$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft File: Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft (raw, json) Hash identifier: DluCoSAQHF3NewsDizFyaGfD0Z9qmTz1XBKSVv/J628= Subject key identifier: C8:4C:62:75:ED:65:FE:35:2C:91:CE:D1:C9:C8:23:0A:9D:04:6C:3F Authority key identifier: 67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 Certificate issuer: /CN=A9169E72/serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft Manifest number: 3D Signing time: Fri 21 Aug 2026 08:29:57 +0000 Manifest this update: Fri 21 Aug 2026 08:29:56 +0000 Manifest next update: Fri 28 Aug 2026 08:29:56 +0000 Files and hashes: 1: Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl (hash: tMhV+mlXOHfnSUFBYTBFCDPL5a8ARYiwmVOGt1DLbQ0=) 2: 2EC97C2C3EC911F18D9C5FE1AC833773.roa (hash: EvUSWLNIQOqqmidD5PHrkwd8fAUpWrCITwdT6HKeSIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E72, serialNumber=67CB1145A89CD8B67AED9E4E528703F55C1521B3 Validity Not Before: Aug 21 08:29:56 2026 GMT Not After : Aug 28 08:29:56 2026 GMT Subject: CN=6a880c85-5c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:a6:7f:44:fd:79:b5:b7:ba:0e:d5:65:26: e9:d3:f7:2a:d2:de:5f:8d:4e:8e:49:48:d2:7c:b5: 95:e3:23:0c:07:04:9b:b3:63:21:ea:c3:13:24:58: cc:6b:a4:4f:2f:87:17:a4:b4:d7:2d:c8:62:b6:a5: f4:ac:1e:d3:77:e7:49:8c:4e:ce:28:7e:c0:0e:ac: 5d:fe:a2:56:f6:3e:0b:36:f6:1a:98:10:4a:be:cd: ae:c7:f0:3f:d7:66:c6:7f:e5:63:2a:9f:11:c2:54: 0a:17:eb:0e:7b:14:75:24:03:62:f5:99:8f:c0:c1: 82:40:de:96:35:70:81:45:fb:52:c6:0a:ad:0e:61: be:c6:59:58:6c:6b:ca:7b:d8:56:36:41:b6:dd:7f: 13:14:7c:2f:57:08:17:2f:8b:dd:f1:d3:61:e7:89: a8:d1:01:b4:8f:4d:43:bd:34:ce:0a:3f:7c:1b:c5: 06:d6:53:02:fc:94:31:89:57:17:d7:33:cd:f7:e1: 2b:27:32:f9:c4:67:d6:26:30:54:ef:47:b0:29:59: 37:22:4c:48:d4:de:c4:94:20:36:99:fb:ef:fc:17: 4b:d2:98:42:85:01:01:26:c9:4e:35:89:0e:9a:fc: 0a:7c:62:c7:94:d7:03:af:9c:cc:54:79:56:09:82: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4C:62:75:ED:65:FE:35:2C:91:CE:D1:C9:C8:23:0A:9D:04:6C:3F X509v3 Authority Key Identifier: keyid:67:CB:11:45:A8:9C:D8:B6:7A:ED:9E:4E:52:87:03:F5:5C:15:21:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8sRRaic2LZ67Z5OUocD9VwVIbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E72/072FA8863EC811F189ABCFB6AC833773/Z8sRRaic2LZ67Z5OUocD9VwVIbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:29:14:3a:f9:3d:d1:27:87:5b:8b:d5:7b:af:f5:d1:08: