$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: IS/9V+4rusxyMJRE8xtQYY5z2hFXAVv/awcVhggtGkg= Subject key identifier: A4:CB:FC:18:8B:E1:03:33:C9:04:D3:C5:8C:DE:5D:C1:51:20:2E:CA Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 022F Signing time: Wed 19 Aug 2026 03:19:43 +0000 Manifest this update: Wed 19 Aug 2026 03:19:43 +0000 Manifest next update: Wed 26 Aug 2026 03:19:43 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: pvjuE47abhH/i+96JoKe+foHG+NvgjPFNTO68WTHljs=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Aug 19 03:19:43 2026 GMT Not After : Aug 26 03:19:43 2026 GMT Subject: CN=6a8520cf-e712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:6e:e2:88:11:d7:c4:cf:d7:f9:47:c0:06: 98:18:ba:7a:c8:46:96:6f:0c:fc:be:3d:0b:eb:1d: d8:97:4b:c4:0e:b9:ba:e3:ef:3c:a1:6f:7a:58:d8: ca:92:8b:07:7e:80:8e:f2:b3:88:81:04:4b:fd:91: 27:fa:33:19:e6:03:a0:ea:36:d3:41:91:eb:d1:a2: 4c:a4:17:a1:c7:59:67:51:b1:23:c6:22:1b:b8:7d: e7:54:20:6e:c3:ad:38:21:58:e8:3f:f8:f7:78:b7: 4b:d4:0d:76:51:04:63:76:0b:fe:12:a8:96:45:8f: 79:1f:fa:62:0b:7a:d4:53:11:c4:23:a4:c6:64:16: 17:ab:48:e2:f3:24:e8:95:5f:fe:41:42:82:70:a7: 6d:79:6e:89:56:d8:d4:b2:4b:a8:9c:0b:5e:90:e5: 0a:cf:ce:c2:f1:fc:78:46:a0:f6:9f:5e:fe:90:cd: c7:e4:4b:56:83:73:da:5d:6e:ae:1f:cd:3c:20:06: 34:4e:08:d5:ad:eb:53:b3:71:26:dc:39:51:72:be: 7e:c6:ba:d9:ca:b0:95:8d:87:9c:8a:d9:0b:32:53: f0:a0:19:44:9a:04:7d:70:a8:cc:8c:5e:d6:73:2c: ca:05:e1:96:32:5c:d0:ed:48:3c:61:0b:85:08:60: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:FC:18:8B:E1:03:33:C9:04:D3:C5:8C:DE:5D:C1:51:20:2E:CA X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:7b:31:ce:c0:34:86:91:c4:d4:84:4e:b5:41:5e:e1:26: d3:d5:d0:36:7e:49:ae:98:5e:0a:9c:14:f0:80:11:78:98:56: 9d:93:cf:a7:cf:5c:5e:e0:4a:b1:bc:5f:ce:3e:fa:f1:65:15: 84:4f:17:74:03:b6:b0:5f:18:d5:8f:59:e4:80:8e:2c:cd:bb: 86:83:c4:b0:f9:4d:b8:91:e9:a9:49:98:db:af:2c:f8:50:a2: 89:4f:15:13:97:29:59:d0:17:47:e4:2c:21:67:79:44:c9:2a: 4b:46:70:00:c0:3a:35:1f:58:48:a2:87:f0:68:a8:85:2b:09: d0:97:09:56:2f:1c:90:4b:23:7a:99:13:f9:b7:d5:53:53:5f: f3:d3:21:d3:cd:42:1b:9d:d9:cd:b6:3f:91:f7:23:ba:ea:9a: 20:7c:1e:9f:21:85:97:29:c6:0b:40:80:04:e8:7f:5c:fb:a2: 00:4b:c7:b9:a8:93:10:29:87:94:54:c9:2d:36:59:e1:5f:99: 78:02:c3:77:58:fd:03:2d:95:95:18:14:a8:dd:c7:32:97:26: 7d:da:db:8f:39:90:95:5c:90:3a:5e:ff:6b:f7:73:c9:2b:49: 38:b9:c2:91:85:24:0b:d7:9d:75:8f:2b:23:57:fa:ab:8f:4b: 66:b1:23:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwODE5MDMxOTQzWhcNMjYwODI2MDMxOTQzWjAYMRYwFAYD VQQDEw02YTg1MjBjZi1lNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/Nu4ogR18TP1/lHwAaYGLp6yEaWbwz8vj0L6x3Yl0vEDrm64+88oW96WNjK kosHfoCO8rOIgQRL/ZEn+jMZ5gOg6jbTQZHr0aJMpBehx1lnUbEjxiIbuH3nVCBu w604IVjoP/j3eLdL1A12UQRjdgv+EqiWRY95H/piC3rUUxHEI6TGZBYXq0ji8yTo lV/+QUKCcKdteW6JVtjUskuonAtekOUKz87C8fx4RqD2n17+kM3H5EtWg3PaXW6u H808IAY0TgjVretTs3Em3DlRcr5+xrrZyrCVjYecitkLMlPwoBlEmgR9cKjMjF7W cyzKBeGWMlzQ7Ug8YQuFCGDmzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTL/BiL 4QMzyQTTxYzeXcFRIC7KMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkC17Mc7ANIaRxNSETrVBXuEm09XQNn5JrpheCpwU8IAReJhWnZPPp89cXuBK sbxfzj768WUVhE8XdAO2sF8Y1Y9Z5ICOLM27hoPEsPlNuJHpqUmY268s+FCiiU8V E5cpWdAXR+QsIWd5RMkqS0ZwAMA6NR9YSKKH8GiohSsJ0JcJVi8ckEsjepkT+bfV U1Nf89Mh081CG53ZzbY/kfcjuuqaIHwenyGFlynGC0CABOh/XPuiAEvHuaiTECmH lFTJLTZZ4V+ZeALDd1j9Ay2VlRgUqN3HMpcmfdrbjzmQlVyQOl7/a/dzyStJOLnC kYUkC9eddY8rI1f6q49LZrEj2g== -----END CERTIFICATE-----Generated at Wed Aug 19 13:41:50 2026 by rpki-client