$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft File: zOnFYkus-dCYXj8tbjHmsthtgq4.mft (raw, json) Hash identifier: dbkTtdHQ1jYfS3JoIirnu5tt7fM0aJcIupKaoRu2cZM= Subject key identifier: 37:D7:C7:4A:3C:F8:B4:BF:00:2B:95:3D:5A:96:A2:35:A2:CD:C9:09 Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft Manifest number: AF Signing time: Wed 19 Aug 2026 07:46:45 +0000 Manifest this update: Wed 19 Aug 2026 07:46:45 +0000 Manifest next update: Wed 26 Aug 2026 07:46:45 +0000 Files and hashes: 1: zOnFYkus-dCYXj8tbjHmsthtgq4.crl (hash: vudRC6JOh7qbHyirlBSOBEEef350863jGTdlH3VPyWw=) 2: 0C4B4A28892811F1A62CD15C5611F970.roa (hash: QmtANBl3xbqi6d33sHeUXu4Ac01FQws4OrK79nYT1zU=) 3: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (hash: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE Validity Not Before: Aug 19 07:46:45 2026 GMT Not After : Aug 26 07:46:45 2026 GMT Subject: CN=6a855f65-3327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:bf:b8:cf:c2:69:56:34:29:fa:1c:b3:49: 07:f0:65:e0:07:d1:6b:78:ba:a1:1e:2b:28:09:e4: 42:8d:34:99:ec:58:fb:9c:55:fe:14:b4:0a:bb:7d: 49:93:33:73:b3:f2:3e:4b:23:4f:eb:f1:a6:cb:82: fa:99:26:cd:8c:73:23:5a:99:0d:bf:b9:f6:d9:6d: c8:93:42:94:87:3b:4b:28:7c:74:7a:8d:68:39:c7: 24:f6:57:85:4d:8b:4e:2e:fe:4b:75:a5:45:f8:d4: 80:4f:63:45:50:bd:fa:62:aa:de:93:90:04:3f:21: bc:15:44:20:f8:40:78:29:9a:1a:55:32:2e:6f:25: c6:78:ce:4c:21:5d:97:e8:e4:93:57:3b:7e:d4:db: e9:7b:b7:05:3f:e4:8f:25:b7:99:1a:bc:65:9f:ff: 0f:b7:13:f8:b2:ac:0f:5c:d4:d0:36:7e:b0:71:2f: 69:ef:11:04:64:96:59:ab:58:0f:76:bf:41:95:14: a3:e9:a7:f0:b3:da:5f:b3:42:ff:78:a4:19:c6:18: 08:1f:c0:78:a8:db:87:55:23:71:16:fb:88:9e:b1: 6d:4c:c1:6a:b3:3e:7c:3f:6f:12:cb:7a:b7:b9:ef: 9a:79:5a:d1:11:f1:63:04:a4:aa:8f:ef:78:b8:b1: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:C7:4A:3C:F8:B4:BF:00:2B:95:3D:5A:96:A2:35:A2:CD:C9:09 X509v3 Authority Key Identifier: keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:67:09:51:a7:ac:30:b2:88:08:c4:19:0f:f4:90:c4:b5:1c: ae:26:17:f2:88:b3:85:01:cd:d7:37:22:a4:98:cf:a7:85:52: d8:71:9c:50:f0:70:8d:de:f0:a9:7a:0c:4b:a5:2b:bc:b5:19: b7:59:ff:f7:ed:63:67:dd:f9:49:b1:e4:be:9f:23:2e:6f:2b: 71:4f:37:ac:2e:9d:fd:ab:35:f2:92:b2:d5:00:dc:94:29:c7: 11:95:ef:5e:f1:b1:35:94:19:b0:cf:ba:b8:4f:2e:6d:25:b1: 91:20:47:c9:62:49:dc:01:46:78:ff:0b:d0:21:2c:8e:45:c1: 30:7a:83:65:55:27:91:97:e9:a8:8f:ea:a7:bd:87:8c:5d:20: ec:47:85:8b:0c:6a:1e:d7:aa:2a:60:14:b5:de:ad:db:78:2c: c9:14:a3:56:9d:6b:7c:54:91:54:e5:fd:14:f2:ab:9a:4b:f8: fa:5d:92:51:73:c2:1c:55:1d:26:68:89:82:ab:57:eb:84:f2: 51:61:4c:8e:84:04:90:c8:de:77:70:69:e7:f9:a4:24:5d:b0: 6f:a9:3e:46:4e:27:01:e3:a8:eb:45:59:d8:68:12:17:d4:af: 1d:3b:45:70:50:26:08:46:38:e8:34:1e:1c:87:1b:08:d4:a2: 72:7a:8d:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy RDg2RDgyQUUwHhcNMjYwODE5MDc0NjQ1WhcNMjYwODI2MDc0NjQ1WjAYMRYwFAYD VQQDEw02YTg1NWY2NS0zMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uu/uM/CaVY0Kfocs0kH8GXgB9FreLqhHisoCeRCjTSZ7Fj7nFX+FLQKu31J kzNzs/I+SyNP6/Gmy4L6mSbNjHMjWpkNv7n22W3Ik0KUhztLKHx0eo1oOcck9leF TYtOLv5LdaVF+NSAT2NFUL36Yqrek5AEPyG8FUQg+EB4KZoaVTIubyXGeM5MIV2X 6OSTVzt+1Nvpe7cFP+SPJbeZGrxln/8PtxP4sqwPXNTQNn6wcS9p7xEEZJZZq1gP dr9BlRSj6afws9pfs0L/eKQZxhgIH8B4qNuHVSNxFvuInrFtTMFqsz58P28Sy3q3 ue+aeVrREfFjBKSqj+94uLGMlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfXx0o8 +LS/ACuVPVqWojWizckJMB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0IwNy9EODg1NDQ5MjhGRDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1k Q1lYajh0YmpIbXN0aHRncTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwGcJUaesMLKICMQZD/SQxLUcriYX8oizhQHN1zcipJjPp4VS2HGcUPBwjd7w qXoMS6UrvLUZt1n/9+1jZ935SbHkvp8jLm8rcU83rC6d/as18pKy1QDclCnHEZXv XvGxNZQZsM+6uE8ubSWxkSBHyWJJ3AFGeP8L0CEsjkXBMHqDZVUnkZfpqI/qp72H jF0g7EeFiwxqHteqKmAUtd6t23gsyRSjVp1rfFSRVOX9FPKrmkv4+l2SUXPCHFUd JmiJgqtX64TyUWFMjoQEkMjed3Bp5/mkJF2wb6k+Rk4nAeOo60VZ2GgSF9SvHTtF cFAmCEY46DQeHIcbCNSicnqNwA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:53 2026 by rpki-client