$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: Dp2qTn7hI7YXL/dL6AEG0GPRg7lEeFfk8Xqz+CzOdzU= Subject key identifier: 53:3F:9A:35:8F:38:2C:D7:DE:57:6C:E0:F6:A1:75:65:17:AC:C0:CF Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 023E Signing time: Fri 21 Aug 2026 02:33:03 +0000 Manifest this update: Fri 21 Aug 2026 02:33:02 +0000 Manifest next update: Fri 28 Aug 2026 02:33:02 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: 8iwtk9IzFmcaUrFvS64Fk1023uGojKMNlIH9DpBrCWo=) 2: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=) 3: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Aug 21 02:33:02 2026 GMT Not After : Aug 28 02:33:02 2026 GMT Subject: CN=6a87b8de-7d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:d6:e3:e0:d1:2a:01:37:23:8b:f2:7b:74: d0:90:a4:90:5e:84:1c:66:f3:66:62:c0:4b:81:02: a8:16:88:4c:e7:1a:b4:d3:fd:c5:3e:72:7c:70:d2: 4f:c3:a5:ef:c9:51:9d:5a:5a:87:87:fa:7d:1f:2c: 4b:38:32:54:6d:0d:f7:32:59:53:6d:c6:ef:0b:fa: 43:46:76:f0:40:ad:1a:db:d9:b1:a6:8e:0e:12:81: c9:77:91:bd:10:b7:a1:16:9f:8e:81:b2:e2:e4:52: 4a:d6:05:b7:4c:f7:36:88:87:2f:07:1d:1e:4b:b9: bf:7b:fc:0e:b9:cb:99:30:cb:56:4d:f6:de:aa:ca: 65:6f:7e:03:3d:8c:68:70:ed:0e:24:ff:c5:c7:19: f3:52:e4:60:3c:3c:22:5b:0a:0b:e8:04:20:97:87: 33:93:5c:a7:53:95:d3:36:fe:d8:c0:bd:1f:c0:20: 72:83:19:d6:41:53:ed:57:be:31:60:ea:7c:93:54: 1b:7c:b1:df:1d:5a:63:46:b7:16:14:15:43:65:a3: 36:d1:fc:b2:25:f1:6b:85:05:5e:c9:3a:0a:38:03: 51:04:2f:cd:ae:a7:55:5f:da:55:e5:45:47:52:89: 51:bc:a8:9f:af:3b:d4:ca:21:52:b1:3e:33:bb:f6: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:9A:35:8F:38:2C:D7:DE:57:6C:E0:F6:A1:75:65:17:AC:C0:CF X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:9d:be:6a:5c:c4:30:a1:b2:a3:69:3b:8b:57:60:14:d6: e6:89:69:ad:70:f7:d4:33:91:db:0e:9a:be:0d:2f:d3:6d:0f: 52:68:ed:c7:ba:04:61:c7:5e:3a:55:02:9b:f9:e8:37:65:53: 9f:3d:86:ea:80:f5:a7:ce:cc:0c:ac:2f:e9:f3:06:d6:25:56: e8:91:79:0f:51:b1:1d:1a:6f:fa:94:b2:31:c8:11:ef:b3:59: 36:05:c5:12:dd:9d:3c:59:8b:77:e4:fe:0e:b6:e1:22:d2:ea: a2:a5:de:45:d5:53:2b:ab:83:ed:fc:ca:64:c5:46:9f:97:87: 6a:26:89:85:0c:f4:2b:d0:26:4a:3f:42:93:fd:db:0c:42:32: 87:08:22:dc:a2:98:7a:3c:ce:38:68:d2:86:d6:f7:f0:f5:47: f2:7a:30:b6:76:11:e0:50:7a:56:3d:e7:82:31:92:73:f0:21: 67:ba:d6:5c:f0:d0:27:ce:75:3a:ac:49:2c:56:51:68:cd:cf: 66:f7:ee:77:65:2b:4f:0a:0f:15:0f:c1:d9:17:3f:5a:06:70: 74:2c:23:e4:fd:25:47:ab:71:ea:f1:74:ab:a5:31:01:13:cd: f9:cc:95:c5:1d:c8:fc:e0:1f:ae:1a:d8:0b:5f:ba:3b:76:28: 18:30:b2:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjYwODIxMDIzMzAyWhcNMjYwODI4MDIzMzAyWjAYMRYwFAYD VQQDEw02YTg3YjhkZS03ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/vW4+DRKgE3I4vye3TQkKSQXoQcZvNmYsBLgQKoFohM5xq00/3FPnJ8cNJP w6XvyVGdWlqHh/p9HyxLODJUbQ33MllTbcbvC/pDRnbwQK0a29mxpo4OEoHJd5G9 ELehFp+OgbLi5FJK1gW3TPc2iIcvBx0eS7m/e/wOucuZMMtWTfbeqsplb34DPYxo cO0OJP/FxxnzUuRgPDwiWwoL6AQgl4czk1ynU5XTNv7YwL0fwCBygxnWQVPtV74x YOp8k1QbfLHfHVpjRrcWFBVDZaM20fyyJfFrhQVeyToKOANRBC/NrqdVX9pV5UVH UolRvKifrzvUyiFSsT4zu/YkKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFM/mjWP OCzX3lds4PahdWUXrMDPMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm8+dvmpcxDChsqNpO4tXYBTW5olprXD31DOR2w6avg0v020PUmjtx7oEYcde OlUCm/noN2VTnz2G6oD1p87MDKwv6fMG1iVW6JF5D1GxHRpv+pSyMcgR77NZNgXF Et2dPFmLd+T+DrbhItLqoqXeRdVTK6uD7fzKZMVGn5eHaiaJhQz0K9AmSj9Ck/3b DEIyhwgi3KKYejzOOGjShtb38PVH8nowtnYR4FB6Vj3ngjGSc/AhZ7rWXPDQJ851 OqxJLFZRaM3PZvfud2UrTwoPFQ/B2Rc/WgZwdCwj5P0lR6tx6vF0q6UxARPN+cyV xR3I/OAfrhrYC1+6O3YoGDCy7g== -----END CERTIFICATE-----Generated at Sat Aug 22 05:26:25 2026 by rpki-client