$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: iE0FsHuzqwa1HKxc/SP1XU4Bk928r8E4yaLR8zw61R0= Subject key identifier: 0F:3E:6B:FC:D4:A3:24:BA:0D:83:C9:DF:77:68:9E:4E:33:7F:47:65 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 0158 Signing time: Tue 25 Aug 2026 07:55:09 +0000 Manifest this update: Tue 25 Aug 2026 07:55:08 +0000 Manifest next update: Tue 01 Sep 2026 07:55:08 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: PbA7M1/v5yGYIVrZS4d/4prq9V1yqo/Qda7BipmC+Ic=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) 3: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (hash: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 07:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Aug 25 07:55:08 2026 GMT Not After : Sep 1 07:55:08 2026 GMT Subject: CN=6a8d4a5c-afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:ce:02:1e:ed:ad:21:14:f7:c1:c0:84:1d: f8:a2:0b:6a:20:3a:e6:82:10:ba:33:6f:26:75:fe: 9d:6e:18:ca:9b:41:d9:36:c2:3b:33:47:fb:e2:a0: 54:cb:d0:c9:81:21:3f:1b:b5:18:6a:95:d3:c0:8f: 8e:5c:07:a8:5f:65:c6:d5:f7:af:69:ba:3f:3f:33: e5:29:f2:ed:65:d7:ec:4d:ac:0c:75:d8:49:23:90: fd:b0:9f:e9:af:11:a9:d6:cd:31:80:32:db:d1:8b: 31:d7:86:93:fa:c0:28:cc:25:11:45:bf:b7:20:7a: b5:c7:f3:dc:73:10:51:cb:82:0d:44:a4:87:1d:89: 2f:ce:ba:f5:1b:76:e5:c0:28:62:8b:2b:17:cf:56: a5:69:fa:22:c5:5a:ff:a1:7a:af:3e:bf:bc:6b:33: de:eb:2b:94:9c:91:eb:2a:ba:0e:56:86:30:cc:99: ba:94:b7:c7:d2:a6:de:dc:65:9d:2e:c8:e8:12:d5: 11:39:75:85:af:bd:11:44:ba:88:85:6d:55:7c:56: 71:77:bd:de:1f:32:c5:30:e9:16:a3:c2:fd:ef:28: 23:b1:77:e0:77:4c:78:e7:53:25:99:9b:5e:89:e5: f5:bd:ab:81:1c:1c:9d:7a:ad:7d:21:42:5f:48:fb: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3E:6B:FC:D4:A3:24:BA:0D:83:C9:DF:77:68:9E:4E:33:7F:47:65 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8b:9c:25:1e:5a:fa:64:e8:fd:75:b7:0d:62:f9:22:97:a1: b1:6c:9c:c2:8d:8d:45:9c:c9:37:ce:29:c6:2a:94:4f:e2:d1: 97:ee:dd:b9:b1:96:3c:05:61:41:b5:d4:65:94:c3:08:54:10: 08:1e:22:bf:51:d6:ff:e5:1a:eb:68:e0:a4:20:ad:a7:69:44: 25:e2:0c:dd:89:02:06:64:3e:e1:d1:38:11:7a:72:14:74:a1: cb:d5:27:2f:7c:b2:05:92:fc:1b:a1:bb:05:ff:08:0f:4f:56: ee:66:fd:0a:4d:99:d9:7a:d4:1c:e5:e3:8b:bc:82:7b:7b:af: bc:56:c5:8f:ab:ba:78:37:63:a8:9b:cb:e7:6d:2f:ed:3a:e6: c2:b7:41:b8:e6:99:1b:81:dc:45:2c:14:13:16:1b:30:42:ee: f0:12:7a:29:12:d5:34:41:c0:d0:95:05:1e:5a:f0:e9:cf:df: 8a:95:d2:41:59:bd:e8:6a:bb:da:48:24:8e:c5:d9:11:3f:6b: 18:51:07:7e:b6:ea:ee:ab:cb:4c:2d:63:28:0e:a7:6f:c9:c0: 0e:47:d0:08:00:42:c4:65:0c:7f:8b:f5:ed:ba:c8:65:16:23: 40:b7:f1:c6:57:4a:7b:5f:29:25:9b:2c:6f:82:ab:74:e7:08: 17:3c:6d:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYwODI1MDc1NTA4WhcNMjYwOTAxMDc1NTA4WjAYMRYwFAYD VQQDEw02YThkNGE1Yy1hZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlG7OAh7trSEU98HAhB34ogtqIDrmghC6M28mdf6dbhjKm0HZNsI7M0f74qBU y9DJgSE/G7UYapXTwI+OXAeoX2XG1fevabo/PzPlKfLtZdfsTawMddhJI5D9sJ/p rxGp1s0xgDLb0Ysx14aT+sAozCURRb+3IHq1x/PccxBRy4INRKSHHYkvzrr1G3bl wChiiysXz1alafoixVr/oXqvPr+8azPe6yuUnJHrKroOVoYwzJm6lLfH0qbe3GWd LsjoEtUROXWFr70RRLqIhW1VfFZxd73eHzLFMOkWo8L97ygjsXfgd0x451MlmZte ieX1vauBHBydeq19IUJfSPt+JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8+a/zU oyS6DYPJ33donk4zf0dlMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgoucJR5a+mTo/XW3DWL5IpehsWycwo2NRZzJN84pxiqUT+LRl+7dubGWPAVh QbXUZZTDCFQQCB4iv1HW/+Ua62jgpCCtp2lEJeIM3YkCBmQ+4dE4EXpyFHShy9Un L3yyBZL8G6G7Bf8ID09W7mb9Ck2Z2XrUHOXji7yCe3uvvFbFj6u6eDdjqJvL520v 7TrmwrdBuOaZG4HcRSwUExYbMELu8BJ6KRLVNEHA0JUFHlrw6c/fipXSQVm96Gq7 2kgkjsXZET9rGFEHfrbq7qvLTC1jKA6nb8nADkfQCABCxGUMf4v17brIZRYjQLfx xldKe18pJZssb4KrdOcIFzxtXg== -----END CERTIFICATE-----Generated at Wed Aug 26 22:40:36 2026 by rpki-client