$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: +uHOQOHUKJM3Q2q1rTX6W9pZYoyDQPCT4D+Hd25zso8= Subject key identifier: D1:CF:70:5F:82:ED:6B:0C:48:2B:AD:05:B7:ED:B9:07:9C:D0:B2:E2 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1216 Signing time: Thu 08 Oct 2026 17:12:05 +0000 Manifest this update: Thu 08 Oct 2026 17:12:04 +0000 Manifest next update: Thu 15 Oct 2026 17:12:04 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: 3LpRbyluXa1OuvSodd0QBAdow6sl5+eJ9tRl2NdJahE=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Oct 8 17:12:04 2026 GMT Not After : Oct 15 17:12:04 2026 GMT Subject: CN=6ac7cee5-c2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:5d:9d:09:58:49:52:0b:ed:2e:c6:be:ea: 68:2c:a9:82:22:8c:b2:05:d0:46:a1:a3:20:8b:c4: 0e:ec:31:82:95:a0:10:2b:7d:22:3c:a6:06:a1:b6: 3e:ef:fa:45:8d:d2:59:4b:e1:d2:23:0a:19:7a:b8: d5:bd:53:d2:e1:c5:84:ef:3d:94:49:3b:4e:f0:19: d2:da:d9:ac:1c:ee:c7:92:dc:e6:0f:85:42:01:1c: 6f:db:a8:fd:81:a3:3d:c9:bc:89:b8:da:5c:57:4b: 20:bd:0f:d1:38:a7:14:d4:16:5c:f8:14:dd:13:60: 28:46:aa:c2:36:8a:35:c8:46:6a:c5:c5:d2:4c:ed: 93:5a:93:14:3a:2e:7d:23:1a:04:42:68:b5:7d:f3: 81:f1:32:98:87:dd:ad:9b:ec:e4:8c:ee:92:e9:07: 15:99:b1:92:ab:41:2d:6a:db:5e:4b:16:4a:a6:1e: 5f:0f:c0:1c:a4:f3:0c:47:59:52:86:73:6f:3e:f6: 2b:91:ef:92:55:48:52:41:50:cf:e1:08:a8:6b:7d: 53:ee:b8:f0:1e:2b:38:67:45:6e:ae:bb:8a:18:22: 11:dd:2a:c5:08:2d:5c:e4:24:f3:33:cc:de:e7:66: 5a:62:55:bc:e3:88:4d:40:34:06:7e:c1:3f:94:85: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:70:5F:82:ED:6B:0C:48:2B:AD:05:B7:ED:B9:07:9C:D0:B2:E2 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0b:9e:2e:b4:b2:f5:98:ce:d9:be:84:78:48:ed:98:08:a4: 35:8c:a1:ff:04:5b:49:b8:8c:00:ce:fa:50:d9:f6:6d:7a:2c: 8b:b1:03:79:d2:0d:87:17:13:64:4e:85:fd:b7:ae:78:eb:5f: bc:32:57:4f:3a:7f:6a:27:76:4a:93:4b:2a:53:3d:22:c7:9d: 61:c5:24:64:70:ee:b2:be:ec:d1:84:51:8b:fc:de:33:00:3b: d3:92:1b:27:d5:02:8e:ea:28:a5:14:20:76:33:3c:bf:26:0e: dd:eb:7b:ef:3b:56:19:aa:5d:5d:88:7d:38:d2:9c:4b:b3:c9: 07:69:89:9f:31:58:fe:ac:d7:0e:93:90:82:c7:a7:25:3f:b7: 3f:71:d0:90:62:ed:26:5d:20:31:6b:70:09:58:46:44:d1:d6: 99:e0:60:05:4d:8b:39:37:92:6d:e9:00:40:ff:2f:41:d8:3f: 2b:39:8a:24:22:94:90:ba:eb:44:ea:63:41:84:12:e5:eb:70: 9e:23:46:94:4b:c9:06:2e:77:87:3b:3a:e3:54:9c:fc:5e:aa: 14:f1:e9:fa:36:b4:6d:2d:f7:ab:9b:fa:86:97:e0:33:7f:ed: 31:1b:ab:0c:b1:cc:09:68:aa:7b:95:6f:b0:b8:58:77:3d:4c: a6:6b:52:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYxMDA4MTcxMjA0WhcNMjYxMDE1MTcxMjA0WjAYMRYwFAYD VQQDEw02YWM3Y2VlNS1jMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh9dnQlYSVIL7S7GvupoLKmCIoyyBdBGoaMgi8QO7DGClaAQK30iPKYGobY+ 7/pFjdJZS+HSIwoZerjVvVPS4cWE7z2USTtO8BnS2tmsHO7HktzmD4VCARxv26j9 gaM9ybyJuNpcV0sgvQ/ROKcU1BZc+BTdE2AoRqrCNoo1yEZqxcXSTO2TWpMUOi59 IxoEQmi1ffOB8TKYh92tm+zkjO6S6QcVmbGSq0EtatteSxZKph5fD8AcpPMMR1lS hnNvPvYrke+SVUhSQVDP4Qioa31T7rjwHis4Z0VurruKGCIR3SrFCC1c5CTzM8ze 52ZaYlW844hNQDQGfsE/lIUfMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHPcF+C 7WsMSCutBbftuQec0LLiMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGwueLrSy9ZjO2b6EeEjtmAikNYyh/wRbSbiMAM76UNn2bXosi7EDedINhxcT ZE6F/beueOtfvDJXTzp/aid2SpNLKlM9IsedYcUkZHDusr7s0YRRi/zeMwA705Ib J9UCjuoopRQgdjM8vyYO3et77ztWGapdXYh9ONKcS7PJB2mJnzFY/qzXDpOQgsen JT+3P3HQkGLtJl0gMWtwCVhGRNHWmeBgBU2LOTeSbekAQP8vQdg/KzmKJCKUkLrr ROpjQYQS5etwniNGlEvJBi53hzs641Sc/F6qFPHp+ja0bS33q5v6hpfgM3/tMRur DLHMCWiqe5VvsLhYdz1MpmtS8w== -----END CERTIFICATE-----Generated at Fri Oct 9 02:13:34 2026 by rpki-client