$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: pxDm8UuX34YRZPxI6STW9Vc6VwxWtdXUrzjy/QvoifI= Subject key identifier: 7A:4E:83:70:99:44:DC:AF:89:03:BF:E7:BC:0E:28:E0:5E:86:EF:14 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: 0157 Signing time: Mon 19 Oct 2026 05:53:33 +0000 Manifest this update: Mon 19 Oct 2026 05:53:32 +0000 Manifest next update: Mon 26 Oct 2026 05:53:32 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: Fd4KXFuIk7mdU2uANmHnS/eL7RowcHWwGsFQCHf64nY=) 2: 1C8B6124661011F1A974D2FD9847A888.roa (hash: hn2esQSg/WUNR7xONxQYmS7L1amPZzYcuBNv+RXLQaw=) 3: 77A9961E2CAB11F1BF46ABE0C7833773.roa (hash: Q5XGonUjw8sQ01LaKIAaeB4qGlcPxvCGGCZQLk20yVo=) 4: 015076D8661011F1AB7222E09847A888.roa (hash: mg4hdAxL+jiL9YgZO1EH5Nf2nzjgUUXQ7Z1t1rPcT1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Oct 19 05:53:32 2026 GMT Not After : Oct 26 05:53:32 2026 GMT Subject: CN=6ad5b05c-5bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:b4:07:31:6c:98:3c:e0:7a:6d:e6:60:2a: 4e:43:4f:e1:48:dd:eb:56:17:2c:52:69:72:e0:4a: 7d:d1:f6:6d:35:b6:53:23:b1:b5:ab:be:8d:19:c0: e8:a6:17:a0:49:3c:32:9f:ab:fe:97:de:84:70:77: 56:bd:a1:0c:91:39:62:0a:75:d4:46:8f:46:f6:f6: 3d:86:c3:95:23:3c:d1:fb:9e:d1:02:55:de:4e:b1: 0a:9f:bc:27:48:62:8d:f5:76:de:b6:dd:28:ef:b4: 65:15:b5:96:70:e2:60:a0:d2:76:a8:c2:32:06:36: 2d:e0:15:18:f8:b9:1e:fb:c3:fd:2b:15:97:b4:e1: 0c:82:ed:47:c7:99:69:84:6f:81:b9:e4:c9:54:4e: 5d:40:8f:39:2e:44:8a:bc:43:6e:ce:5a:c9:a2:dd: 2b:bf:ee:09:5f:b2:05:13:f4:d4:0e:67:ff:39:60: 75:e2:9d:14:de:ec:b4:f6:4c:63:f2:be:b9:97:58: 7f:1c:93:db:8f:87:1c:0a:46:5f:b1:75:8c:72:0e: 4e:79:e3:6d:ac:2d:bd:2b:4a:cc:ae:ea:17:f1:e3: 71:3f:dd:b4:45:c9:ae:35:22:54:39:11:2b:b3:1b: 27:0e:1e:c1:44:e8:c9:a7:75:77:c2:e4:aa:15:01: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4E:83:70:99:44:DC:AF:89:03:BF:E7:BC:0E:28:E0:5E:86:EF:14 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:01:c2:ac:44:5f:b9:19:ef:a3:63:bd:21:af:76:70:f9:f3: b5:b7:ab:68:fe:14:e5:b8:0f:30:1b:b1:05:1a:09:40:32:a2: 2d:1f:9a:cb:34:58:a0:94:6d:ef:ff:09:cc:78:82:f4:38:60: 63:b0:99:74:90:4d:59:96:a6:a7:e8:89:3e:b6:0d:78:a2:57: 59:3c:48:05:e4:c2:ca:6d:8e:cd:bb:0c:5b:0b:3a:7d:de:5a: d7:dd:2f:8f:e9:84:8b:04:42:1f:f9:39:92:14:e9:24:65:b0: 6e:46:35:d8:a4:6b:11:7b:fd:e8:28:40:cb:f4:2e:ac:f0:64: e0:2a:4c:37:8c:69:8b:0c:72:8a:66:6a:8d:09:6a:3d:75:50: 24:39:79:73:51:68:ca:8c:62:d9:c2:75:3c:a9:22:a8:96:1f: e2:73:85:45:f1:88:34:39:6c:64:58:d4:0e:a0:52:73:f2:2b: b4:49:a1:29:77:c8:10:03:6d:a6:60:5f:b2:dc:fc:25:77:96: 76:7f:33:d8:3c:b9:ce:05:a3:37:72:66:88:db:a3:d8:89:f0: 11:77:7d:cb:25:b4:b7:7e:b6:fd:80:77:79:3b:bf:dc:1c:c9: e3:f0:b9:36:5c:6e:3b:42:de:fb:2e:d0:ea:f7:b2:8a:1a:0d: d1:aa:e7:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjYxMDE5MDU1MzMyWhcNMjYxMDI2MDU1MzMyWjAYMRYwFAYD VQQDEw02YWQ1YjA1Yy01YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2K0BzFsmDzgem3mYCpOQ0/hSN3rVhcsUmly4Ep90fZtNbZTI7G1q76NGcDo phegSTwyn6v+l96EcHdWvaEMkTliCnXURo9G9vY9hsOVIzzR+57RAlXeTrEKn7wn SGKN9Xbett0o77RlFbWWcOJgoNJ2qMIyBjYt4BUY+Lke+8P9KxWXtOEMgu1Hx5lp hG+BueTJVE5dQI85LkSKvENuzlrJot0rv+4JX7IFE/TUDmf/OWB14p0U3uy09kxj 8r65l1h/HJPbj4ccCkZfsXWMcg5OeeNtrC29K0rMruoX8eNxP920RcmuNSJUOREr sxsnDh7BROjJp3V3wuSqFQH2IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpOg3CZ RNyviQO/57wOKOBehu8UMB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhwHCrERfuRnvo2O9Ia92cPnztberaP4U5bgPMBuxBRoJQDKiLR+ayzRYoJRt 7/8JzHiC9DhgY7CZdJBNWZamp+iJPrYNeKJXWTxIBeTCym2OzbsMWws6fd5a190v j+mEiwRCH/k5khTpJGWwbkY12KRrEXv96ChAy/QurPBk4CpMN4xpiwxyimZqjQlq PXVQJDl5c1Foyoxi2cJ1PKkiqJYf4nOFRfGINDlsZFjUDqBSc/IrtEmhKXfIEANt pmBfstz8JXeWdn8z2Dy5zgWjN3JmiNuj2InwEXd9yyW0t362/YB3eTu/3BzJ4/C5 NlxuO0Le+y7Q6veyihoN0arnCg== -----END CERTIFICATE-----Generated at Tue Oct 20 12:23:04 2026 by rpki-client