$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: rQQFWoEiswHFrdAv8aVb9usOta4nXhFGm8V2HUffzLs= Subject key identifier: 7F:22:14:58:62:E4:E9:B7:0D:F9:9D:51:3B:C1:6D:9E:4F:06:E5:AD Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0D33 Signing time: Fri 04 Sep 2026 18:05:10 +0000 Manifest this update: Fri 04 Sep 2026 18:05:09 +0000 Manifest next update: Fri 11 Sep 2026 18:05:09 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: sLG4Epij1MZoC9ozFBXE2vbyc9Bwfm0yPfmvaQlfeMA=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Sep 4 18:05:09 2026 GMT Not After : Sep 11 18:05:09 2026 GMT Subject: CN=6a9b0856-b952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:02:ac:1f:b5:9e:50:26:82:61:b0:7c:ad: d0:88:af:ad:93:5b:c1:4f:f1:06:38:b5:a0:ef:e8: 94:dc:92:c5:85:8d:ad:d5:b3:ce:43:11:d1:a8:70: e5:05:22:3b:28:cb:ca:bc:72:20:40:63:fb:30:e9: 91:36:72:66:73:85:e1:cc:8d:7d:e2:b2:5b:cc:98: d6:ba:9e:fb:10:af:d1:bb:48:12:90:f3:84:4e:06: bb:3c:87:85:61:87:b2:11:17:e8:0a:33:24:66:5c: fd:e7:fc:8a:5d:20:df:7a:77:bd:d6:ec:90:2d:3d: f1:c3:2b:d2:62:d4:25:47:8f:4b:cd:b8:35:5a:c9: 4b:23:57:b8:91:5a:39:03:98:6b:d5:ad:e5:be:44: ea:b6:f1:ee:75:11:66:18:fb:5e:4c:bb:08:3d:c9: ab:77:0d:d6:34:cc:6b:aa:71:b8:e7:93:60:f0:23: 0c:be:e9:14:73:f6:47:5d:a7:18:37:47:8a:ae:41: 55:b5:e6:82:12:04:13:71:1f:9a:22:8f:42:7d:a0: d5:00:ca:57:e6:bb:79:1c:91:fc:6e:7a:02:59:61: 2c:14:6a:d4:6e:13:06:dd:46:bc:f0:ea:71:c1:10: af:c7:d1:04:9c:28:2d:be:53:3e:b9:70:71:30:b9: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:14:58:62:E4:E9:B7:0D:F9:9D:51:3B:C1:6D:9E:4F:06:E5:AD X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:92:5c:33:a5:e8:17:ca:77:32:31:d5:8c:eb:20:04:44:a5: 89:34:a2:5e:35:2a:21:bb:71:1d:71:67:49:a4:df:13:bc:a9: 84:98:ab:89:b5:87:06:5c:2f:be:eb:06:14:1d:47:18:37:38: f2:d8:cd:a3:69:df:43:39:a7:bc:82:2e:2d:f5:78:02:64:60: c0:fa:74:07:54:72:28:8d:e8:e4:a3:df:15:21:0f:97:4f:d8: d0:b9:e8:31:28:f7:c4:2c:7b:14:40:fc:fe:79:cf:ee:f5:23: 8f:55:49:2d:a8:b6:03:f0:25:79:4e:51:31:02:6e:e3:0c:31: 45:80:02:89:94:21:35:67:2a:25:fb:8d:ab:2e:c0:b8:cb:9c: 8f:55:de:57:3e:3e:21:e6:80:62:ae:58:2f:bc:38:26:f8:ee: 9f:51:be:06:f7:f1:a7:19:14:84:b0:02:40:88:74:ae:19:59: 83:0a:06:a1:26:de:b4:4b:1a:39:31:e0:9c:ae:08:fb:47:e4: a5:6e:9b:af:f3:84:0e:47:94:b7:c0:4e:c3:c1:52:27:94:4d: af:3e:db:14:6e:93:a9:0f:96:2b:fa:dc:9f:0d:18:3a:0a:fb: 24:d3:be:ce:90:ca:93:e0:fa:b8:74:a9:9f:b1:df:59:8e:2a: 84:f9:68:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjYwOTA0MTgwNTA5WhcNMjYwOTExMTgwNTA5WjAYMRYwFAYD VQQDEw02YTliMDg1Ni1iOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslICrB+1nlAmgmGwfK3QiK+tk1vBT/EGOLWg7+iU3JLFhY2t1bPOQxHRqHDl BSI7KMvKvHIgQGP7MOmRNnJmc4XhzI194rJbzJjWup77EK/Ru0gSkPOETga7PIeF YYeyERfoCjMkZlz95/yKXSDfene91uyQLT3xwyvSYtQlR49Lzbg1WslLI1e4kVo5 A5hr1a3lvkTqtvHudRFmGPteTLsIPcmrdw3WNMxrqnG455Ng8CMMvukUc/ZHXacY N0eKrkFVteaCEgQTcR+aIo9CfaDVAMpX5rt5HJH8bnoCWWEsFGrUbhMG3Ua88Opx wRCvx9EEnCgtvlM+uXBxMLlvuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8iFFhi 5Om3DfmdUTvBbZ5PBuWtMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaJJcM6XoF8p3MjHVjOsgBESliTSiXjUqIbtxHXFnSaTfE7yphJiribWHBlwv vusGFB1HGDc48tjNo2nfQzmnvIIuLfV4AmRgwPp0B1RyKI3o5KPfFSEPl0/Y0Lno MSj3xCx7FED8/nnP7vUjj1VJLai2A/AleU5RMQJu4wwxRYACiZQhNWcqJfuNqy7A uMucj1XeVz4+IeaAYq5YL7w4Jvjun1G+BvfxpxkUhLACQIh0rhlZgwoGoSbetEsa OTHgnK4I+0fkpW6br/OEDkeUt8BOw8FSJ5RNrz7bFG6TqQ+WK/rcnw0YOgr7JNO+ zpDKk+D6uHSpn7HfWY4qhPlopA== -----END CERTIFICATE-----Generated at Sat Sep 5 07:20:16 2026 by rpki-client