$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft File: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft (raw, json) Hash identifier: GqCpt+xUTSrS+cwypztzEMV8rcO1GvvuJmkESd7xci0= Subject key identifier: B8:BD:6E:57:1B:85:8B:3A:E9:DD:A0:E8:B5:90:FE:A8:D3:2E:55:53 Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE Certificate issuer: /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft Manifest number: 02AF Signing time: Sat 03 Oct 2026 02:15:59 +0000 Manifest this update: Sat 03 Oct 2026 02:15:59 +0000 Manifest next update: Sat 10 Oct 2026 02:15:59 +0000 Files and hashes: 1: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl (hash: oZKec9n5aIc/jh+Rg/k1OFXa7tH67jpgzRr8HkPhDn0=) 2: EEA88E78AD0C11F1A1B76E9C3C11F970.roa (hash: /b7wdkd1tUOXcTuWD0AJo9xrePpTHVqnq+j16rznxnk=) 3: 689F5D92AD0D11F1B7FCF9B63C11F970.roa (hash: LqFz+QpCHdb+FFI2JwU4umo63b3bsdSNGQqg9a9Guc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Validity Not Before: Oct 3 02:15:59 2026 GMT Not After : Oct 10 02:15:59 2026 GMT Subject: CN=6ac0655f-73ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:1f:64:e1:38:c0:5d:7d:a2:bf:e9:58:e5: 0c:c8:e4:9c:e0:87:b1:f5:b9:51:3c:fa:76:b5:b6: 29:2a:58:87:f2:2d:a6:97:4d:bc:8c:3d:79:48:a0: 30:b3:3a:93:57:66:e3:f7:6d:2f:93:fe:2c:75:40: 71:2f:00:b3:66:e5:e6:ec:a8:15:3b:d8:44:fa:d9: 31:65:c2:7f:2d:3a:8c:d9:55:f0:ff:98:f9:0c:00: f0:bf:9b:f4:2a:54:71:89:4f:89:09:20:d8:80:cd: 7c:af:5b:74:c4:fd:26:b2:dc:c2:11:3e:bd:33:06: 6f:95:3a:79:cc:36:57:68:ac:cd:0d:5f:36:e6:4f: 7e:f7:ff:4c:47:3b:31:9e:4c:a6:9f:c6:06:bf:8c: a7:2d:88:67:a4:68:ec:a3:bf:6c:4e:10:29:41:38: 49:a4:6b:e8:5d:22:49:c7:8e:b4:dc:c6:06:67:34: f4:22:52:37:ee:fe:75:15:27:2c:f7:ea:0e:ff:78: e8:f0:94:ad:df:10:4b:d1:b4:9a:87:ab:3f:b3:0d: 66:f2:2d:2e:1c:36:7c:a1:ec:9d:67:f5:34:a4:d5: 6c:56:c4:d5:0e:02:f8:b4:50:ed:a0:94:ac:1b:40: e6:91:95:43:f2:cb:eb:e1:93:cd:70:72:6b:91:4a: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:6E:57:1B:85:8B:3A:E9:DD:A0:E8:B5:90:FE:A8:D3:2E:55:53 X509v3 Authority Key Identifier: keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:23:97:fd:67:0c:fd:09:29:50:4b:f6:96:b6:33:2e:7f:b5: 2a:72:12:3a:68:1d:48:1c:83:d6:cf:eb:6b:9e:58:ec:f4:aa: 86:71:76:4a:a3:bc:7d:7a:b1:07:cc:da:cb:59:ff:98:3f:d6: 90:5f:07:d1:90:1a:7f:d5:c0:56:9f:55:49:86:67:df:c9:cc: 30:c4:3c:b8:c6:69:57:60:b4:4e:a3:7b:22:10:c6:bf:92:16: 54:d9:9a:0f:07:55:33:c4:42:5a:c6:67:e3:17:16:fb:26:d9: 0e:ab:a7:dd:b8:20:c8:fa:9a:e2:0a:0b:a1:fb:01:e8:f7:ce: 32:20:6d:73:ee:8c:9d:0d:8d:3b:5a:94:b2:25:6b:30:5f:9f: f8:9f:6b:20:57:2a:ad:ab:c4:d2:dd:fe:c7:19:75:b0:c8:4e: c9:73:ba:16:4f:16:b5:49:6c:a8:5d:52:31:b3:b7:95:c1:eb: d7:c2:c3:1d:b3:d5:a2:01:27:34:87:6a:f5:9e:79:32:c8:69: 73:01:9c:7d:8e:4d:b7:a8:ba:c2:3a:bf:29:f1:df:c6:be:45: 0f:2c:f5:ef:64:4c:4f:9a:b5:c7:8d:ab:5a:44:9f:56:bd:c5: b2:7e:f5:b4:33:a6:42:a9:ec:8b:ef:34:e8:6c:a6:fa:77:34: 37:a9:70:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjhEOTExMC8GA1UEBRMoNjczRDZDODE4NTU4OEIwQ0YwNjY3OUMzNTRGQkJEMEND QkJCNTRERTAeFw0yNjEwMDMwMjE1NTlaFw0yNjEwMTAwMjE1NTlaMBgxFjAUBgNV BAMTDTZhYzA2NTVmLTczYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCToB9k4TjAXX2iv+lY5QzI5Jzgh7H1uVE8+na1tikqWIfyLaaXTbyMPXlIoDCz OpNXZuP3bS+T/ix1QHEvALNm5ebsqBU72ET62TFlwn8tOozZVfD/mPkMAPC/m/Qq VHGJT4kJINiAzXyvW3TE/Say3MIRPr0zBm+VOnnMNldorM0NXzbmT373/0xHOzGe TKafxga/jKctiGekaOyjv2xOEClBOEmka+hdIknHjrTcxgZnNPQiUjfu/nUVJyz3 6g7/eOjwlK3fEEvRtJqHqz+zDWbyLS4cNnyh7J1n9TSk1WxWxNUOAvi0UO2glKwb QOaRlUPyy+vhk81wcmuRSs/RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuL1uVxuF izrp3aDotZD+qNMuVVMwHwYDVR0jBBgwFoAUZz1sgYVYiwzwZnnDVPu9DMu7VN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCOEQ5L0FGNUNEQjA0Qzcw ODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6d1pubkRWUHU5RE11N1ZO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnoxc2dZVllpd3p3Wm5uRFZQdTlETXU3Vk40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC OEQ5L0FGNUNEQjA0QzcwODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6 d1pubkRWUHU5RE11N1ZONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYI5f9Zwz9CSlQS/aWtjMuf7UqchI6aB1IHIPWz+trnljs9KqGcXZKo7x9erEH zNrLWf+YP9aQXwfRkBp/1cBWn1VJhmffycwwxDy4xmlXYLROo3siEMa/khZU2ZoP B1UzxEJaxmfjFxb7JtkOq6fduCDI+priCguh+wHo984yIG1z7oydDY07WpSyJWsw X5/4n2sgVyqtq8TS3f7HGXWwyE7Jc7oWTxa1SWyoXVIxs7eVwevXwsMds9WiASc0 h2r1nnkyyGlzAZx9jk23qLrCOr8p8d/GvkUPLPXvZExPmrXHjataRJ9WvcWyfvW0 M6ZCqeyL7zTobKb6dzQ3qXBG -----END CERTIFICATE-----Generated at Sun Oct 4 17:32:25 2026 by rpki-client