$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: +sG1bXpaHjgXR9bZjHBJrAZZUAYFFzeZ+QXg1qTyWe8= Subject key identifier: 83:B8:61:2A:56:6D:16:34:8C:FE:81:67:85:02:72:66:73:B9:D8:FF Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: B2 Signing time: Tue 27 Oct 2026 07:25:24 +0000 Manifest this update: Tue 27 Oct 2026 07:25:23 +0000 Manifest next update: Tue 03 Nov 2026 07:25:23 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: chImPyDunT23O6LrclcIM29zTAqUC24zkDChtJaWI20=) 2: 275E04E80BB711F1A64B03C6263D8C67.roa (hash: 9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=) 3: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Oct 27 07:25:23 2026 GMT Not After : Nov 3 07:25:23 2026 GMT Subject: CN=6ae051e3-5e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:21:65:0d:2b:96:e0:77:d0:45:79:55:64: 49:4b:4c:6b:bb:d3:a8:3f:1a:a5:3d:72:dd:49:35: 36:68:b3:d6:52:84:db:49:94:a6:bf:6d:43:ad:97: d9:a9:05:3e:95:7b:fb:53:d9:4a:cc:0a:60:d6:49: 07:ea:dd:d3:7f:9e:2f:22:c0:0d:e8:38:2a:8f:dc: a9:4e:69:3c:0f:7a:87:0f:ca:a1:e1:11:3f:a5:32: ea:d0:1d:3e:93:db:c1:51:ab:5a:bd:90:23:a0:5d: b0:40:ce:c7:d0:06:9a:55:6c:3f:90:b1:1d:44:84: 3d:b6:02:f8:58:f9:91:47:9e:7d:e8:61:c3:67:3c: c5:0e:68:d8:34:66:9c:05:58:58:9a:94:50:09:2c: 2e:10:23:6e:a4:7c:3d:01:fb:84:14:ba:20:10:70: b8:bb:1c:8b:57:b2:93:33:2e:99:87:8c:51:33:be: 76:e0:1a:16:fb:0f:fb:44:eb:d9:8b:d7:67:16:dd: 08:a5:19:d8:91:10:0a:73:08:81:83:09:14:c0:0c: 17:80:e1:22:18:0a:69:1f:ff:36:42:dd:2e:44:8b: 7c:c6:fa:a7:f0:61:f8:13:dc:32:5d:60:0d:dd:57: 84:5c:5d:a4:e4:6b:e0:c2:a8:73:40:92:26:20:bb: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B8:61:2A:56:6D:16:34:8C:FE:81:67:85:02:72:66:73:B9:D8:FF X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:79:bc:a7:e7:d6:84:d7:8a:c3:52:6c:cb:2f:3d:91:56:ac: 5b:79:03:00:09:35:1f:78:48:3a:ef:dc:2e:d6:a4:2a:f1:8e: 29:8d:51:f7:ad:4c:a7:ce:0d:9e:8b:84:62:3e:a1:b7:dd:b8: 55:45:22:2a:c5:4a:a3:05:f0:d1:8b:b9:27:07:04:34:3a:e5: 46:c8:64:d4:1a:bd:9c:74:fa:52:ea:b8:25:4d:a4:75:8e:d9: 7f:88:69:46:d8:1c:f0:ae:00:4f:46:22:6d:4c:42:59:7c:ca: 5d:e8:79:6e:b3:9e:6c:a8:4f:04:17:9e:79:82:88:b6:03:f0: f9:fc:0f:a3:6c:3c:ce:c8:4d:da:b3:16:de:81:cb:9c:fa:f3: b3:1c:05:09:5a:45:ec:22:fc:c9:24:4d:b5:3d:64:5e:59:33: 2c:68:1c:2d:a5:41:22:2a:05:4f:fa:c0:97:c5:9c:b5:fc:b5: ad:dd:16:58:d4:54:96:9b:0e:bf:67:f0:bd:af:e6:93:ad:99: e4:a6:3e:70:a3:88:6d:5a:96:a8:70:f5:3b:a6:98:a5:62:5b: 87:35:28:95:79:35:91:cf:ea:6a:95:15:6d:84:a4:86:f7:b3: 72:f2:f1:f9:5e:18:03:0c:70:83:fe:31:c4:0e:10:7d:0d:6b: 5c:bb:f2:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxODcxMTAvBgNVBAUTKDY1QTFEMjVBRkI2NkE3NkU3OTRBOTY2RkYzM0I2QjA2 MEM3RjgwREYwHhcNMjYxMDI3MDcyNTIzWhcNMjYxMTAzMDcyNTIzWjAYMRYwFAYD VQQDEw02YWUwNTFlMy01ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjEhZQ0rluB30EV5VWRJS0xru9OoPxqlPXLdSTU2aLPWUoTbSZSmv21DrZfZ qQU+lXv7U9lKzApg1kkH6t3Tf54vIsAN6Dgqj9ypTmk8D3qHD8qh4RE/pTLq0B0+ k9vBUatavZAjoF2wQM7H0AaaVWw/kLEdRIQ9tgL4WPmRR5596GHDZzzFDmjYNGac BVhYmpRQCSwuECNupHw9AfuEFLogEHC4uxyLV7KTMy6Zh4xRM7524BoW+w/7ROvZ i9dnFt0IpRnYkRAKcwiBgwkUwAwXgOEiGAppH/82Qt0uRIt8xvqn8GH4E9wyXWAN 3VeEXF2k5GvgwqhzQJImILtufQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIO4YSpW bRY0jP6BZ4UCcmZzudj/MB8GA1UdIwQYMBaAFGWh0lr7ZqdueUqWb/M7awYMf4Df MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Ny8zOTJDMTgyNkNB NTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAyNTVTcFp2OHp0ckJneF9n TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjE4Ny8zOTJDMTgyNkNBNTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0bXAy NTVTcFp2OHp0ckJneF9nTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3m8p+fWhNeKw1Jsyy89kVasW3kDAAk1H3hIOu/cLtakKvGOKY1R961Mp84N nouEYj6ht924VUUiKsVKowXw0Yu5JwcENDrlRshk1Bq9nHT6Uuq4JU2kdY7Zf4hp Rtgc8K4AT0YibUxCWXzKXeh5brOebKhPBBeeeYKItgPw+fwPo2w8zshN2rMW3oHL nPrzsxwFCVpF7CL8ySRNtT1kXlkzLGgcLaVBIioFT/rAl8Wctfy1rd0WWNRUlpsO v2fwva/mk62Z5KY+cKOIbVqWqHD1O6aYpWJbhzUolXk1kc/qapUVbYSkhvezcvLx +V4YAwxwg/4xxA4QfQ1rXLvy/A== -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:30 2026 by rpki-client