$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json) Hash identifier: ap4DPUKfwrWVXhy28CGzCDdZy1kgxSdL/8gYq4d3ZBg= Subject key identifier: BF:5F:E4:B6:D4:11:64:A8:CB:B1:CA:3E:BE:9F:1B:D3:93:3C:58:42 Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft Manifest number: 8B Signing time: Mon 21 Sep 2026 07:36:50 +0000 Manifest this update: Mon 21 Sep 2026 07:36:50 +0000 Manifest next update: Mon 28 Sep 2026 07:36:50 +0000 Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: zky8MNYmfQR4J5lA7/UPnAzbW6fKnxKD7CH6qSGS4Yc=) 2: F48C677A94A611F18AF960C06E11F970.roa (hash: +pzLDlt5lYIFfMCF1ONeGinj3z1dcCirBUMVhDDIgNQ=) 3: 5B7F78E0948A11F193C8715B6511F970.roa (hash: p83LjNke8Ymi6mycmLDbyA/QmdOPAdeSckRGwIMfBdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Sep 21 07:36:50 2026 GMT Not After : Sep 28 07:36:50 2026 GMT Subject: CN=6ab0de92-87dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:b2:61:f2:b6:95:8e:86:7a:53:bd:4d:e7: 9d:bd:64:db:c1:6c:34:8f:df:6a:fc:a4:22:1c:54: f8:ff:28:d2:d3:58:62:3e:f7:49:e9:b3:63:96:25: 28:ac:a3:34:9b:dd:68:85:4d:bc:d1:11:c1:c2:0f: db:a1:95:06:be:2d:59:e3:ce:ae:1b:25:ec:84:87: 6d:83:b4:6f:56:5e:09:35:14:1f:ff:1a:cf:33:4c: a7:88:f8:d5:d0:c1:9b:4a:01:5e:56:d2:0c:28:1c: 42:d9:7e:22:a6:b0:9f:d3:e9:5e:3f:2a:14:ab:c3: 21:db:f1:d7:cf:23:d4:b4:c5:6a:2b:ea:58:97:15: ea:d7:f3:a5:5f:20:9b:3c:85:cc:79:6c:2e:ed:84: c4:4d:40:41:d9:06:c7:4c:30:b9:44:6f:05:04:f3: 2b:59:05:6c:1c:91:68:d9:80:5d:ae:f8:c4:fb:e2: 3a:e3:91:9a:d6:8b:77:9d:05:04:85:49:8a:b3:7e: 4b:c7:65:5b:39:81:ec:f8:73:dd:74:62:97:d9:d5: d1:36:c1:1c:80:78:30:3d:04:01:73:e3:2e:8c:79: 02:60:0b:b6:e9:9d:2b:f2:a7:65:ae:d8:6f:11:84: 42:e0:66:6a:c4:f1:12:b9:20:35:df:8c:d1:bc:9f: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:E4:B6:D4:11:64:A8:CB:B1:CA:3E:BE:9F:1B:D3:93:3C:58:42 X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:41:8b:60:26:ab:62:aa:39:a5:23:b9:99:c7:52:4f:18:9e: f6:a2:62:cb:30:aa:b0:1e:80:14:cd:43:45:f9:df:19:47:79: e8:b7:00:04:d8:01:2c:37:84:a1:9d:f1:d4:0e:83:03:38:a0: 1a:ad:b5:6e:af:49:7d:79:ac:17:9d:75:6d:90:ed:b6:d5:fa: cc:90:3d:f0:cb:6a:1d:9b:27:8f:67:7e:d0:f8:c7:a7:fd:91: d6:34:33:71:d4:cc:37:26:05:9b:2d:97:7b:3d:c4:2f:82:0c: cf:3b:45:3d:70:bc:d6:9c:1e:2e:53:2f:82:5a:8c:f9:e0:16: fd:78:4b:70:34:5d:48:7e:81:8e:e0:a8:ba:2b:62:d9:5c:0b: aa:15:60:d6:92:62:47:9b:39:64:41:7c:1b:ad:05:af:ca:52: 79:61:02:b7:08:12:dc:ef:7e:14:04:03:5c:2a:d4:fc:7f:98: 98:35:84:a3:ae:8e:cf:34:a1:f9:29:96:38:9d:b8:e8:d6:69: b7:e1:82:2b:5c:49:f9:58:c3:a0:48:a9:33:31:92:ea:ab:d3: 20:ff:a3:a4:2f:b7:aa:8b:2d:43:df:4a:31:31:30:50:a6:de: 3c:c2:5d:9a:69:5a:66:96:30:e2:db:10:39:e0:be:fd:7e:be: b4:19:dc:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MDkxMTAvBgNVBAUTKENFQUVDMEU4N0Q5NTg1MkI0NEMwNjEzOTU1NDZCN0Uw QzFEMTFDNTcwHhcNMjYwOTIxMDczNjUwWhcNMjYwOTI4MDczNjUwWjAYMRYwFAYD VQQDEw02YWIwZGU5Mi04N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDCyYfK2lY6GelO9TeedvWTbwWw0j99q/KQiHFT4/yjS01hiPvdJ6bNjliUo rKM0m91ohU280RHBwg/boZUGvi1Z486uGyXshIdtg7RvVl4JNRQf/xrPM0yniPjV 0MGbSgFeVtIMKBxC2X4iprCf0+lePyoUq8Mh2/HXzyPUtMVqK+pYlxXq1/OlXyCb PIXMeWwu7YTETUBB2QbHTDC5RG8FBPMrWQVsHJFo2YBdrvjE++I645Ga1ot3nQUE hUmKs35Lx2VbOYHs+HPddGKX2dXRNsEcgHgwPQQBc+MujHkCYAu26Z0r8qdlrthv EYRC4GZqxPESuSA134zRvJ8fAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9f5LbU EWSoy7HKPr6fG9OTPFhCMB8GA1UdIwQYMBaAFM6uwOh9lYUrRMBhOVVGt+DB0RxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkwOS81QzJEMTA2NEVC QzkxMUYwOTM2RURCODM2NzZGNTZCQy96cTdBNkgyVmhTdEV3R0U1VlVhMzRNSFJI RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkwOS81QzJEMTA2NEVCQzkxMUYwOTM2RURCODM2NzZGNTZCQy96cTdBNkgyVmhT dEV3R0U1VlVhMzRNSFJIRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUGLYCarYqo5pSO5mcdSTxie9qJiyzCqsB6AFM1DRfnfGUd56LcABNgBLDeE oZ3x1A6DAzigGq21bq9JfXmsF511bZDtttX6zJA98MtqHZsnj2d+0PjHp/2R1jQz cdTMNyYFmy2Xez3EL4IMzztFPXC81pweLlMvglqM+eAW/XhLcDRdSH6BjuCouiti 2VwLqhVg1pJiR5s5ZEF8G60Fr8pSeWECtwgS3O9+FAQDXCrU/H+YmDWEo66OzzSh +SmWOJ246NZpt+GCK1xJ+VjDoEipMzGS6qvTIP+jpC+3qostQ99KMTEwUKbePMJd mmlaZpYw4tsQOeC+/X6+tBncSw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:07:38 2026 by rpki-client