$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: 4+SFYF6fo0Dsr4jQZc74OTC8jYLUmkze949QC7EkH/0= Subject key identifier: 11:32:03:34:0C:C9:24:3F:B1:2B:6D:D3:49:7F:0E:FB:B2:39:66:99 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 14C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1477 Signing time: Tue 08 Sep 2026 16:56:42 +0000 Manifest this update: Tue 08 Sep 2026 16:56:41 +0000 Manifest next update: Tue 15 Sep 2026 16:56:41 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: s87S+ZQqQxKq8QwJsigRnfVzHHvMqun0vVNs3UeAXO8=) 2: 99A1A6E612EB11F1974F37D30E3D8C67.roa (hash: 4WcbGVwImz8seR5eeb8tW47K/vTUw01C4QxrVOSwZCY=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: yciUDDD/LAwvIfzlyMKdXRVsw2EraED3Doyb4sHdJn4=) 4: 98FB9AA812EB11F1974F37D30E3D8C67.roa (hash: +43EWcQPQlSm8/TwDF0BrjdnQ7PM32bqPDOdiMbEwwI=) 5: C412618E8F5211F1B6983DE74611F970.roa (hash: udVxj7Kv9QzqON/2o72zWPCyyC8DoSrlCIA9/M2w4Xw=) 6: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: BQTtAnSnfeU6j7GQd538h0tAjgxRDhIC0Sugcv6CxzM=) 7: F4AD3064694911F1A16B262F6E47A888.roa (hash: R7CND86/KXzbzIBtAtGvKEvnXGb+FbDgfkcEDqCnjfE=) 8: F41500DC694911F1A16B262F6E47A888.roa (hash: mYLHSdvlGwRDPAVGzq+8ergSoNzQOTGylMWMtNiRlVU=) 9: C52139068F5211F1B6983DE74611F970.roa (hash: qT74l92aOGYUjibF7+g12VL2jQfSJigV+bofZ+YyvR0=) 10: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: 7XZE+IKZBRrKqrGr1TDOGvqrZfzsrAMaTV6zeoCdboM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5320 (0x14c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Sep 8 16:56:41 2026 GMT Not After : Sep 15 16:56:41 2026 GMT Subject: CN=6aa03e4a-a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:7e:4d:3f:0f:bc:6b:02:52:40:fb:69:33: dc:57:b0:fd:56:f6:8e:66:cb:7f:43:77:12:1a:ff: 31:73:43:65:99:63:30:d6:6d:29:d9:de:df:9a:dc: 7c:11:17:24:4c:5c:b1:4c:31:ec:e2:df:e9:6f:1b: 43:36:68:47:8f:1e:38:5c:c0:f4:fd:84:e1:27:29: 33:6e:21:1e:87:e5:9c:bc:a0:51:ad:02:76:3d:5c: 81:d5:ae:45:72:d3:7f:43:88:b5:e2:38:19:7a:df: 01:6b:6e:3a:36:a9:8c:1d:d1:63:b2:f6:21:fd:21: a5:13:11:5a:2b:cb:20:4a:08:c6:04:48:11:77:23: 29:34:b5:b7:a4:24:ab:78:c5:72:d6:38:af:00:80: e1:29:9e:3a:e4:79:72:40:11:f1:b2:7d:d6:0e:b5: 6a:bc:88:6c:9c:05:a4:98:f5:20:68:e8:ed:31:a8: 3c:d1:af:fa:e8:33:05:f4:10:8c:56:5d:04:83:77: 52:65:69:45:09:59:7d:54:81:f1:99:dc:4f:d7:e9: 49:56:de:6e:e3:7a:0b:a4:b6:bf:d9:ae:3d:28:7f: 4f:9f:ad:95:8d:f5:91:0d:c5:14:9a:99:58:e0:2b: d4:69:eb:81:ba:a2:e3:b0:d1:e1:6a:4b:c5:5d:ff: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:03:34:0C:C9:24:3F:B1:2B:6D:D3:49:7F:0E:FB:B2:39:66:99 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4f:8c:1f:1c:19:29:75:74:68:8a:28:b2:40:c1:d0:dd:c6: 85:59:76:54:8b:9a:6c:6b:cb:dc:de:57:f7:b0:f6:56:4d:07: 0a:83:79:e9:cd:2e:7f:f1:15:6e:3b:aa:96:37:a6:1d:31:c8: 68:7f:41:94:58:67:23:b5:c6:d7:49:d2:29:47:62:65:1f:69: a7:57:b4:ee:3a:0d:ce:11:19:f4:ad:7c:f7:5f:10:33:65:d0: 76:83:b1:e4:bc:80:8a:da:cb:09:72:44:09:d8:02:8d:9a:73: b0:36:83:2e:83:36:8d:b8:e9:45:47:bd:73:b4:31:ee:f6:71: 08:46:d0:21:88:85:26:41:a6:83:6c:b4:ae:1c:ce:80:0d:b1: 66:85:24:c3:70:1d:11:be:55:97:cf:3c:3a:b4:1a:84:41:5c: 51:7c:fd:73:7f:21:37:8d:63:57:7c:e2:bf:21:dc:49:6e:2c: 84:75:c4:39:42:af:d3:37:92:1c:4b:59:61:b3:f7:6f:d2:65: 04:06:3f:d4:cb:f8:33:c2:8a:be:58:cd:de:32:e0:6d:d3:21: 6b:9f:e0:cc:75:7a:04:9a:cd:b4:60:53:f0:64:ef:15:38:1e: ea:32:18:c3:29:72:63:48:15:1d:e1:04:78:58:0f:f7:b9:c2: 93:a3:23:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwOTA4MTY1NjQxWhcNMjYwOTE1MTY1NjQxWjAYMRYwFAYD VQQDEw02YWEwM2U0YS1hOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rh+TT8PvGsCUkD7aTPcV7D9VvaOZst/Q3cSGv8xc0NlmWMw1m0p2d7fmtx8 ERckTFyxTDHs4t/pbxtDNmhHjx44XMD0/YThJykzbiEeh+WcvKBRrQJ2PVyB1a5F ctN/Q4i14jgZet8Ba246NqmMHdFjsvYh/SGlExFaK8sgSgjGBEgRdyMpNLW3pCSr eMVy1jivAIDhKZ465HlyQBHxsn3WDrVqvIhsnAWkmPUgaOjtMag80a/66DMF9BCM Vl0Eg3dSZWlFCVl9VIHxmdxP1+lJVt5u43oLpLa/2a49KH9Pn62VjfWRDcUUmplY 4CvUaeuBuqLjsNHhakvFXf9cMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEyAzQM ySQ/sStt00l/DvuyOWaZMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGk+MHxwZKXV0aIooskDB0N3GhVl2VIuabGvL3N5X97D2Vk0HCoN56c0uf/EV bjuqljemHTHIaH9BlFhnI7XG10nSKUdiZR9pp1e07joNzhEZ9K18918QM2XQdoOx 5LyAitrLCXJECdgCjZpzsDaDLoM2jbjpRUe9c7Qx7vZxCEbQIYiFJkGmg2y0rhzO gA2xZoUkw3AdEb5Vl888OrQahEFcUXz9c38hN41jV3zivyHcSW4shHXEOUKv0zeS HEtZYbP3b9JlBAY/1Mv4M8KKvljN3jLgbdMha5/gzHV6BJrNtGBT8GTvFTge6jIY wylyY0gVHeEEeFgP97nCk6MjGg== -----END CERTIFICATE-----Generated at Tue Sep 8 21:57:44 2026 by rpki-client