41:ca:49:82:0d:70:b8:83:5d:38:3f:3b:d9: d1:ed:05:88:77:2a:26:a4:91:c8:fd:1b:87:8d:5d:25:b9:0c: 2b:81:97:b4:c4:4e:a2:fd:62:72:83:c2:f2:5a:9b:13:10:04: 1f:c5:5a:bb:da:a0:82:f9:b7:dc:41:2f:14:68:51:af:69:96: 5f:05:e8:7c:57:b5:36:25:f3:56:d5:d8:09:d1:d6:20:49:ad: 10:ec:11:90:28:d7:6a:6c:06:9d:bb:91:d2:fe:b0:fc:aa:aa: de:63:e4:a6:69:29:a2:5c:95:ff:1c:ce:4f:30:0f:d8:c0:39: 43:98:d9:60:69:4f:18:fa:1a:36:05:22:5e:37:df:d6:d5:e3: e1:9b:6f:3b:0f:fb:41:a6:00:87:6e:35:bc:7f:cc:2e:22:a8: 6b:74:37:f4:83:22:7b:57:72:d0:8a:18:34:4d:63:be:82:f6: 56:f1:7b:0b:d1:62:94:3f:0c:23:22:54:bf:3d:3a:a3:c3:0f: 7a:7e:88:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjYwOTIzMDUxMjI4WhcNMjYwOTMwMDUxMjI4WjAYMRYwFAYD VQQDEw02YWIzNWZiYy1lNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ifCn5nx6ISn8PLFRlD7QrL30EhFtPxPU1W0jFBW3qmM1mJYFTc3lkKlJIZA ENtnqwy6BwDAF8NL7bgZBHTTXWOAGl6669K0qnLZuwOsWglk6Ut913lJxPifh6ar HJmxU2zqju0xLYnXeHV6bY+ibkqA0CMIr/nY1hrMha0TyCqxfyC7VWnq8upG+sXT B3J+bXnwjbOHWCQdUZhmJd0fUVLjxZ5cPupfh+4jjQgEGVLOyCTJ8XRGPn9wZHGB v0E+I/a2v/odvNc6kMM5oOOZ+GPmoOX/ZmQAFAcKnNiygWybxoNHrNmdNCUFwFh+ WLCuNqhzidVVdmUYl9/ds08PYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxnOx13 sIEBtoi5UbihbMbvIAhkMB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAglZMfqY989huoPxOlI2jbBa62M8Ku6JyEmojpcCAGBVlq3RjlMvQf4GhE3xq 4lycWvpO/MjJ4S3ryrNBykmCDXC4g104PzvZ0e0FiHcqJqSRyP0bh41dJbkMK4GX tMROov1icoPC8lqbExAEH8Vau9qggvm33EEvFGhRr2mWXwXofFe1NiXzVtXYCdHW IEmtEOwRkCjXamwGnbuR0v6w/Kqq3mPkpmkpolyV/xzOTzAP2MA5Q5jZYGlPGPoa NgUiXjff1tXj4ZtvOw/7QaYAh241vH/MLiKoa3Q39IMie1dy0IoYNE1jvoL2VvF7 C9FilD8MIyJUvz06o8MPen6I6A== -----END CERTIFICATE-----Generated at Thu Sep 24 12:57:42 2026 by rpki-client