$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: d1QcWKcbVBrFKS985OudHkkekvoaegsZbotPPpekA1I= Subject key identifier: 52:96:93:78:47:8C:55:B4:CB:BF:FC:06:0C:E9:43:53:FE:4D:76:18 Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 0124 Signing time: Fri 25 Sep 2026 05:53:36 +0000 Manifest this update: Fri 25 Sep 2026 05:53:36 +0000 Manifest next update: Fri 02 Oct 2026 05:53:36 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: o717oGuIytDsmuMIaGZBNRpPicAM4gXtxt0ZLUehKnk=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Sep 25 05:53:36 2026 GMT Not After : Oct 2 05:53:36 2026 GMT Subject: CN=6ab60c60-2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:0e:6a:02:14:0a:89:1f:80:fb:49:87:fc: 1b:93:56:4f:99:1e:b2:c2:97:90:ec:a3:7a:7a:b2: 43:69:6b:7a:19:2e:7b:ee:47:71:e9:c4:e5:c9:8c: de:62:0b:d8:65:ac:9a:d0:5c:75:40:14:a1:3c:fa: 74:5c:70:78:ba:19:fd:80:52:23:81:a0:d9:c5:58: 94:86:6a:ae:06:5b:07:0a:7b:ff:a2:2b:0c:a7:85: 3a:b5:89:7c:8d:59:e7:d1:c4:5d:cc:57:c5:94:b3: 1a:a7:88:25:5c:cb:17:1d:45:36:a3:d0:c6:0f:0c: 27:a9:6d:6e:d7:07:ef:42:b7:4d:2d:1d:d7:21:f0: 89:3c:b2:3e:75:17:3a:6b:ac:47:6f:9a:0a:49:3a: 64:7c:d7:52:7f:1c:49:ec:bc:64:a1:ad:bf:15:c3: 40:53:ff:3e:2d:dc:a8:34:43:e5:95:0f:8b:b6:d0: 33:10:b9:ed:2a:1c:d4:82:d1:cc:c4:bd:52:f4:2f: b8:67:17:ec:bb:a6:4b:d3:9f:6d:19:ff:b1:b7:0b: 12:fd:a1:52:96:d3:2f:37:c4:5e:97:2f:79:0b:e4: 8f:3d:43:63:01:24:d6:ee:6d:ad:77:17:32:a9:77: 60:21:52:70:fe:41:8e:f7:01:ff:e6:86:21:58:a7: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:93:78:47:8C:55:B4:CB:BF:FC:06:0C:E9:43:53:FE:4D:76:18 X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a9:11:40:75:42:18:0a:1a:8a:69:ef:f9:71:ea:27:dc:13: 1d:45:e6:d1:6f:e6:c3:8a:aa:63:24:b5:e4:5e:07:09:7f:02: b4:34:2f:48:13:4a:00:fc:f2:5c:5d:7d:b7:01:ac:5f:5b:78: 8b:d9:83:32:14:f8:87:44:d6:e5:4f:47:ea:78:17:56:56:8b: 13:c7:26:80:78:36:10:6c:e2:0a:eb:e3:c5:d3:01:a3:e6:f6: 9a:9a:0f:47:db:ac:8a:83:c5:d4:20:2e:bd:6d:4a:af:7e:55: 9d:ec:fc:c9:9c:b5:54:fb:8e:e9:0b:2f:70:2b:06:74:87:8d: 75:a4:0e:16:5d:09:92:29:b3:68:e0:a4:75:22:a2:9c:33:f0: 45:18:a1:80:a4:77:86:1d:d2:ea:69:9a:4d:8d:ec:3c:32:d0: 05:2d:3d:ba:55:20:be:c2:5e:26:53:68:37:b1:e1:57:99:c6: af:7a:3a:d3:e4:b8:dc:00:e1:08:31:81:64:84:64:f7:21:64: 34:a9:a0:af:bf:27:01:ed:7f:d1:d9:cb:c5:f1:9b:02:7e:e5: 61:62:02:61:0f:84:3a:3b:02:a2:52:57:ac:5a:ac:5d:2c:5a: f1:30:67:27:30:bd:48:f0:4a:da:5e:ee:79:b8:b0:e5:58:ab: dd:21:d7:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc0ODgxMTAvBgNVBAUTKENENDFEQkMxODk3OEREMzg0RDRGNUM4RjhGOTZCNDBF NzFERUU2NDEwHhcNMjYwOTI1MDU1MzM2WhcNMjYxMDAyMDU1MzM2WjAYMRYwFAYD VQQDEw02YWI2MGM2MC0yMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn30OagIUCokfgPtJh/wbk1ZPmR6ywpeQ7KN6erJDaWt6GS577kdx6cTlyYze YgvYZaya0Fx1QBShPPp0XHB4uhn9gFIjgaDZxViUhmquBlsHCnv/oisMp4U6tYl8 jVnn0cRdzFfFlLMap4glXMsXHUU2o9DGDwwnqW1u1wfvQrdNLR3XIfCJPLI+dRc6 a6xHb5oKSTpkfNdSfxxJ7Lxkoa2/FcNAU/8+LdyoNEPllQ+LttAzELntKhzUgtHM xL1S9C+4Zxfsu6ZL059tGf+xtwsS/aFSltMvN8Rely95C+SPPUNjASTW7m2tdxcy qXdgIVJw/kGO9wH/5oYhWKdfQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKWk3hH jFW0y7/8BgzpQ1P+TXYYMB8GA1UdIwQYMBaAFM1B28GJeN04TU9cj4+WtA5x3uZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzQ4OC83OTAzQUJCQ0ZG MTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNUaE5UMXlQajVhMERuSGU1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNU aE5UMXlQajVhMERuSGU1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkakRQHVCGAoaimnv+XHqJ9wTHUXm0W/mw4qqYyS15F4HCX8CtDQvSBNKAPzy XF19twGsX1t4i9mDMhT4h0TW5U9H6ngXVlaLE8cmgHg2EGziCuvjxdMBo+b2mpoP R9usioPF1CAuvW1Kr35Vnez8yZy1VPuO6QsvcCsGdIeNdaQOFl0JkimzaOCkdSKi nDPwRRihgKR3hh3S6mmaTY3sPDLQBS09ulUgvsJeJlNoN7HhV5nGr3o60+S43ADh CDGBZIRk9yFkNKmgr78nAe1/0dnLxfGbAn7lYWICYQ+EOjsColJXrFqsXSxa8TBn JzC9SPBK2l7uebiw5Vir3SHXeg== -----END CERTIFICATE-----Generated at Fri Sep 25 23:55:50 2026 by rpki-client