$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: S+zoViMpR1lg3hVU2eXnZlSjvUAMCPN23FglxsAmiy4= Subject key identifier: FD:CD:AC:0E:0C:D2:39:6C:DA:6B:F3:C7:D5:44:7D:FE:6E:E8:C5:FA Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0248 Signing time: Wed 07 Oct 2026 02:57:27 +0000 Manifest this update: Wed 07 Oct 2026 02:57:26 +0000 Manifest next update: Wed 14 Oct 2026 02:57:26 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: +1bP6sXE4GKeKTeF2CbSqlLvXnGIS1yW3giTOu+hKQ4=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Oct 7 02:57:26 2026 GMT Not After : Oct 14 02:57:26 2026 GMT Subject: CN=6ac5b517-68b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:e2:c8:62:d8:c2:dc:1b:db:5a:c0:36:99: 20:4e:94:8f:46:e6:06:cf:da:02:ba:79:75:fb:c8: b7:d3:53:5e:00:79:60:e8:06:d0:06:f2:2f:ae:90: 90:49:07:48:84:1c:e3:f7:1a:a5:93:8c:94:62:b4: 54:b0:38:2e:92:5b:de:0b:0c:8f:3a:9a:66:f2:90: 06:66:bc:83:01:57:2b:ac:be:ef:89:21:fb:b3:de: 01:2e:43:75:5e:69:04:e8:e3:45:e5:5d:50:ff:df: d2:f1:00:bf:92:f0:6f:be:98:7e:11:8a:5d:e2:51: 64:48:f2:e3:39:ca:3b:63:04:6c:01:9a:30:47:24: 63:59:83:b5:00:3a:0a:16:fb:c4:62:41:c6:60:d5: 5e:e9:a4:51:83:4c:27:c7:9c:25:bf:09:e0:1d:e7: 1b:5a:03:bc:86:94:b5:c6:13:b6:7a:5c:04:8a:94: 12:0c:af:ce:99:df:30:92:c1:b1:8c:6c:48:57:92: 98:6c:45:95:8e:d7:f7:6a:9e:db:8d:ac:e7:41:3a: 70:61:b8:74:48:f9:93:07:59:31:46:9c:8f:e7:ce: e3:9b:93:a8:c5:48:58:0e:af:43:0e:72:fa:75:e7: b8:44:86:6e:31:79:ad:08:94:df:33:14:15:22:3f: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:AC:0E:0C:D2:39:6C:DA:6B:F3:C7:D5:44:7D:FE:6E:E8:C5:FA X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3a:90:29:e4:93:23:2e:28:69:cf:5f:c0:3d:4c:af:eb:9c: c6:62:75:ea:03:b9:8c:35:cc:15:56:4d:ad:b2:56:ba:86:70: 8b:44:4f:91:f8:7c:39:93:42:2d:38:eb:f9:52:53:ed:68:c6: 25:96:d1:1a:3d:e9:8c:a2:5e:fb:91:de:e7:6d:7d:8f:18:2f: 2e:51:2c:2a:fc:ed:ac:b6:4b:e5:5c:22:2d:ee:54:b6:82:72: eb:b9:44:2c:6e:6a:72:4c:6b:58:81:dd:a5:b6:03:07:fc:02: 7c:83:4e:6b:1b:5c:08:1a:15:ca:6c:c9:b8:53:75:99:57:d6: f5:53:07:dd:20:b0:63:47:4a:62:03:79:b7:68:f4:45:23:21: bb:0f:4c:db:93:2d:8d:be:d2:7f:8b:15:91:1d:00:4f:46:1e: c9:54:fb:f5:1a:90:cd:60:57:e6:0b:ef:91:bd:46:cb:2e:b2: cf:0a:4e:d7:87:37:ce:53:86:cb:d4:83:fc:f7:0c:53:65:79: 1d:db:b2:40:e4:6f:fe:6f:3a:89:68:52:10:c1:6c:41:4d:19: 6f:c0:4a:06:fd:d6:63:a3:ad:b2:c7:7a:10:30:3b:fc:f9:b7: a7:b0:5e:84:70:36:77:ad:5b:fe:39:56:c7:d6:f3:e4:7e:89: 8e:c6:15:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYxMDA3MDI1NzI2WhcNMjYxMDE0MDI1NzI2WjAYMRYwFAYD VQQDEw02YWM1YjUxNy02OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+LiyGLYwtwb21rANpkgTpSPRuYGz9oCunl1+8i301NeAHlg6AbQBvIvrpCQ SQdIhBzj9xqlk4yUYrRUsDguklveCwyPOppm8pAGZryDAVcrrL7viSH7s94BLkN1 XmkE6ONF5V1Q/9/S8QC/kvBvvph+EYpd4lFkSPLjOco7YwRsAZowRyRjWYO1ADoK FvvEYkHGYNVe6aRRg0wnx5wlvwngHecbWgO8hpS1xhO2elwEipQSDK/Omd8wksGx jGxIV5KYbEWVjtf3ap7bjaznQTpwYbh0SPmTB1kxRpyP587jm5OoxUhYDq9DDnL6 dee4RIZuMXmtCJTfMxQVIj86PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3NrA4M 0jls2mvzx9VEff5u6MX6MB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuzqQKeSTIy4oac9fwD1Mr+ucxmJ16gO5jDXMFVZNrbJWuoZwi0RPkfh8OZNC LTjr+VJT7WjGJZbRGj3pjKJe+5He5219jxgvLlEsKvztrLZL5VwiLe5UtoJy67lE LG5qckxrWIHdpbYDB/wCfINOaxtcCBoVymzJuFN1mVfW9VMH3SCwY0dKYgN5t2j0 RSMhuw9M25Mtjb7Sf4sVkR0AT0YeyVT79RqQzWBX5gvvkb1Gyy6yzwpO14c3zlOG y9SD/PcMU2V5HduyQORv/m86iWhSEMFsQU0Zb8BKBv3WY6Otssd6EDA7/Pm3p7Be hHA2d61b/jlWx9bz5H6JjsYVWQ== -----END CERTIFICATE-----Generated at Thu Oct 8 04:06:24 2026 by rpki-client