$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: WTm3EAe0/8Fr9W9SS/79Xkwzoj+S+Llbl1tP7eXqBGY= Subject key identifier: 1E:2A:26:53:F5:0E:FE:37:16:E6:8F:85:B3:31:D9:A3:04:CB:EF:45 Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 15C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 159D Signing time: Thu 08 Oct 2026 16:49:27 +0000 Manifest this update: Thu 08 Oct 2026 16:49:27 +0000 Manifest next update: Thu 15 Oct 2026 16:49:27 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: akU7owQSlU/L8ixqvKqij8TL2YJWZ/srDlvHJwTyngs=) 2: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: RpjUJKKJgD70N/wkyssWhxel6X/Ka6no31psFzNbWNw=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: aqobxay9N5rxgG0wGFJlQUVc2oUjZpwd/M9MkMpKCt8=) 4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0nNrNCZxO5NCWKsCOYrw7NVk3Cc7PuquXVWOm8fdGaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5575 (0x15c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Oct 8 16:49:27 2026 GMT Not After : Oct 15 16:49:27 2026 GMT Subject: CN=6ac7c997-1417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:5d:7d:db:c7:9a:9d:c1:f1:7e:10:87:79: 3f:69:8e:d2:d7:be:4b:10:cb:86:b3:fd:ee:c5:a6: 4f:72:39:1b:0a:f9:38:79:45:42:51:41:86:b0:0a: ad:f0:fe:62:49:ea:bc:34:14:3a:c7:dd:91:42:b6: 8d:64:b2:8e:72:a0:37:1d:6c:40:90:69:4e:4c:68: 36:4a:86:06:ca:20:cf:c6:36:fe:b1:71:18:ed:e2: b2:c7:6d:cb:8d:e2:97:33:f0:8e:ad:ea:cd:d7:38: 93:40:c7:0c:d0:c6:af:c9:ec:71:44:69:83:47:b9: 5e:0f:e9:d3:9e:7b:5e:eb:6f:b6:80:d4:48:24:cc: f1:cc:2d:e5:18:4e:68:16:6c:e6:1b:da:a9:12:b8: c6:5d:1f:cf:c3:01:36:9d:09:e9:84:16:fa:f4:30: 31:d8:0f:b9:55:4a:39:65:61:be:8a:19:21:06:1f: c6:df:a4:97:95:ec:2f:9d:e3:c6:49:95:bf:6c:45: a2:bb:91:fd:df:dc:1a:9e:00:eb:9d:df:e7:70:32: c0:67:23:ed:c6:2d:58:96:9e:1a:42:83:50:da:b6: f7:52:c4:49:74:eb:25:bf:c5:55:09:71:fb:a5:69: 59:b8:29:f0:d8:ae:b8:84:03:e2:26:b5:de:03:6f: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:26:53:F5:0E:FE:37:16:E6:8F:85:B3:31:D9:A3:04:CB:EF:45 X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:81:16:7a:db:2b:f4:63:ee:a1:0c:17:7d:06:5e:30:19:e5: 4a:01:ad:83:3d:6d:70:35:46:b3:a2:6e:c8:dc:b5:68:0d:03: 95:40:7e:a5:4f:50:35:c3:45:44:20:40:ca:da:92:6f:f4:8c: 79:e9:5a:76:cc:e4:e6:4e:7c:1d:a0:46:fb:d9:70:47:e7:c2: f8:74:60:40:25:bc:52:c1:26:1b:25:d2:f6:ec:19:80:e6:38: 1a:3b:52:a8:9a:9b:11:e5:e4:ce:7e:1d:e8:fa:1f:c8:af:5e: c0:f0:c2:80:cb:22:48:79:d5:60:b9:c1:1a:df:3b:1a:21:ec: f6:d0:29:c4:51:e5:ff:59:0d:17:f3:14:f0:82:c1:92:c1:48: 8e:fc:90:c1:5b:35:24:aa:87:6a:40:a5:fb:b6:45:4b:f8:fe: d9:f6:1e:78:ef:24:27:c6:a0:f2:8f:ca:c4:33:61:45:97:c8: 47:3e:c9:53:b7:fc:22:31:cd:2c:38:4b:ed:58:62:c4:bf:37: 81:ef:cd:40:d4:c2:62:8f:15:f4:45:dd:04:60:67:2c:48:40: c8:37:bf:db:3b:af:aa:9e:30:8d:47:c5:49:b0:0e:a3:69:e2: 41:4c:77:f8:8b:ba:ce:56:de:cf:e7:fb:44:2c:a4:07:ba:78: a3:af:5d:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjYxMDA4MTY0OTI3WhcNMjYxMDE1MTY0OTI3WjAYMRYwFAYD VQQDEw02YWM3Yzk5Ny0xNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7NdfdvHmp3B8X4Qh3k/aY7S175LEMuGs/3uxaZPcjkbCvk4eUVCUUGGsAqt 8P5iSeq8NBQ6x92RQraNZLKOcqA3HWxAkGlOTGg2SoYGyiDPxjb+sXEY7eKyx23L jeKXM/COrerN1ziTQMcM0MavyexxRGmDR7leD+nTnnte62+2gNRIJMzxzC3lGE5o FmzmG9qpErjGXR/PwwE2nQnphBb69DAx2A+5VUo5ZWG+ihkhBh/G36SXlewvnePG SZW/bEWiu5H939wangDrnd/ncDLAZyPtxi1Ylp4aQoNQ2rb3UsRJdOslv8VVCXH7 pWlZuCnw2K64hAPiJrXeA29uRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4qJlP1 Dv43FuaPhbMx2aMEy+9FMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMIEWetsr9GPuoQwXfQZeMBnlSgGtgz1tcDVGs6JuyNy1aA0DlUB+pU9QNcNF RCBAytqSb/SMeeladszk5k58HaBG+9lwR+fC+HRgQCW8UsEmGyXS9uwZgOY4GjtS qJqbEeXkzn4d6PofyK9ewPDCgMsiSHnVYLnBGt87GiHs9tApxFHl/1kNF/MU8ILB ksFIjvyQwVs1JKqHakCl+7ZFS/j+2fYeeO8kJ8ag8o/KxDNhRZfIRz7JU7f8IjHN LDhL7VhixL83ge/NQNTCYo8V9EXdBGBnLEhAyDe/2zuvqp4wjUfFSbAOo2niQUx3 +Iu6zlbez+f7RCykB7p4o69dQQ== -----END CERTIFICATE-----Generated at Sat Oct 10 11:04:00 2026 by rpki-client