$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft File: ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json) Hash identifier: 7n6W5ZVkyhpAtoILAj+XT2jmmXKaoj3qMgiwxoo927U= Subject key identifier: AE:62:36:4E:7F:37:B8:53:5D:D0:77:87:B0:76:FC:59:48:4C:88:63 Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D Certificate issuer: /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft Manifest number: D8 Signing time: Thu 03 Sep 2026 06:50:53 +0000 Manifest this update: Thu 03 Sep 2026 06:50:53 +0000 Manifest next update: Thu 10 Sep 2026 06:50:53 +0000 Files and hashes: 1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: eFSf71UGO3EUh30zQBOwo2/qPNHF4PmPy8/zeErt5u4=) 2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 3eyoBtxWZnVo9d8QTWGg5n0zVCETmWq673Im+Ia8NGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D Validity Not Before: Sep 3 06:50:53 2026 GMT Not After : Sep 10 06:50:53 2026 GMT Subject: CN=6a9918cd-4499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:cc:5c:64:32:b8:3f:a1:cb:11:e5:c3:63: 9e:9a:d4:4d:f4:9b:8b:06:a7:9e:61:1a:b5:c3:c3: 3f:f0:26:af:20:c7:32:d8:48:00:8e:5d:50:f3:4d: fe:68:fa:03:c5:70:82:72:8b:31:08:04:06:16:4a: 1d:74:80:8d:74:a7:c8:11:08:20:eb:28:eb:00:bc: 2c:8f:b0:d4:8f:4b:4c:04:d4:06:e4:45:5b:f5:bb: 56:a8:60:c7:bc:8c:55:9f:69:b3:07:8d:64:4f:a5: f3:36:a3:fa:19:50:14:a3:92:0c:5f:bf:a4:b7:85: f0:3e:5b:a5:f0:da:d1:ad:49:68:7e:c8:73:54:fc: c3:49:d5:66:84:90:85:04:1e:e9:96:b4:f4:25:86: c0:cc:32:11:b3:bb:1e:6a:c3:e7:c7:6f:8c:ca:87: 99:a3:df:94:fb:11:17:17:58:5e:0d:35:8b:12:0d: ab:12:10:60:58:12:a3:d2:1f:df:5a:e4:65:d8:b4: 6c:ab:0a:94:b4:d2:5f:8d:70:c0:74:0c:cf:93:c9: 14:e2:3e:38:e0:a4:b7:5a:fa:95:30:af:b1:7f:27: 63:0b:87:17:70:e0:91:44:aa:ab:fb:61:0d:b3:3a: 3c:f7:07:eb:79:96:b3:e1:b1:c7:07:bd:5c:34:70: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:62:36:4E:7F:37:B8:53:5D:D0:77:87:B0:76:FC:59:48:4C:88:63 X509v3 Authority Key Identifier: keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:64:65:af:d0:ff:56:d9:7d:f4:cb:7d:53:86:5f:1a:18:58: 48:2b:aa:ec:9d:db:1c:97:ca:f2:9c:b0:04:b0:78:05:38:09: ca:b3:8f:ba:c1:f6:e8:20:6a:a3:ae:f9:bc:fd:5f:a6:e9:0d: 4d:aa:50:b8:8f:07:b7:d0:09:2a:95:d0:ad:73:50:4d:bc:e4: cb:73:d4:60:ef:44:55:1f:e2:94:16:1f:5c:0e:cb:4b:92:bb: 15:b5:f6:cb:d9:4d:18:22:f9:dd:72:02:0d:e9:65:b5:76:3c: bb:9e:32:ae:5e:92:a9:28:1a:17:20:4b:d0:29:3b:c3:9a:ab: 87:a6:37:e1:eb:87:d1:ae:bb:c2:0d:37:b2:10:80:e6:a8:ac: a4:0b:75:34:39:97:9d:1e:2c:cb:c2:96:2f:62:6a:a2:4a:40: 72:37:dd:98:b4:ff:e7:a0:3d:02:94:c2:a1:fc:29:62:d5:ab: ce:5c:13:40:92:eb:59:30:b9:50:78:88:75:ac:0f:7c:46:02: cd:9d:9e:58:62:60:c8:77:92:65:78:91:c4:2d:65:f4:26:41: e3:88:dd:31:bf:f2:d1:1f:ef:07:57:25:ab:e1:12:59:be:30: d8:53:a8:bb:02:e4:b9:10:96:76:5a:89:45:90:25:25:97:cf: 3f:41:54:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDY0N0U1Q0FEQ0IxRkJGN0VCQjg5OUE3MjE5QzNBMEYw M0QzRjdCMEQwHhcNMjYwOTAzMDY1MDUzWhcNMjYwOTEwMDY1MDUzWjAYMRYwFAYD VQQDEw02YTk5MThjZC00NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJLMXGQyuD+hyxHlw2OemtRN9JuLBqeeYRq1w8M/8CavIMcy2EgAjl1Q803+ aPoDxXCCcosxCAQGFkoddICNdKfIEQgg6yjrALwsj7DUj0tMBNQG5EVb9btWqGDH vIxVn2mzB41kT6XzNqP6GVAUo5IMX7+kt4XwPlul8NrRrUlofshzVPzDSdVmhJCF BB7plrT0JYbAzDIRs7seasPnx2+MyoeZo9+U+xEXF1heDTWLEg2rEhBgWBKj0h/f WuRl2LRsqwqUtNJfjXDAdAzPk8kU4j444KS3WvqVMK+xfydjC4cXcOCRRKqr+2EN szo89wfreZaz4bHHB71cNHC+nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5iNk5/ N7hTXdB3h7B2/FlITIhjMB8GA1UdIwQYMBaAFGR+XK3LH79+u4machnDoPA9P3sN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS85MDRGODcwQTYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYzNjdpWnB5R2NPZzhEMF9l dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINWNyY3NmdjM2N2lacHlHY09nOEQwX2V3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS85MDRGODcwQTYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9aSDVjcmNzZnYz NjdpWnB5R2NPZzhEMF9ldzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeWRlr9D/Vtl99Mt9U4ZfGhhYSCuq7J3bHJfK8pywBLB4BTgJyrOPusH26CBq o675vP1fpukNTapQuI8Ht9AJKpXQrXNQTbzky3PUYO9EVR/ilBYfXA7LS5K7FbX2 y9lNGCL53XICDelltXY8u54yrl6SqSgaFyBL0Ck7w5qrh6Y34euH0a67wg03shCA 5qispAt1NDmXnR4sy8KWL2JqokpAcjfdmLT/56A9ApTCofwpYtWrzlwTQJLrWTC5 UHiIdawPfEYCzZ2eWGJgyHeSZXiRxC1l9CZB44jdMb/y0R/vB1clq+ESWb4w2FOo uwLkuRCWdlqJRZAlJZfPP0FUjg== -----END CERTIFICATE-----Generated at Fri Sep 4 01:43:59 2026 by rpki-client