$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json) Hash identifier: ejJvc/muM9Q8exP7Gm1FA0VwAsnz0weWemSzBcDvyOg= Subject key identifier: 7F:FE:F4:B0:52:C4:6C:E9:BC:22:BC:BB:73:F6:37:9B:AD:4D:AB:4C Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft Manifest number: 0722 Signing time: Fri 04 Sep 2026 21:50:33 +0000 Manifest this update: Fri 04 Sep 2026 21:50:32 +0000 Manifest next update: Fri 11 Sep 2026 21:50:32 +0000 Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: 79P4lLpzsMVbdKYYU8kppSLcCNbNLKiIyLhgD3th2YQ=) 2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=) 3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 21:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088 Validity Not Before: Sep 4 21:50:32 2026 GMT Not After : Sep 11 21:50:32 2026 GMT Subject: CN=6a9b3d29-57d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:7b:21:b7:21:0e:7e:a9:ab:b3:67:3b:97: 9b:3e:ad:ff:0e:66:27:48:79:e6:cf:4c:9e:98:9e: 96:45:b2:fd:38:63:c6:6c:1d:09:4a:a2:eb:24:32: ae:da:fd:fb:5e:a0:0a:9e:a1:d5:12:ed:61:ee:7f: 49:c9:8e:5e:9d:a4:db:06:88:19:41:5d:2b:84:24: 9c:cd:19:cc:f5:7b:dc:3b:17:5a:33:13:cb:bb:a2: 85:b9:f4:13:58:47:60:d7:75:32:6d:b6:2c:cc:1d: dc:c5:9d:43:d0:c7:15:26:c8:dd:2b:db:bf:98:1d: e5:9b:67:e5:55:22:8d:6f:75:49:ff:a8:89:5b:1e: 88:16:c5:23:0f:3c:02:eb:e5:b2:f1:55:28:e9:15: f2:df:c6:66:d8:44:13:fa:dc:17:87:6c:d3:b2:19: b6:71:e6:9e:7e:41:7a:ed:2c:9e:47:9b:a4:a2:0e: c2:8e:a4:e2:d3:a5:64:4c:b6:fc:c3:0f:94:f2:f9: 77:1a:df:5f:fd:69:be:2e:81:9b:ed:97:1b:c0:4e: ed:79:52:bf:b5:ad:d4:55:b8:2e:36:32:70:ac:44: 69:91:d6:03:4e:02:a9:96:50:a9:02:5d:78:6d:e8: b4:18:67:db:8e:5e:c2:1c:db:90:86:ef:8e:ea:67: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:F4:B0:52:C4:6C:E9:BC:22:BC:BB:73:F6:37:9B:AD:4D:AB:4C X509v3 Authority Key Identifier: keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e2:ee:ce:95:f8:e8:b7:7c:1b:4b:4d:e9:b2:73:c7:68:4b: 4d:93:da:16:85:a3:d0:91:eb:78:f7:e3:a9:2e:bf:29:55:01: 2e:7b:59:49:98:ed:a0:a3:08:c3:68:50:cf:a3:23:de:c0:3d: 8f:2d:a4:ae:fe:d4:f9:fc:af:37:23:62:77:62:4f:1c:8c:98: 05:0b:7c:66:2d:6c:04:30:e3:ee:19:ff:91:62:d1:25:36:a2: 6d:c2:30:51:2d:0a:98:12:da:5b:0d:23:ab:82:28:24:8a:db: fe:62:54:5f:3c:c7:54:39:c4:bb:35:fb:39:79:0e:e4:fb:71: 2d:a3:74:2b:70:04:f4:37:81:e7:4c:9e:08:21:e7:59:d8:39: 08:38:e8:34:ab:77:10:a3:0f:5e:20:95:ef:21:a8:90:6c:0a: 29:79:26:07:de:f2:e1:7a:57:d6:6c:f7:9d:aa:45:9c:d9:62: 0f:12:10:0f:71:81:83:c4:77:80:00:1a:41:f1:cf:f0:4a:02: 74:56:ea:d1:83:aa:fc:70:4b:83:ff:11:03:e4:b5:73:24:84: 6e:ba:46:58:69:08:93:82:77:bb:9f:09:bf:f3:1e:b9:03:45: 00:80:5d:6a:67:48:cb:25:89:de:53:e6:05:1c:ba:69:ef:91: 20:0c:8d:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NTExMTAvBgNVBAUTKENFRjlDNTdFODRCMkVBNUE2RkEzRDBFNDU2MzMwRkI3 QTU0NkYwODgwHhcNMjYwOTA0MjE1MDMyWhcNMjYwOTExMjE1MDMyWjAYMRYwFAYD VQQDEw02YTliM2QyOS01N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e97IbchDn6pq7NnO5ebPq3/DmYnSHnmz0yemJ6WRbL9OGPGbB0JSqLrJDKu 2v37XqAKnqHVEu1h7n9JyY5enaTbBogZQV0rhCSczRnM9XvcOxdaMxPLu6KFufQT WEdg13UybbYszB3cxZ1D0McVJsjdK9u/mB3lm2flVSKNb3VJ/6iJWx6IFsUjDzwC 6+Wy8VUo6RXy38Zm2EQT+twXh2zTshm2ceaefkF67SyeR5ukog7CjqTi06VkTLb8 ww+U8vl3Gt9f/Wm+LoGb7ZcbwE7teVK/ta3UVbguNjJwrERpkdYDTgKpllCpAl14 bei0GGfbjl7CHNuQhu+O6me3bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/+9LBS xGzpvCK8u3P2N5utTatMMB8GA1UdIwQYMBaAFM75xX6Esupab6PQ5FYzD7elRvCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1MS85QTA5N0Q4QTk2 MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZscHZvOURrVmpNUHQ2Vkc4 SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2bkZmb1N5Nmxwdm85RGtWak1QdDZWRzhJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1MS85QTA5N0Q4QTk2MDMxMUVCQjg1REIzNDBDNEY5QUUwMi96dm5GZm9TeTZs cHZvOURrVmpNUHQ2Vkc4SWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+LuzpX46Ld8G0tN6bJzx2hLTZPaFoWj0JHrePfjqS6/KVUBLntZSZjtoKMI w2hQz6Mj3sA9jy2krv7U+fyvNyNid2JPHIyYBQt8Zi1sBDDj7hn/kWLRJTaibcIw US0KmBLaWw0jq4IoJIrb/mJUXzzHVDnEuzX7OXkO5PtxLaN0K3AE9DeB50yeCCHn Wdg5CDjoNKt3EKMPXiCV7yGokGwKKXkmB97y4XpX1mz3napFnNliDxIQD3GBg8R3 gAAaQfHP8EoCdFbq0YOq/HBLg/8RA+S1cySEbrpGWGkIk4J3u58Jv/MeuQNFAIBd amdIyyWJ3lPmBRy6ae+RIAyN0w== -----END CERTIFICATE-----Generated at Sat Sep 5 06:47:24 2026 by rpki-client