$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: ILge+EcgIgqmXXYZcsds8LZ3avRq464I0Fc2w1DS/ss= Subject key identifier: 92:5F:14:2A:E8:DC:52:45:78:93:5D:13:40:AB:12:D2:12:84:CC:0E Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: C7 Signing time: Mon 05 Oct 2026 07:11:59 +0000 Manifest this update: Mon 05 Oct 2026 07:11:59 +0000 Manifest next update: Mon 12 Oct 2026 07:11:59 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: mVn/AUzfoCMtxfA1ion/jhBox+ldBzyGrBrUowUVtLc=) 2: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) 3: 0C4B4A28892811F1A62CD15C5611F970.roa (hash: QmtANBl3xbqi6d33sHeUXu4Ac01FQws4OrK79nYT1zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Oct 5 07:11:59 2026 GMT Not After : Oct 12 07:11:59 2026 GMT Subject: CN=6ac34dbf-0a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:9a:ea:ba:33:ab:8e:56:dc:d9:2a:a4:22: 9d:9b:c3:f6:65:88:96:8c:37:8a:dd:7a:85:bb:a7: a9:ed:94:90:14:0c:5b:69:6f:cb:0b:98:34:56:12: 95:10:1c:dc:fe:35:cd:c9:5f:b4:d9:ea:27:6e:49: eb:91:9e:fd:46:e4:81:92:fc:d4:50:57:37:70:54: b0:d2:61:54:b4:56:85:a2:7a:48:2e:ef:1f:37:ff: 27:fe:07:2c:31:1c:24:e3:22:5e:fd:00:b3:ce:27: fc:2b:74:9a:6b:09:81:e8:d6:bf:49:a9:4d:ce:c1: ca:59:89:b5:b9:0a:e7:2c:7a:7e:75:d9:8a:c3:cd: 7a:5e:f1:e2:90:8f:39:df:88:96:6e:d0:3e:8d:e6: 9d:02:33:a3:3f:19:07:26:e6:5c:4b:2e:db:21:f0: da:43:38:fc:92:14:40:74:e4:12:18:78:56:d6:fd: 50:fc:c3:50:36:7c:db:af:7d:e4:78:8a:33:34:a3: 84:74:a4:e3:61:d9:3f:04:68:f5:35:54:55:76:18: b8:b4:cb:ec:a1:0e:e2:5c:26:2c:55:e9:f6:1a:47: 4e:22:b5:a8:d1:3b:8f:35:e6:a0:b3:34:6c:24:c4: d5:3d:14:56:03:36:98:47:a4:56:ab:10:0d:e6:4c: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5F:14:2A:E8:DC:52:45:78:93:5D:13:40:AB:12:D2:12:84:CC:0E X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b4:36:76:1e:40:f9:e9:a6:a7:d2:ce:1e:ba:ad:89:72:11: 06:75:02:b8:07:db:76:2e:35:95:00:8f:8b:bb:dd:58:6a:04: 80:ed:64:a2:f6:76:cd:f7:f4:8f:9a:07:bb:6b:0d:19:9b:48: 0c:3c:1a:f1:eb:c8:29:34:71:b2:cd:b3:61:fb:c1:e8:21:60: 53:1e:a3:4c:32:cc:ad:1e:c0:ec:20:71:e4:2d:bd:f6:d9:79: 76:f0:87:50:06:9e:38:6d:5d:31:98:a4:df:bf:0b:f7:7c:1f: c0:7b:cf:78:09:a2:47:28:c7:8c:05:89:6b:26:93:48:c8:12: 83:c9:12:65:43:31:7b:9d:3e:e2:5e:d6:62:e8:0c:1d:ac:63: 69:89:a2:a8:33:6d:bc:e4:52:b0:a0:1c:ea:93:ad:c0:82:84: 2d:84:a8:81:06:d4:fb:d6:f6:a0:5a:36:06:28:5b:b8:57:7a: 0a:03:be:d6:f2:c7:5c:6c:77:54:f2:23:77:2c:e8:13:f3:f1: 0b:9c:1f:50:b8:30:2e:cd:f8:0f:74:59:6a:e9:f8:3a:6a:75: 44:0e:14:c4:7f:09:b1:ed:b4:7b:b9:a3:72:b4:d1:a9:94:b4: 37:34:4c:7f:b7:60:b3:43:30:df:d7:bf:a5:04:66:ee:3f:fa: f2:55:f4:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy RDg2RDgyQUUwHhcNMjYxMDA1MDcxMTU5WhcNMjYxMDEyMDcxMTU5WjAYMRYwFAYD VQQDEw02YWMzNGRiZi0wYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQua6rozq45W3NkqpCKdm8P2ZYiWjDeK3XqFu6ep7ZSQFAxbaW/LC5g0VhKV EBzc/jXNyV+02eonbknrkZ79RuSBkvzUUFc3cFSw0mFUtFaFonpILu8fN/8n/gcs MRwk4yJe/QCzzif8K3SaawmB6Na/SalNzsHKWYm1uQrnLHp+ddmKw816XvHikI85 34iWbtA+jeadAjOjPxkHJuZcSy7bIfDaQzj8khRAdOQSGHhW1v1Q/MNQNnzbr33k eIozNKOEdKTjYdk/BGj1NVRVdhi4tMvsoQ7iXCYsVen2GkdOIrWo0TuPNeagszRs JMTVPRRWAzaYR6RWqxAN5kzvWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJfFCro 3FJFeJNdE0CrEtIShMwOMB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0IwNy9EODg1NDQ5MjhGRDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1k Q1lYajh0YmpIbXN0aHRncTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7Q2dh5A+emmp9LOHrqtiXIRBnUCuAfbdi41lQCPi7vdWGoEgO1kovZ2zff0 j5oHu2sNGZtIDDwa8evIKTRxss2zYfvB6CFgUx6jTDLMrR7A7CBx5C299tl5dvCH UAaeOG1dMZik378L93wfwHvPeAmiRyjHjAWJayaTSMgSg8kSZUMxe50+4l7WYugM HaxjaYmiqDNtvORSsKAc6pOtwIKELYSogQbU+9b2oFo2BihbuFd6CgO+1vLHXGx3 VPIjdyzoE/PxC5wfULgwLs34D3RZaun4Omp1RA4UxH8Jse20e7mjcrTRqZS0NzRM f7dgs0Mw39e/pQRm7j/68lX0dQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:00:15 2026 by rpki-client