$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: cVYL1WsDIRatRFIJuH+hwlsPBWWRIYtt8Mg2YNqhmpc= Subject key identifier: B4:A6:A9:BE:7B:70:7A:A2:26:58:17:80:16:B2:F3:56:4F:D2:B6:7A Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E70 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0DC5 Signing time: Thu 10 Sep 2026 16:46:06 +0000 Manifest this update: Thu 10 Sep 2026 16:46:06 +0000 Manifest next update: Thu 17 Sep 2026 16:46:06 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: Wpz8VHneKGi4dvnHggGbwNrikv4suanQg7DcPWkDLJ0=) 2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: t8LYkfUz7zztTyEeLhGNHxti7o0f+rU03cgjhjpa5h0=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 1z0DBiQnEIz3Dx2+68qVMHYw2A5RwkYWaUuHFrVt564=) 4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 09VvW3k0eoInlQS+H6ZHr0QcmrKaADNzaQ8RUnamjko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3696 (0xe70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Sep 10 16:46:06 2026 GMT Not After : Sep 17 16:46:06 2026 GMT Subject: CN=6aa2dece-622c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:c4:35:8b:6e:ee:f6:91:3d:09:8f:a7:11: eb:ad:73:57:8c:d3:f3:c9:7e:9c:49:e2:c5:57:62: 4a:02:05:32:42:19:61:c7:08:95:a9:f2:ea:6d:e9: ae:5d:1c:f6:5a:fa:8a:6e:d3:69:54:a4:ee:86:05: 02:ec:10:67:39:60:28:3b:b1:30:d5:45:b5:61:4a: 62:42:09:6e:8a:55:95:4e:42:2d:fd:97:93:91:2c: 84:16:87:3d:15:38:3c:fb:0b:c9:54:8c:86:ad:8d: c4:09:8f:88:34:13:21:cc:0d:64:f5:a5:e1:2b:09: 0a:ca:40:d3:55:da:8f:be:ae:60:2b:89:9b:9b:cf: 51:d9:01:b7:0a:45:71:9e:73:87:67:b4:ff:ae:9c: 02:00:e0:37:97:92:27:ec:51:5b:9e:b0:bf:d5:80: 7f:dc:bd:d5:c4:24:4b:bd:25:f3:ca:a3:9a:7e:67: 14:73:4b:ec:cc:7b:e5:04:fc:bd:34:8e:9d:c5:87: 8a:07:28:eb:78:c1:f5:d3:15:2e:08:a5:1f:e7:82: 08:3c:44:f1:b3:56:ce:0e:39:9c:b5:d4:fe:ec:d9: 8b:4e:cb:d0:66:94:fb:1b:36:59:d7:32:fc:da:41: 1f:d5:4e:09:b1:58:1d:90:4c:ed:ef:ae:74:9e:a9: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A6:A9:BE:7B:70:7A:A2:26:58:17:80:16:B2:F3:56:4F:D2:B6:7A X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ed:86:75:20:c6:75:33:c0:ac:6e:70:cb:b3:01:53:d5:4c: d5:9b:3e:9f:e9:67:74:52:30:2e:60:d5:4f:16:a7:a6:38:7b: 6d:95:64:12:df:d2:fe:8e:3a:ba:35:4a:42:50:de:1b:56:57: 68:a0:a2:64:1e:04:8d:c3:b9:0b:82:17:3f:ee:08:3a:ad:2d: d6:a4:05:9f:a9:1c:b6:50:32:52:ba:4c:6b:09:c2:77:38:73: f1:29:e2:72:94:77:9b:f5:da:3a:70:6d:fd:c4:0a:ed:e0:e5: 95:ac:15:f0:b8:14:58:c9:fa:c8:45:eb:08:44:be:af:e0:9a: 5d:03:8d:1c:67:c5:d3:08:77:c5:e6:b4:87:cf:bb:40:3f:0d: 6b:26:34:e4:2b:43:85:e6:f6:ff:84:2e:bd:97:07:9f:6b:5d: cf:d1:88:24:6a:41:85:37:c0:15:27:9a:a7:ef:45:63:50:0e: 68:59:25:1b:90:2b:36:2f:67:39:e0:f0:eb:53:da:b8:1a:aa: 46:70:c3:8e:80:73:a1:e0:d0:5a:da:1a:c6:20:80:7d:18:99: c7:0e:82:2b:09:22:e6:4b:14:58:1d:ff:e2:c5:a2:11:e5:f9: 88:1c:85:5c:15:51:d8:8e:a5:84:9c:64:d2:65:32:c0:d6:8c: ca:dc:47:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwOTEwMTY0NjA2WhcNMjYwOTE3MTY0NjA2WjAYMRYwFAYD VQQDEw02YWEyZGVjZS02MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzDENYtu7vaRPQmPpxHrrXNXjNPzyX6cSeLFV2JKAgUyQhlhxwiVqfLqbemu XRz2WvqKbtNpVKTuhgUC7BBnOWAoO7Ew1UW1YUpiQgluilWVTkIt/ZeTkSyEFoc9 FTg8+wvJVIyGrY3ECY+INBMhzA1k9aXhKwkKykDTVdqPvq5gK4mbm89R2QG3CkVx nnOHZ7T/rpwCAOA3l5In7FFbnrC/1YB/3L3VxCRLvSXzyqOafmcUc0vszHvlBPy9 NI6dxYeKByjreMH10xUuCKUf54IIPETxs1bODjmctdT+7NmLTsvQZpT7GzZZ1zL8 2kEf1U4JsVgdkEzt7650nqk6sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSmqb57 cHqiJlgXgBay81ZP0rZ6MB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkO2GdSDGdTPArG5wy7MBU9VM1Zs+n+lndFIwLmDVTxanpjh7bZVkEt/S/o46 ujVKQlDeG1ZXaKCiZB4EjcO5C4IXP+4IOq0t1qQFn6kctlAyUrpMawnCdzhz8Sni cpR3m/XaOnBt/cQK7eDllawV8LgUWMn6yEXrCES+r+CaXQONHGfF0wh3xea0h8+7 QD8NayY05CtDheb2/4QuvZcHn2tdz9GIJGpBhTfAFSeap+9FY1AOaFklG5ArNi9n OeDw61PauBqqRnDDjoBzoeDQWtoaxiCAfRiZxw6CKwki5ksUWB3/4sWiEeX5iByF XBVR2I6lhJxk0mUywNaMytxHdA== -----END CERTIFICATE-----Generated at Fri Sep 11 01:11:41 2026 by rpki-client