$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: xHnLXx8gnsZnmp9baz4Wy1SQE8JiwF60zF9yNEs1uL8= Subject key identifier: 89:A8:20:9E:85:0D:1A:F1:68:80:C8:3C:4C:6D:B3:17:D4:4C:13:35 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 02A6 Signing time: Fri 09 Oct 2026 02:00:58 +0000 Manifest this update: Fri 09 Oct 2026 02:00:58 +0000 Manifest next update: Fri 16 Oct 2026 02:00:58 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: UYjQf7X67A1UiyyhGw1gk+hGKbpXP8Pzk+ebTBrzQFI=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: 0tGrUYawd9sMWVYCt8qeQNs8Dy+OY7IGn4NZ/aaWN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Oct 9 02:00:58 2026 GMT Not After : Oct 16 02:00:58 2026 GMT Subject: CN=6ac84ada-9b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:80:ab:ef:cb:1b:a5:6a:b7:7c:fc:25:bc: 4d:de:81:00:3a:7f:e6:db:50:0c:89:59:49:9f:4c: 9d:4f:60:cf:ed:c8:13:d8:65:10:e0:23:28:7b:8d: a5:7d:6d:75:42:55:ac:23:6f:52:e6:2c:a6:a6:af: 6a:25:e6:f1:1e:36:8e:df:49:66:48:2c:2c:65:74: 60:11:1c:a6:40:1f:a1:c3:24:8a:95:1f:a9:47:c3: 13:77:cf:c4:e0:ad:8b:9a:6e:2b:ca:90:6c:d8:f3: 6f:88:71:e2:02:17:59:37:93:86:49:40:05:7b:a9: a9:94:16:fa:df:a3:e0:77:29:9e:7e:21:77:47:53: 59:f3:fe:29:01:2b:27:0f:36:6e:a9:98:64:4a:c7: bb:05:45:f4:ee:bb:4e:60:a0:2f:43:0a:39:58:94: 64:67:57:08:5a:0b:9d:0d:46:5c:c9:7e:bb:01:25: 1f:32:0d:c3:9e:ab:58:f2:5c:59:95:91:16:71:bb: f3:12:04:bf:e1:e9:80:44:2c:91:b4:4b:95:a9:fb: ca:64:8e:fb:ab:55:a2:4a:38:6d:a4:e7:54:a1:70: d7:05:7e:9a:c7:9a:4c:23:9f:2a:22:70:2c:e2:73: 05:a1:0c:47:f3:eb:5a:e3:8f:11:3b:25:d7:50:97: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:20:9E:85:0D:1A:F1:68:80:C8:3C:4C:6D:B3:17:D4:4C:13:35 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3e:f9:9d:c4:71:c0:dc:f1:9a:61:8d:37:1a:30:ef:e0:59: 0f:1b:c8:51:38:d5:5a:cd:4b:33:38:b8:a4:60:9d:c3:32:c9: 62:45:e9:4d:fd:48:09:7c:ba:35:11:bf:19:7e:c4:f8:85:f0: f6:9d:87:0b:96:6a:90:3d:ce:68:c8:de:eb:10:e1:eb:00:be: 6a:04:26:2d:c2:6d:87:0d:58:a0:72:0a:71:e5:07:84:ef:ea: 43:78:5b:86:57:cf:30:03:32:ae:30:79:c7:59:68:fd:ba:b8: 03:44:58:86:fa:ac:d1:4f:19:f1:0e:71:26:93:df:c7:1c:83: c8:61:63:35:d7:26:35:bd:57:78:98:03:84:8b:b1:48:6b:f9: 39:3c:b1:24:41:77:6c:f8:40:17:de:ff:97:50:82:57:85:51: 3d:db:43:5b:3d:66:ce:7c:bb:29:2b:75:20:aa:8e:87:b6:05: bf:a1:5f:c9:33:d1:68:95:9d:a2:50:04:1d:b0:a4:af:ae:b1: 2e:26:2e:3a:7c:c7:d9:cc:0f:d0:45:ed:a4:c3:3b:56:e7:0b: 57:fe:97:03:84:47:ae:10:ab:0f:18:08:10:64:3a:59:61:79: df:49:11:03:cd:0d:99:c0:cc:93:e6:1d:47:4e:c5:04:6a:cc: a7:0a:9a:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjYxMDA5MDIwMDU4WhcNMjYxMDE2MDIwMDU4WjAYMRYwFAYD VQQDEw02YWM4NGFkYS05YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfqAq+/LG6Vqt3z8JbxN3oEAOn/m21AMiVlJn0ydT2DP7cgT2GUQ4CMoe42l fW11QlWsI29S5iympq9qJebxHjaO30lmSCwsZXRgERymQB+hwySKlR+pR8MTd8/E 4K2Lmm4rypBs2PNviHHiAhdZN5OGSUAFe6mplBb636PgdymefiF3R1NZ8/4pASsn DzZuqZhkSse7BUX07rtOYKAvQwo5WJRkZ1cIWgudDUZcyX67ASUfMg3DnqtY8lxZ lZEWcbvzEgS/4emARCyRtEuVqfvKZI77q1WiSjhtpOdUoXDXBX6ax5pMI58qInAs 4nMFoQxH8+ta448ROyXXUJdjtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImoIJ6F DRrxaIDIPExtsxfUTBM1MB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABT75ncRxwNzxmmGNNxow7+BZDxvIUTjVWs1LMzi4pGCdwzLJYkXpTf1ICXy6 NRG/GX7E+IXw9p2HC5ZqkD3OaMje6xDh6wC+agQmLcJthw1YoHIKceUHhO/qQ3hb hlfPMAMyrjB5x1lo/bq4A0RYhvqs0U8Z8Q5xJpPfxxyDyGFjNdcmNb1XeJgDhIux SGv5OTyxJEF3bPhAF97/l1CCV4VRPdtDWz1mzny7KSt1IKqOh7YFv6FfyTPRaJWd olAEHbCkr66xLiYuOnzH2cwP0EXtpMM7VucLV/6XA4RHrhCrDxgIEGQ6WWF530kR A80NmcDMk+YdR07FBGrMpwqaMA== -----END CERTIFICATE-----Generated at Fri Oct 9 20:29:07 2026 by rpki-client