$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: aQi9b2rdGU4SDh8xaD9kpTkaPU4Bsa7asbSWYamolNQ= Subject key identifier: FE:42:20:00:9F:4C:18:86:08:A7:C0:E0:EF:27:0B:E7:4B:9D:7E:F7 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0959 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0951 Signing time: Mon 24 Aug 2026 20:05:39 +0000 Manifest this update: Mon 24 Aug 2026 20:05:39 +0000 Manifest next update: Mon 31 Aug 2026 20:05:39 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: M/wLgobmYDyWPE2t5lx+IlxIOgPqAwGPqOt3kuaaPjI=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: FnGXHW3NTkfV5VQ0kQwJy6k6mXA3xyfslsGAqppArLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 20:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2393 (0x959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Aug 24 20:05:39 2026 GMT Not After : Aug 31 20:05:39 2026 GMT Subject: CN=6a8ca413-7f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:33:33:04:e3:7b:99:d5:1d:f1:1f:46:66: 27:2d:11:27:ae:d2:f7:75:d6:bc:1c:5b:06:b8:fe: de:f0:92:d1:f3:35:66:a1:9f:08:ef:c0:bf:21:48: dc:0b:5a:c7:da:c8:6a:45:ff:5d:ac:e0:33:1f:9c: ed:04:ce:97:66:56:b4:e9:f0:fe:85:48:be:85:21: 1f:26:2d:9b:e7:de:76:c9:9f:82:20:f9:be:3f:64: ed:a6:93:a4:e1:5a:02:a9:95:7a:7e:7f:0a:b8:17: 87:a7:16:72:62:ae:9b:bc:5d:96:cf:ca:f4:22:50: 8d:fb:9e:d2:17:ed:b0:ad:c1:42:db:59:b3:44:30: 75:79:0d:3d:f1:f1:23:10:67:5c:2b:94:1d:90:cd: ac:d9:87:04:e3:93:55:66:eb:54:c9:00:bf:1e:b1: b4:ad:6f:6c:89:9e:c3:f1:09:79:df:52:34:99:58: 25:d1:00:58:db:17:a8:9b:ce:52:e4:91:ac:a2:ba: e3:23:1d:0a:29:c5:09:de:28:92:a8:0d:bb:42:1d: 4c:0e:98:35:39:3f:7c:1c:ce:31:2b:2e:53:0b:31: be:ac:13:ea:5e:c4:7a:3a:25:4d:94:76:01:60:69: 6f:ac:08:9f:dd:b5:8e:03:10:03:0f:1b:0e:08:13: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:20:00:9F:4C:18:86:08:A7:C0:E0:EF:27:0B:E7:4B:9D:7E:F7 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:28:b6:46:65:c0:b7:7b:6d:5d:d8:30:a5:b3:f2:a4:3c:fd: 54:29:50:ee:47:f9:e3:89:9c:43:35:a7:65:1c:14:8b:a9:35: 16:81:b2:fc:f4:df:6d:fa:9c:c3:c2:99:6e:82:c6:8a:f9:56: e9:d7:8f:cd:20:cb:80:ae:58:b7:b7:fb:46:c0:14:ca:42:c1: ac:6a:24:57:9e:80:0d:d7:9b:a8:41:37:66:36:99:76:1a:07: ca:e9:64:27:5e:ce:fc:3c:1d:0a:48:a4:9f:29:c7:98:07:f9: 41:fe:f6:a3:10:21:d3:89:21:b3:a5:66:cd:de:e4:aa:bd:c9: d3:f9:73:45:73:64:ad:b6:80:48:7b:90:33:ad:d2:7a:36:9e: a7:48:95:24:01:67:7a:a9:4e:08:4a:c0:67:f6:a9:48:83:d3: 62:8a:c1:ef:35:58:ce:11:a9:45:9b:89:ab:71:94:93:7e:c8: d7:f3:6b:f8:5c:cb:e4:82:39:cc:77:6e:5d:08:ba:91:86:3b: 68:d0:37:eb:ce:87:a0:db:8e:a1:1e:21:6d:53:50:98:e0:c0: 43:d2:e7:33:90:e2:6c:7d:9e:61:c4:a6:00:70:2c:2b:85:d2: 7c:bf:6c:63:f5:77:6f:d3:fa:9e:e3:99:f9:31:07:57:8e:d2: b5:23:1d:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjYwODI0MjAwNTM5WhcNMjYwODMxMjAwNTM5WjAYMRYwFAYD VQQDEw02YThjYTQxMy03ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfAzMwTje5nVHfEfRmYnLREnrtL3dda8HFsGuP7e8JLR8zVmoZ8I78C/IUjc C1rH2shqRf9drOAzH5ztBM6XZla06fD+hUi+hSEfJi2b5952yZ+CIPm+P2TtppOk 4VoCqZV6fn8KuBeHpxZyYq6bvF2Wz8r0IlCN+57SF+2wrcFC21mzRDB1eQ098fEj EGdcK5QdkM2s2YcE45NVZutUyQC/HrG0rW9siZ7D8Ql531I0mVgl0QBY2xeom85S 5JGsorrjIx0KKcUJ3iiSqA27Qh1MDpg1OT98HM4xKy5TCzG+rBPqXsR6OiVNlHYB YGlvrAif3bWOAxADDxsOCBMDlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5CIACf TBiGCKfA4O8nC+dLnX73MB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyi2RmXAt3ttXdgwpbPypDz9VClQ7kf544mcQzWnZRwUi6k1FoGy/PTfbfqc w8KZboLGivlW6dePzSDLgK5Yt7f7RsAUykLBrGokV56ADdebqEE3ZjaZdhoHyulk J17O/DwdCkiknynHmAf5Qf72oxAh04khs6Vmzd7kqr3J0/lzRXNkrbaASHuQM63S ejaep0iVJAFneqlOCErAZ/apSIPTYorB7zVYzhGpRZuJq3GUk37I1/Nr+FzL5II5 zHduXQi6kYY7aNA3686HoNuOoR4hbVNQmODAQ9LnM5DibH2eYcSmAHAsK4XSfL9s Y/V3b9P6nuOZ+TEHV47StSMdBQ== -----END CERTIFICATE-----Generated at Tue Aug 25 21:14:38 2026 by rpki-client