$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: bugEo30qblhuKpQwwxCHu4toaJb7o4Pz+hBcZG2xMbA= Subject key identifier: F0:9C:E8:E5:F6:66:53:07:94:74:08:9D:51:6F:1F:8B:53:81:3F:88 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 013E Signing time: Wed 07 Oct 2026 06:07:36 +0000 Manifest this update: Wed 07 Oct 2026 06:07:35 +0000 Manifest next update: Wed 14 Oct 2026 06:07:35 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: 4nxQ3eENuH8ZX8C5Ysr5huN0++jg008p+vAEqKMHwfQ=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: iTyVWA8OtlJonGj5UGoyx0P4hksSiwkBnADCo8Y/t9g=) 3: B8104C9E531511F189594BAEBE833773.roa (hash: 03tHcv31WAjjSZg0GytNTOFwjGpnu0+l2j9GpgYcafE=) 4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: m8QMCMJ3X0wyQt1ZZAgjhiTXmzDH/HOcOw8QopElL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Oct 7 06:07:35 2026 GMT Not After : Oct 14 06:07:35 2026 GMT Subject: CN=6ac5e1a8-3ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:0b:a3:9c:1b:20:31:c3:d7:2e:0b:61:c2: b6:f1:32:5a:64:c7:50:5b:02:6e:2e:76:80:0b:2d: 7c:60:c4:f8:7e:d2:ee:2c:33:fa:a3:a4:88:a6:41: af:f0:18:2c:bd:65:6f:5a:a6:24:e4:e8:0a:81:73: d5:c6:ba:d5:e5:54:60:6f:8a:d1:fa:0c:a0:ed:a5: 36:8f:90:e9:87:de:2b:44:ee:35:0b:ee:00:99:08: 2c:ae:67:56:b8:96:11:0b:88:89:4b:02:1a:d7:f1: 1f:e0:55:f3:43:05:a5:69:b6:3b:74:c6:96:98:0e: 2a:25:37:e9:96:cd:91:b1:5c:58:f1:c9:99:3e:e1: a6:a2:56:29:54:71:2e:7c:6c:62:08:5f:1d:40:1d: 05:c2:c4:2f:a2:c5:21:2a:e0:1c:75:46:09:2d:e7: 23:18:58:4f:77:fb:7f:e9:00:a1:d3:a3:3d:c5:21: 30:48:cb:6b:09:01:05:1c:b9:6a:fd:ef:f4:bb:fa: a9:0b:d3:2a:aa:ad:6b:f0:5e:fa:c6:c4:0c:90:7e: ba:39:f0:8b:de:59:db:5c:d8:ad:61:e2:62:c2:06: 23:b6:2e:e8:35:2f:f2:2e:ee:16:cd:c5:8b:9c:cd: 39:81:eb:27:c4:f4:69:bd:2a:f2:76:e8:a1:6c:9d: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9C:E8:E5:F6:66:53:07:94:74:08:9D:51:6F:1F:8B:53:81:3F:88 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:0d:32:0d:89:93:1a:5f:5c:51:cd:51:e1:cd:d7:af:cd:0b: e6:31:f6:35:2e:86:9b:ab:0a:cf:11:93:19:3c:ee:c0:14:f1: 4b:4b:ea:25:5f:e8:86:71:9b:16:62:21:97:9e:0e:d4:67:1f: f9:74:6e:b2:40:6d:62:d6:eb:49:c6:c6:c0:e0:a5:28:da:06: 25:94:84:f8:86:af:6a:df:67:bc:6f:f0:bd:61:7a:e1:6e:27: 4b:6d:6b:f7:b8:41:c8:62:08:d9:2c:72:bb:96:bd:1f:28:4f: ca:db:84:09:6b:52:c0:45:af:f1:97:2c:c5:64:c7:ab:70:25: 16:41:17:8f:1a:cb:4c:be:ad:56:87:33:49:bb:f1:e8:17:dd: 65:4b:64:8a:33:90:bb:fb:3b:1f:73:fd:cc:7e:e3:82:69:82: fe:ec:a0:88:e3:e6:d7:8f:df:62:f3:56:56:3f:51:4d:61:e7: 60:d6:d3:67:bd:7c:d8:a0:58:f5:ce:0b:e5:c2:1b:d9:2a:b2: 95:3b:53:ad:40:0f:67:b2:f4:5f:1f:fd:88:f8:d0:5a:ec:2c: de:e3:9f:99:f4:9b:16:be:3d:81:d7:e9:2a:c5:8f:00:e1:d5: e7:1e:ba:a5:6b:95:4d:50:4a:ea:68:7f:e8:79:37:60:fa:66: 15:22:75:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjYxMDA3MDYwNzM1WhcNMjYxMDE0MDYwNzM1WjAYMRYwFAYD VQQDEw02YWM1ZTFhOC0zY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+gLo5wbIDHD1y4LYcK28TJaZMdQWwJuLnaACy18YMT4ftLuLDP6o6SIpkGv 8BgsvWVvWqYk5OgKgXPVxrrV5VRgb4rR+gyg7aU2j5Dph94rRO41C+4AmQgsrmdW uJYRC4iJSwIa1/Ef4FXzQwWlabY7dMaWmA4qJTfpls2RsVxY8cmZPuGmolYpVHEu fGxiCF8dQB0FwsQvosUhKuAcdUYJLecjGFhPd/t/6QCh06M9xSEwSMtrCQEFHLlq /e/0u/qpC9Mqqq1r8F76xsQMkH66OfCL3lnbXNitYeJiwgYjti7oNS/yLu4WzcWL nM05gesnxPRpvSryduihbJ3WnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCc6OX2 ZlMHlHQInVFvH4tTgT+IMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6g0yDYmTGl9cUc1R4c3Xr80L5jH2NS6Gm6sKzxGTGTzuwBTxS0vqJV/ohnGb FmIhl54O1Gcf+XRuskBtYtbrScbGwOClKNoGJZSE+Iavat9nvG/wvWF64W4nS21r 97hByGII2Sxyu5a9HyhPytuECWtSwEWv8ZcsxWTHq3AlFkEXjxrLTL6tVoczSbvx 6BfdZUtkijOQu/s7H3P9zH7jgmmC/uygiOPm14/fYvNWVj9RTWHnYNbTZ7182KBY 9c4L5cIb2SqylTtTrUAPZ7L0Xx/9iPjQWuws3uOfmfSbFr49gdfpKsWPAOHV5x66 pWuVTVBK6mh/6Hk3YPpmFSJ1aA== -----END CERTIFICATE-----Generated at Wed Oct 7 17:29:42 2026 by rpki-client