c4:7d:ec:33:5e:61:1f:88:db:27:c3:11:ae:b1:07:9d:39:6c: 31:0b:03:b3:bd:df:59:10:99:9c:13:82:3f:08:8b:50:c9:12: 7f:c1:6e:3c:f5:17:21:57:c1:39:a8:fd:af:f4:d1:5b:b5:2d: bf:e1:05:0f:c8:0f:5e:51:57:2e:a0:c6:6b:12:2c:b4:57:3a: ee:07:a1:9f:60:44:cf:7f:06:7d:39:8e:d6:28:2c:ce:f0:fa: 5e:94:19:9f:1d:c6:69:2f:5b:8c:2d:1e:91:52:96:9d:8b:e5: df:3a:d2:c2:2d:e0:e3:c8:43:03:be:d1:82:68:61:fb:b2:59: 05:ac:21:79:5b:02:07:bb:54:d3:03:18:4a:bf:99:b7:f8:3d: 81:07:76:4a:d2:0f:29:f2:b8:de:d7:4e:fc:d6:fa:b7:29:92: ff:6e:64:af:0d:a5:64:c5:f2:1f:86:d8:58:7a:4b:ae:ca:15: 3e:22:4f:52:cb:88:54:e5:1d:73:00:b4:28:7f:88:c1:b6:3c: fb:3b:37:45:ef:5d:8e:00:6c:08:84:d8:41:de:9e:55:87:f8: bb:2d:14:7d:a5:d9:ed:be:c4:d2:87:92:e4:a4:0c:d3:9d:4e: 8a:8e:f0:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU3MjExMC8GA1UEBRMoNjdDQjExNDVBODlDRDhCNjdBRUQ5RTRFNTI4NzAzRjU1 QzE1MjFCMzAeFw0yNjA4MjEwODI5NTZaFw0yNjA4MjgwODI5NTZaMBgxFjAUBgNV BAMTDTZhODgwYzg1LTVjNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRZaZ/RP15tbe6DtVlJunT9yrS3l+NTo5JSNJ8tZXjIwwHBJuzYyHqwxMkWMxr pE8vhxektNctyGK2pfSsHtN350mMTs4ofsAOrF3+olb2Pgs29hqYEEq+za7H8D/X ZsZ/5WMqnxHCVAoX6w57FHUkA2L1mY/AwYJA3pY1cIFF+1LGCq0OYb7GWVhsa8p7 2FY2QbbdfxMUfC9XCBcvi93x02HniajRAbSPTUO9NM4KP3wbxQbWUwL8lDGJVxfX M8334SsnMvnEZ9YmMFTvR7ApWTciTEjU3sSUIDaZ++/8F0vSmEKFAQEmyU41iQ6a /Ap8YseU1wOvnMxUeVYJgjXbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyExide1l /jUskc7RycgjCp0EbD8wHwYDVR0jBBgwFoAUZ8sRRaic2LZ67Z5OUocD9VwVIbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTcyLzA3MkZBODg2M0VD ODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxaNjdaNU9Vb2NEOVZ3Vkli TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjhzUlJhaWMyTFo2N1o1T1VvY0Q5VndWSWJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTcyLzA3MkZBODg2M0VDODExRjE4OUFCQ0ZCNkFDODMzNzczL1o4c1JSYWljMkxa NjdaNU9Vb2NEOVZ3VkliTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArQSkUOvk90SeHW4vVe6/10QjEfewzXmEfiNsnwxGusQedOWwxCwOzvd9ZEJmc E4I/CItQyRJ/wW489RchV8E5qP2v9NFbtS2/4QUPyA9eUVcuoMZrEiy0VzruB6Gf YETPfwZ9OY7WKCzO8PpelBmfHcZpL1uMLR6RUpadi+XfOtLCLeDjyEMDvtGCaGH7 slkFrCF5WwIHu1TTAxhKv5m3+D2BB3ZK0g8p8rje10781vq3KZL/bmSvDaVkxfIf hthYekuuyhU+Ik9Sy4hU5R1zALQof4jBtjz7OzdF712OAGwIhNhB3p5Vh/i7LRR9 pdntvsTSh5LkpAzTnU6KjvB3 -----END CERTIFICATE-----Generated at Sat Aug 22 07:44:38 2026 by rpki-client