$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: +uQ8OIsM3+uTx9H35SyoikNl+8m9PTkM6pijc9mE+BM= Subject key identifier: 6E:EF:C7:43:0C:D5:8C:53:A7:26:7A:AB:9F:AE:6D:92:31:B1:85:BC Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0E02 Signing time: Sun 04 Oct 2026 17:53:21 +0000 Manifest this update: Sun 04 Oct 2026 17:53:20 +0000 Manifest next update: Sun 11 Oct 2026 17:53:20 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: LPqKSoiHyVaRKrWhMeAvu1PtilF3vmLuD4FF1GWyB0Q=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: DgN4HYG0Ge4rNgYzbp7pU5juBkf2LCQihGrPJdM6ERY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Oct 4 17:53:20 2026 GMT Not After : Oct 11 17:53:20 2026 GMT Subject: CN=6ac29291-4d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:b3:c2:48:da:9e:bb:06:e4:78:e1:78:4f: 0a:13:ce:a8:89:5a:4b:34:d0:98:fb:01:9e:70:ae: c4:0b:5a:47:91:40:1e:fa:f1:66:22:60:40:e1:49: 09:60:9d:83:3f:96:73:08:e0:64:fe:06:cc:e4:7e: 13:ab:e4:4c:a1:61:07:8c:36:47:96:4b:db:7c:fa: e9:3a:7a:6f:c1:a9:0e:ac:b2:79:15:88:d7:3c:3b: 44:32:e2:93:6b:d2:9c:f7:6d:ae:cb:9a:23:f9:f8: 1c:f0:a4:e9:9c:4a:74:80:01:25:f6:8f:38:d1:19: 11:3d:0a:d3:ae:88:df:f5:0d:d6:9f:c7:74:47:10: 9e:02:bc:bd:7c:fb:df:d2:d4:b7:21:69:a5:1c:76: 1e:77:42:a5:1e:6a:f1:0d:5e:cd:20:17:70:cc:dc: b0:be:d6:80:d3:9c:ad:c1:fd:c3:f8:7c:97:62:2c: 58:17:2f:a6:b8:4b:45:3d:ea:2e:5b:f3:53:5f:32: af:f7:0f:a3:6f:0d:8d:d8:cb:bf:f1:b3:52:ed:29: 7e:24:ab:de:60:3b:af:13:2f:8d:29:32:36:66:c3: af:be:e1:2a:59:a7:42:c9:44:2a:3c:22:5b:94:14: 73:85:6a:15:53:e4:c4:97:97:24:2d:61:83:00:09: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EF:C7:43:0C:D5:8C:53:A7:26:7A:AB:9F:AE:6D:92:31:B1:85:BC X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:dc:62:3d:a0:8a:06:90:9f:89:67:6d:6a:c3:ec:08:db:57: ad:c2:0f:30:8c:6c:e3:b5:77:c3:13:6f:16:b8:11:d4:e1:53: 7c:fd:e3:92:1d:30:2c:37:19:76:35:54:9d:d9:ea:23:ee:8a: 63:4a:24:63:59:09:69:9c:32:d9:bb:9d:c1:39:0b:be:78:0f: ee:03:96:79:84:58:d7:47:00:69:e8:21:bd:fd:5a:25:54:8e: d2:b2:9e:41:9a:48:43:b6:19:c7:9e:ba:7d:ae:2c:3c:c4:2a: e8:f3:26:a6:37:63:87:26:52:ae:a3:97:75:68:a3:02:ca:44: ba:a8:a2:eb:d4:bb:47:2b:86:62:f7:d6:7c:2f:c6:fc:f3:fe: fa:43:55:9d:4a:f8:d8:f4:39:4d:c4:c4:37:84:27:71:27:35: 7c:93:40:a9:b8:07:c0:73:15:ea:6c:7d:86:2f:ef:7b:22:5d: f3:6a:a0:82:41:c4:c2:17:b2:b7:05:b3:64:0d:a7:3e:29:90: 0a:e4:0d:0e:5f:1f:bb:9b:43:4a:c0:38:a4:e6:35:29:30:2f: b0:89:79:2c:1e:b2:24:ef:61:80:fe:3d:42:ae:0c:62:fe:c3: 18:4d:86:14:26:fc:e6:16:2e:b5:32:10:79:22:a3:79:10:7e: 1b:7a:d1:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYxMDA0MTc1MzIwWhcNMjYxMDExMTc1MzIwWjAYMRYwFAYD VQQDEw02YWMyOTI5MS00ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruqzwkjanrsG5HjheE8KE86oiVpLNNCY+wGecK7EC1pHkUAe+vFmImBA4UkJ YJ2DP5ZzCOBk/gbM5H4Tq+RMoWEHjDZHlkvbfPrpOnpvwakOrLJ5FYjXPDtEMuKT a9Kc922uy5oj+fgc8KTpnEp0gAEl9o840RkRPQrTrojf9Q3Wn8d0RxCeAry9fPvf 0tS3IWmlHHYed0KlHmrxDV7NIBdwzNywvtaA05ytwf3D+HyXYixYFy+muEtFPeou W/NTXzKv9w+jbw2N2Mu/8bNS7Sl+JKveYDuvEy+NKTI2ZsOvvuEqWadCyUQqPCJb lBRzhWoVU+TEl5ckLWGDAAmoKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7vx0MM 1YxTpyZ6q5+ubZIxsYW8MB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIdxiPaCKBpCfiWdtasPsCNtXrcIPMIxs47V3wxNvFrgR1OFTfP3jkh0wLDcZ djVUndnqI+6KY0okY1kJaZwy2budwTkLvngP7gOWeYRY10cAaeghvf1aJVSO0rKe QZpIQ7YZx566fa4sPMQq6PMmpjdjhyZSrqOXdWijAspEuqii69S7RyuGYvfWfC/G /PP++kNVnUr42PQ5TcTEN4QncSc1fJNAqbgHwHMV6mx9hi/veyJd82qggkHEwhey twWzZA2nPimQCuQNDl8fu5tDSsA4pOY1KTAvsIl5LB6yJO9hgP49Qq4MYv7DGE2G FCb85hYutTIQeSKjeRB+G3rR0g== -----END CERTIFICATE-----Generated at Mon Oct 5 06:42:27 2026 by rpki-client