$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: RErh1ily2wCZunuA+teF6W0JqVLnFW2NJ2ty42l7DUY= Subject key identifier: E8:F1:F8:57:05:E3:5C:26:F1:3E:C4:EB:3D:86:DA:62:BC:BD:C2:D0 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 146C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 142A Signing time: Wed 22 Apr 2026 16:53:10 +0000 Manifest this update: Wed 22 Apr 2026 16:53:10 +0000 Manifest next update: Wed 29 Apr 2026 16:53:10 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: w09NHEvQZFJxdJtwEQmaCQSfbi37vYxUfzQNvCEb00c=) 2: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: eguoD2KwCEeVtfvLaJuhvGErHeJK8RyABQd8zfSveG4=) 3: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: FRQ+DT10D+zkaCvxI+Qd7phB0uQvPJfA96uHFNE/wXA=) 4: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: Se0I8eDDaC/8yhzniql+f7h2soMxMsS+mHw18desYKc=) 5: 2191F8C8161E11F1ABA6B0B1313D8C67.roa (hash: 4BqdekGP6TOJvlcxDVIKX748VvIpKr54ejupCldnA4M=) 6: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: IHrAProFNEBmzzxFvkgejVqjw20u0zA2ggmfDoxw1nc=) 7: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: eMdCwd4thZUd7vQOqxG8t2aPfsobCFO0nB9eD759A1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 16:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5228 (0x146c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Apr 22 16:53:10 2026 GMT Not After : Apr 29 16:53:10 2026 GMT Subject: CN=69e8fcf6-6771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:a6:8b:68:8e:d9:79:67:93:ba:4f:7c:9f: 10:19:85:bc:e2:54:5a:a6:4d:a9:c6:96:05:d4:03: ac:20:14:44:a2:08:25:b4:7e:80:5e:2a:25:63:b1: c4:09:fd:83:0a:a9:62:0e:c9:dc:89:42:b9:a8:dd: e9:8b:c8:53:cd:6a:75:c6:6e:f8:c8:be:33:4d:70: 93:11:49:ba:38:b3:87:4c:51:dd:97:12:0e:ce:e7: 4d:ae:62:d9:72:37:a2:b4:9b:45:d4:69:6d:1a:e2: 90:83:7a:da:97:22:35:0e:3d:64:43:60:8a:92:8e: b5:a1:71:14:9d:58:d3:98:f8:0a:71:cf:b8:21:ac: a3:70:fd:24:f3:65:28:6f:06:18:2c:17:05:f6:83: 1b:61:ee:87:17:06:be:e6:6a:92:ec:d5:7e:69:55: fa:7b:94:1f:e9:9f:0a:31:b6:e9:ef:eb:ab:a3:26: b8:f0:6a:0d:fe:c5:75:c2:37:63:5b:fe:b9:d8:31: ed:9a:8c:44:f3:d5:17:cb:0c:aa:58:78:92:b0:96: 2f:25:ea:1e:8d:4b:1a:d6:e7:e4:59:9a:96:5c:45: 6f:c1:34:4b:d0:d2:fa:58:65:56:dd:c9:ee:df:37: c3:24:03:4c:b9:2f:35:45:fe:d8:cf:3c:42:bc:77: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F1:F8:57:05:E3:5C:26:F1:3E:C4:EB:3D:86:DA:62:BC:BD:C2:D0 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9d:30:07:f2:5e:7e:3a:c2:2b:ce:70:76:b2:f2:48:e5:4e: b5:2c:89:64:1f:5d:ce:78:d9:bc:fc:d7:f2:00:58:89:06:b1: b6:a5:8d:e2:82:21:5d:90:54:44:df:d9:9d:eb:e8:65:90:e1: 1e:87:ea:c1:00:4d:a6:a1:d8:2d:16:42:2f:6e:d6:a5:99:5a: c1:c9:ee:d1:54:2b:a2:ea:0d:93:13:4b:14:89:b4:bd:71:6d: 43:39:e3:93:38:53:a4:38:2c:63:1f:96:51:47:ef:4f:1f:b7: 67:49:49:b4:f8:a7:04:3f:8b:ff:8b:32:2b:88:66:05:bb:03: 52:71:8b:16:be:94:52:7d:13:06:51:29:39:5c:2b:21:0d:6b: fb:20:dd:13:c0:c8:8c:83:66:34:7f:60:ec:56:7d:43:a3:b6: f0:eb:6d:e9:87:e3:62:dc:3e:a4:0f:32:97:06:9d:aa:cd:07: 88:47:b8:05:33:d0:24:00:41:86:34:4a:93:4c:ab:b8:1f:ef: d3:a7:32:cd:87:e2:8c:ad:eb:86:ff:28:15:6c:8a:24:e9:1a: e5:69:b4:b4:3c:95:f4:96:ec:54:a1:a0:8f:c6:94:4c:71:5a: 2d:c4:cf:0b:ea:00:10:a4:72:12:72:76:0b:b6:87:7d:64:7a: 61:ba:6b:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwNDIyMTY1MzEwWhcNMjYwNDI5MTY1MzEwWjAYMRYwFAYD VQQDEw02OWU4ZmNmNi02NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4Omi2iO2Xlnk7pPfJ8QGYW84lRapk2pxpYF1AOsIBREoggltH6AXiolY7HE Cf2DCqliDsnciUK5qN3pi8hTzWp1xm74yL4zTXCTEUm6OLOHTFHdlxIOzudNrmLZ cjeitJtF1GltGuKQg3ralyI1Dj1kQ2CKko61oXEUnVjTmPgKcc+4IayjcP0k82Uo bwYYLBcF9oMbYe6HFwa+5mqS7NV+aVX6e5Qf6Z8KMbbp7+uroya48GoN/sV1wjdj W/652DHtmoxE89UXywyqWHiSsJYvJeoejUsa1ufkWZqWXEVvwTRL0NL6WGVW3cnu 3zfDJANMuS81Rf7YzzxCvHen/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjx+FcF 41wm8T7E6z2G2mK8vcLQMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmJ0wB/JefjrCK85wdrLySOVOtSyJZB9dznjZvPzX8gBYiQaxtqWN4oIhXZBU RN/ZnevoZZDhHofqwQBNpqHYLRZCL27WpZlawcnu0VQrouoNkxNLFIm0vXFtQznj kzhTpDgsYx+WUUfvTx+3Z0lJtPinBD+L/4syK4hmBbsDUnGLFr6UUn0TBlEpOVwr IQ1r+yDdE8DIjINmNH9g7FZ9Q6O28Ott6YfjYtw+pA8ylwadqs0HiEe4BTPQJABB hjRKk0yruB/v06cyzYfijK3rhv8oFWyKJOka5Wm0tDyV9JbsVKGgj8aUTHFaLcTP C+oAEKRyEnJ2C7aHfWR6Ybprzg== -----END CERTIFICATE-----Generated at Fri Apr 24 14:33:40 2026 by rpki-client