$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: bWjBcM+bgC6ZllDEbInp9eHPBnwz8peI2lvvGjQBJnw= Subject key identifier: 70:BA:B4:38:AE:DC:E4:B8:78:F1:66:C7:3B:E9:2C:C2:55:CD:98:A4 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 0123 Signing time: Wed 19 Aug 2026 06:34:37 +0000 Manifest this update: Wed 19 Aug 2026 06:34:36 +0000 Manifest next update: Wed 26 Aug 2026 06:34:36 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: X3vNlvzYDgONCmbzj5hf02gPrLikIp1//JaoMArxDYQ=) 2: B8104C9E531511F189594BAEBE833773.roa (hash: lrI09dlEBCTooAeOU2Wr6Z8X0DDGHdt7h2TqH79QhUw=) 3: 015250F6309311F084231321C4F9AE02.roa (hash: BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=) 4: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: SFDboHNXYkxFP4C1ts24MrwCHP6KpG7hvpdePdBynPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 06:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Aug 19 06:34:36 2026 GMT Not After : Aug 26 06:34:36 2026 GMT Subject: CN=6a854e7d-2d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:eb:c2:07:ae:b1:4c:d2:91:76:f8:fe:02: b4:a5:7b:ed:20:06:96:30:3c:cc:a2:2e:73:11:ee: a9:f9:90:65:b2:0c:95:08:49:3d:93:ee:9b:9f:89: 04:74:dd:00:51:d3:ab:bf:12:ca:c4:16:2e:c4:5e: 0a:5e:cc:e2:28:55:43:16:1b:50:6c:15:e1:b0:dd: 22:8e:8b:20:07:49:96:66:bb:16:35:e9:fc:7d:c4: 3d:8f:34:f8:f4:1c:6d:02:19:77:70:df:f1:39:6a: 60:05:39:70:60:ba:19:09:97:f2:53:21:ba:70:73: 4c:ce:fd:ce:91:4a:19:78:b5:97:b2:59:e2:d9:15: 1e:55:99:35:47:c6:50:a7:37:1e:11:ee:0a:5b:7f: d3:07:46:dc:bb:9a:d4:78:a8:2e:c7:4e:29:d8:50: 13:98:2e:11:1d:2f:f9:9d:a8:3b:96:e0:a1:70:10: c4:7f:dd:3a:93:b8:e0:79:03:44:89:25:ba:ea:13: c4:87:be:20:d5:a8:70:88:42:7d:ef:fa:ef:29:65: b4:ac:b5:a1:45:77:d2:33:41:72:9e:a1:43:9f:af: b9:7f:91:5a:1b:ab:c7:3a:07:de:bf:47:37:23:b5: d4:34:e3:b1:64:8a:d7:15:cb:40:ae:32:5b:e8:fb: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:B4:38:AE:DC:E4:B8:78:F1:66:C7:3B:E9:2C:C2:55:CD:98:A4 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c0:a2:07:aa:ba:3d:7a:b6:85:1d:3d:8f:4e:af:c8:63:be: b8:4a:c0:24:8f:88:68:41:1f:cf:cf:a7:89:f8:f4:1c:55:35: 93:5b:a9:f7:32:18:e7:8f:cb:69:de:19:d2:91:70:79:76:7b: 86:f7:6a:0e:d4:03:08:80:4f:25:51:f1:1d:5e:bb:f6:e6:ef: 16:46:db:a6:75:4f:1a:90:89:e3:71:e1:6f:59:c8:d4:24:2e: e0:73:fa:a9:a2:48:bb:da:65:37:32:7c:24:e8:b6:1d:cf:95: 91:c2:2c:f1:72:d2:44:58:a2:8e:ea:24:19:aa:bc:13:62:1d: 87:e5:e1:19:66:85:03:8c:20:6c:f7:60:9d:0e:14:e3:b5:11: 37:3a:e0:51:53:81:7e:3d:62:50:2f:d8:97:d0:9f:a1:9d:3e: 45:c4:f2:24:2e:bc:ef:f6:44:b5:a2:a7:5c:d6:ee:88:65:c6: 70:37:ae:e4:e2:9c:4c:dd:ee:e3:77:6d:da:88:75:23:4f:ff: b0:42:de:ae:28:54:5e:89:d6:d3:82:fd:37:cb:90:ef:c1:f9: 54:7a:09:3e:10:b8:88:88:78:93:d4:f0:a1:46:03:97:33:4c: 12:8c:f9:53:00:da:e4:e7:20:6d:59:71:2b:1b:9c:49:a5:c9: b3:3a:b5:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjYwODE5MDYzNDM2WhcNMjYwODI2MDYzNDM2WjAYMRYwFAYD VQQDEw02YTg1NGU3ZC0yZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNXrwgeusUzSkXb4/gK0pXvtIAaWMDzMoi5zEe6p+ZBlsgyVCEk9k+6bn4kE dN0AUdOrvxLKxBYuxF4KXsziKFVDFhtQbBXhsN0ijosgB0mWZrsWNen8fcQ9jzT4 9BxtAhl3cN/xOWpgBTlwYLoZCZfyUyG6cHNMzv3OkUoZeLWXslni2RUeVZk1R8ZQ pzceEe4KW3/TB0bcu5rUeKgux04p2FATmC4RHS/5nag7luChcBDEf906k7jgeQNE iSW66hPEh74g1ahwiEJ97/rvKWW0rLWhRXfSM0FynqFDn6+5f5FaG6vHOgfev0c3 I7XUNOOxZIrXFctArjJb6PvrhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHC6tDiu 3OS4ePFmxzvpLMJVzZikMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEsCiB6q6PXq2hR09j06vyGO+uErAJI+IaEEfz8+nifj0HFU1k1up9zIY54/L ad4Z0pFweXZ7hvdqDtQDCIBPJVHxHV679ubvFkbbpnVPGpCJ43Hhb1nI1CQu4HP6 qaJIu9plNzJ8JOi2Hc+VkcIs8XLSRFiijuokGaq8E2Idh+XhGWaFA4wgbPdgnQ4U 47URNzrgUVOBfj1iUC/Yl9CfoZ0+RcTyJC687/ZEtaKnXNbuiGXGcDeu5OKcTN3u 43dt2oh1I0//sELerihUXonW04L9N8uQ78H5VHoJPhC4iIh4k9TwoUYDlzNMEoz5 UwDa5OcgbVlxKxucSaXJszq1rg== -----END CERTIFICATE-----Generated at Fri Aug 21 02:50:10 2026 by rpki-client