$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: +7hiiNpYVzoHC5I4oqWUA0M1OUN0lagp/NAgk9GMpkY= Subject key identifier: 01:0E:DA:03:62:12:6F:D8:8A:B6:FF:03:F6:7E:17:9C:A4:1B:C4:1C Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 0127 Signing time: Fri 17 Jul 2026 06:56:16 +0000 Manifest this update: Fri 17 Jul 2026 06:56:15 +0000 Manifest next update: Fri 24 Jul 2026 06:56:15 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: UGvtQTgzcTyOgn1KlUsdzZpLDoBKll4LT/4gVoJZO+o=) 2: 1C8B6124661011F1A974D2FD9847A888.roa (hash: hn2esQSg/WUNR7xONxQYmS7L1amPZzYcuBNv+RXLQaw=) 3: 015076D8661011F1AB7222E09847A888.roa (hash: mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=) 4: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Jul 17 06:56:15 2026 GMT Not After : Jul 24 06:56:15 2026 GMT Subject: CN=6a59d20f-49a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cf:cb:db:b0:ad:16:52:1b:30:f6:39:23:40: e7:1a:97:b4:d3:e4:01:e4:a6:4f:13:f0:ee:4e:6f: aa:7e:a1:a2:56:e6:4c:a6:4c:16:b7:e6:de:f4:78: 49:21:0f:f6:e9:27:7d:1a:4f:3f:99:0c:89:b7:f2: 6c:ff:12:12:9b:63:97:2e:84:3b:b3:52:55:f2:f8: 76:8b:87:d0:8a:70:dc:83:8e:59:28:08:66:a2:61: 9a:0f:a2:e0:6a:f6:a6:ae:e9:d4:5e:81:56:0c:10: 5c:87:82:ed:10:39:8a:c2:f0:f1:21:99:53:6c:10: b1:fd:e8:e7:6c:d5:78:f2:e7:a1:d4:8a:a2:b0:61: f2:38:cf:7e:35:ca:70:c7:93:6c:8b:79:01:da:5b: 4f:17:dd:29:ce:e9:f3:cf:5c:42:08:49:4d:eb:cd: 5c:df:3f:30:44:aa:d0:ce:a5:8f:64:b3:a4:76:0c: 68:57:53:1e:c4:e2:45:4e:c5:dc:6e:4b:57:ae:99: 9a:33:7b:9c:f6:15:71:49:dd:8a:b4:ad:bc:cd:dc: 6e:fc:48:d4:34:19:3f:06:8f:26:64:c9:0c:76:a9: 2b:f6:1b:6d:14:00:26:e0:e0:08:b0:d4:e6:8f:ab: c5:68:5c:3f:20:22:ff:40:95:28:d0:2c:fd:df:6a: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0E:DA:03:62:12:6F:D8:8A:B6:FF:03:F6:7E:17:9C:A4:1B:C4:1C X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2d:c5:2d:03:1f:e3:5a:2f:cd:d9:59:12:8e:9e:d5:8f:9e: 68:76:3e:b5:78:3d:b1:61:4f:54:13:1b:ea:40:6d:2c:15:ae: fe:82:de:af:92:92:e7:5e:5d:2e:7a:87:c3:62:d4:b0:ea:d5: d2:c9:7c:a8:ee:34:ec:b4:fc:0a:d9:05:82:9b:69:0d:1a:9c: f2:e0:6f:cb:b7:59:70:7c:26:fa:0b:1e:48:5f:c3:b8:6a:96: 7d:0f:59:47:b7:73:6e:99:70:0e:6e:91:e7:75:bd:2b:35:28: d9:56:2d:0b:33:44:c6:ca:e2:c4:56:b4:07:52:39:78:9d:a0: 63:e2:f7:63:e9:07:e8:c4:41:e9:8c:5b:6a:f4:11:50:3c:58: 07:9d:ec:27:d1:b3:16:b3:19:ca:f1:4c:39:9f:19:48:0a:eb: 47:a3:b8:20:24:be:b4:bd:89:16:46:a0:b1:11:00:cc:6b:af: 1b:bb:f1:fd:f4:f4:f2:34:ac:3c:b3:5b:8a:a7:e6:57:74:8f: 53:8d:24:93:01:5e:2b:ac:ee:06:16:30:53:b5:2d:76:c5:69: 8c:4a:0b:08:7f:e0:80:b7:d3:e1:5a:17:56:76:cd:f1:a9:17: 14:26:fe:4f:6b:31:af:50:ba:07:9c:9a:6a:a5:b3:ba:c0:7c: 38:9c:55:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjYwNzE3MDY1NjE1WhcNMjYwNzI0MDY1NjE1WjAYMRYwFAYD VQQDEw02YTU5ZDIwZi00OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M/L27CtFlIbMPY5I0DnGpe00+QB5KZPE/DuTm+qfqGiVuZMpkwWt+be9HhJ IQ/26Sd9Gk8/mQyJt/Js/xISm2OXLoQ7s1JV8vh2i4fQinDcg45ZKAhmomGaD6Lg avamrunUXoFWDBBch4LtEDmKwvDxIZlTbBCx/ejnbNV48ueh1IqisGHyOM9+Ncpw x5Nsi3kB2ltPF90pzunzz1xCCElN681c3z8wRKrQzqWPZLOkdgxoV1MexOJFTsXc bktXrpmaM3uc9hVxSd2KtK28zdxu/EjUNBk/Bo8mZMkMdqkr9httFAAm4OAIsNTm j6vFaFw/ICL/QJUo0Cz932r0wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEO2gNi Em/Yirb/A/Z+F5ykG8QcMB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIy3FLQMf41ovzdlZEo6e1Y+eaHY+tXg9sWFPVBMb6kBtLBWu/oLer5KS515d LnqHw2LUsOrV0sl8qO407LT8CtkFgptpDRqc8uBvy7dZcHwm+gseSF/DuGqWfQ9Z R7dzbplwDm6R53W9KzUo2VYtCzNExsrixFa0B1I5eJ2gY+L3Y+kH6MRB6YxbavQR UDxYB53sJ9GzFrMZyvFMOZ8ZSArrR6O4ICS+tL2JFkagsREAzGuvG7vx/fT08jSs PLNbiqfmV3SPU40kkwFeK6zuBhYwU7UtdsVpjEoLCH/ggLfT4VoXVnbN8akXFCb+ T2sxr1C6B5yaaqWzusB8OJxVeQ== -----END CERTIFICATE-----Generated at Sat Jul 18 01:15:45 2026 by rpki-client