$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: jy8niOycT5Lb69NEgKG4Wcq1PGXuUvjswubpwtjN28E= Subject key identifier: B5:49:C9:0F:C3:8F:E8:EB:59:72:91:FE:2D:F5:BB:E3:31:A9:46:57 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0D32 Signing time: Thu 10 Sep 2026 18:16:09 +0000 Manifest this update: Thu 10 Sep 2026 18:16:08 +0000 Manifest next update: Thu 17 Sep 2026 18:16:08 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: oKcPhDaleTy2tiiGu9Nh3dJ+ATKxRKR3trRpUfOmOTs=) 2: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: fsfmLYQjCYyXbWH64txVnYTeAdLVUPvTMFUvd9WCSAg=) 3: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Oj89BVTbff35iiUEgDKh/2E91FVnzurxC9Bnk1Qy+WY=) 4: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: FYuJrC31PU9aboeDs/Zo/WR1Zd9S0N3nIbn61WOZ2kE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Sep 10 18:16:08 2026 GMT Not After : Sep 17 18:16:08 2026 GMT Subject: CN=6aa2f3e9-51ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:19:53:89:e0:69:84:72:00:2c:9e:61:52: 1a:8e:00:37:f1:bb:18:0c:bc:92:d5:cb:11:7b:22: 60:62:ec:4b:61:54:a0:f3:e0:86:5c:56:aa:b7:c4: f2:1c:e8:7b:f4:9c:5c:78:7a:c5:e3:62:3b:77:ee: a9:7c:36:1e:39:a0:f1:16:e8:ae:73:98:a6:1f:42: 2c:42:03:b7:2f:81:ed:46:2b:7a:ae:83:c1:44:00: e5:e1:de:84:9c:52:38:52:ec:ac:1f:b6:48:59:60: 40:f4:79:ec:f6:8c:62:da:9c:24:29:69:3d:ff:6a: 18:c3:ae:27:f6:8f:a3:f8:4e:14:e9:50:b0:32:c8: 10:36:08:b2:6f:71:5c:27:68:34:99:5a:82:ab:ff: 1a:9f:8d:b1:93:0a:63:7f:a3:18:2f:a6:0d:d5:a9: 2d:6f:31:6e:6c:c3:05:d9:41:80:ea:10:16:06:80: a6:01:5b:3b:a1:38:56:b2:41:66:81:eb:45:50:17: c4:42:b4:09:f1:09:6f:49:90:fc:59:f0:b2:7d:ec: 76:d9:ff:52:64:6c:bc:a2:fe:dc:a2:1e:06:ec:a0: f0:3d:d2:c6:f7:2d:d0:b9:1c:d0:ab:b8:1f:a0:74: c3:b4:5e:63:34:46:ce:ef:90:61:f8:d5:e7:5b:f5: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:C9:0F:C3:8F:E8:EB:59:72:91:FE:2D:F5:BB:E3:31:A9:46:57 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:b8:2f:4a:15:2f:65:59:ff:49:79:da:9a:78:66:ae:30: b5:a2:98:16:56:e0:25:d1:ed:cc:7a:17:3c:b0:f4:39:71:47: 96:0a:39:bc:51:6b:ee:8c:bc:9c:7b:3e:c9:76:e2:69:ba:38: c5:bf:da:b0:ba:b7:a9:b2:71:7b:83:7c:41:a1:b2:e2:16:2b: bb:4e:70:48:1c:a9:90:ea:5b:cb:41:e9:d4:e8:f1:48:04:11: d6:f7:c9:2a:89:6c:11:91:cb:af:16:45:48:fb:1f:ec:77:bf: 8b:19:aa:86:30:94:2a:2b:52:3d:52:f7:5a:6f:24:05:13:3b: 71:9d:a2:19:3f:16:28:2f:cd:0c:5d:fe:16:fa:d6:91:5a:c1: 15:99:ef:61:57:a7:5d:ca:81:77:7e:d9:b2:e4:35:ca:97:b9: f3:4a:b0:5e:c2:25:28:bd:1e:0a:ae:2d:72:5e:62:e4:92:e8: bb:6b:aa:35:66:e6:fc:00:2e:fd:cb:07:3c:e8:bf:46:4b:16: 58:d3:6a:81:81:de:1f:55:cb:87:b5:d1:0e:cb:25:c8:4b:f5: 1c:ce:b3:5d:6b:7b:cf:86:8a:66:e5:f8:a2:92:0a:a3:25:31: 06:32:19:11:34:24:cd:75:77:56:59:21:ab:32:2b:10:ed:6d: bd:7d:c8:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYwOTEwMTgxNjA4WhcNMjYwOTE3MTgxNjA4WjAYMRYwFAYD VQQDEw02YWEyZjNlOS01MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooUZU4ngaYRyACyeYVIajgA38bsYDLyS1csReyJgYuxLYVSg8+CGXFaqt8Ty HOh79JxceHrF42I7d+6pfDYeOaDxFuiuc5imH0IsQgO3L4HtRit6roPBRADl4d6E nFI4UuysH7ZIWWBA9Hns9oxi2pwkKWk9/2oYw64n9o+j+E4U6VCwMsgQNgiyb3Fc J2g0mVqCq/8an42xkwpjf6MYL6YN1aktbzFubMMF2UGA6hAWBoCmAVs7oThWskFm getFUBfEQrQJ8QlvSZD8WfCyfex22f9SZGy8ov7coh4G7KDwPdLG9y3QuRzQq7gf oHTDtF5jNEbO75Bh+NXnW/XDTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVJyQ/D j+jrWXKR/i31u+MxqUZXMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+O4L0oVL2VZ/0l52pp4Zq4wtaKYFlbgJdHtzHoXPLD0OXFHlgo5vFFr7oy8 nHs+yXbiabo4xb/asLq3qbJxe4N8QaGy4hYru05wSBypkOpby0Hp1OjxSAQR1vfJ KolsEZHLrxZFSPsf7He/ixmqhjCUKitSPVL3Wm8kBRM7cZ2iGT8WKC/NDF3+FvrW kVrBFZnvYVenXcqBd37ZsuQ1ype580qwXsIlKL0eCq4tcl5i5JLou2uqNWbm/AAu /csHPOi/RksWWNNqgYHeH1XLh7XRDsslyEv1HM6zXWt7z4aKZuX4opIKoyUxBjIZ ETQkzXV3VlkhqzIrEO1tvX3IxA== -----END CERTIFICATE-----Generated at Fri Sep 11 10:10:54 2026 by rpki-client