$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft File: ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft (raw, json) Hash identifier: C27qss5mn9fvHu/HZAnK9ln6aXV+CU5W9G50VRXzShY= Subject key identifier: 3A:7E:D5:AE:45:2A:C9:68:AB:EB:50:FD:F9:7A:89:32:83:EE:24:65 Authority key identifier: 66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52 Certificate issuer: /CN=A9148355/serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft Manifest number: 5A Signing time: Tue 03 Nov 2026 09:22:10 +0000 Manifest this update: Tue 03 Nov 2026 09:22:10 +0000 Manifest next update: Tue 10 Nov 2026 09:22:10 +0000 Files and hashes: 1: ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl (hash: vaY9JTFPexJICHbvET4dHL182CVRMwAi/4EiimLdozg=) 2: 5BAEE25E5C1511F1A463B2F993833773.roa (hash: QAjB04e8BhjTa56xp5s1mLUlyQZMay4mhoLGvM2MXNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 09:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148355, serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52 Validity Not Before: Nov 3 09:22:10 2026 GMT Not After : Nov 10 09:22:10 2026 GMT Subject: CN=6ae9a7c2-5b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:3a:d2:59:ca:b1:92:fe:58:41:79:a8:3b: e0:36:9c:60:26:2e:af:f8:6c:01:5d:d8:08:62:d0: 01:a8:ce:0f:84:c1:4c:b6:05:ae:d8:bb:1d:a1:3f: 9e:e2:cf:41:bc:a0:15:c6:a7:e2:8e:59:fc:04:71: 54:47:64:da:4a:15:ec:c0:ca:e7:d3:4e:d9:e7:d1: fe:fe:9b:b0:35:ec:3f:11:59:e1:cb:09:b8:17:a7: 4c:f8:18:4c:a4:02:07:81:42:77:9d:26:8a:d3:bb: 98:05:dc:8f:7a:b8:8a:bf:24:b5:a4:14:88:5a:ae: 8b:68:e7:94:49:fe:7d:ba:45:81:40:b5:06:e5:ec: a5:8f:e9:12:3e:02:30:d0:dc:ce:d6:97:39:5d:cb: 7e:ca:7e:fb:4f:2f:01:82:6e:da:46:c2:54:7d:4a: fb:cb:5b:1f:d6:dc:c8:b0:30:4d:ec:fb:f7:c2:28: 4e:d5:fd:dc:77:f0:09:bc:60:de:14:e2:30:74:a2: f6:20:cb:bb:e6:4f:26:7d:a7:73:87:c7:07:6f:62: d5:9b:93:13:3c:8f:7d:cf:67:2d:e4:73:8f:b0:a6: 46:b4:38:2b:04:8f:0b:2f:37:3c:79:64:d0:f0:72: c6:2e:49:df:3b:93:94:6b:94:d2:00:01:63:07:82: 46:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7E:D5:AE:45:2A:C9:68:AB:EB:50:FD:F9:7A:89:32:83:EE:24:65 X509v3 Authority Key Identifier: keyid:66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:70:bd:19:1a:f8:e2:e0:9b:ca:d9:39:01:89:73:c8:28:8e: 30:2f:31:8d:66:35:19:18:a3:a8:ae:50:91:a8:71:a6:74:29: 5c:5b:4b:6a:dd:5f:3c:fa:ac:6f:3f:c4:0c:b3:ba:ea:64:67: 2a:a8:0e:4b:ef:42:a1:bf:a3:f9:41:f0:10:73:89:d6:2d:03: 89:a5:ac:c2:8a:49:91:03:3c:f2:77:91:07:3e:ac:2b:88:03: 08:08:aa:94:5c:74:de:a0:19:4d:31:c8:53:dd:e8:e2:cb:ec: 6a:68:2d:c3:04:cb:07:44:72:d6:a8:82:6f:1e:ff:19:37:3c: 23:62:f2:5a:c6:e2:de:29:5e:0e:41:86:57:c6:60:00:fc:76: d3:5d:01:76:07:c6:eb:f7:41:c5:55:20:2a:44:50:29:76:0e: 3b:17:35:ef:42:02:6e:16:6b:6b:31:7a:06:90:6b:5a:8f:6b: a6:83:38:6d:40:88:4f:f5:6b:b0:e0:1c:8a:ab:61:76:c0:be: f8:8f:5f:63:56:d7:61:46:a1:0a:65:ac:73:31:13:47:e8:61: 7d:e6:12:af:ea:25:10:32:66:35:c4:50:b8:33:b1:b4:ba:3b: 3e:62:3b:20:4b:44:0f:0c:0a:d1:46:de:9a:3a:17:81:1b:46: 71:54:43:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODM1NTExMC8GA1UEBRMoNjYwMUMxN0QxMjBFNDBFOTlDRTVGODFENDJENzU1NzQz OTYzM0Y1MjAeFw0yNjExMDMwOTIyMTBaFw0yNjExMTAwOTIyMTBaMBgxFjAUBgNV BAMTDTZhZTlhN2MyLTViMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeFjrSWcqxkv5YQXmoO+A2nGAmLq/4bAFd2Ahi0AGozg+EwUy2Ba7Yux2hP57i z0G8oBXGp+KOWfwEcVRHZNpKFezAyufTTtnn0f7+m7A17D8RWeHLCbgXp0z4GEyk AgeBQnedJorTu5gF3I96uIq/JLWkFIharoto55RJ/n26RYFAtQbl7KWP6RI+AjDQ 3M7Wlzldy37KfvtPLwGCbtpGwlR9SvvLWx/W3MiwME3s+/fCKE7V/dx38Am8YN4U 4jB0ovYgy7vmTyZ9p3OHxwdvYtWbkxM8j33PZy3kc4+wpka0OCsEjwsvNzx5ZNDw csYuSd87k5RrlNIAAWMHgkZJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOn7VrkUq yWir61D9+XqJMoPuJGUwHwYDVR0jBBgwFoAUZgHBfRIOQOmc5fgdQtdVdDljP1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MzU1L0NCNTMyODk0NUMx MTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9tYzVmZ2RRdGRWZERsalAx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmdIQmZSSU9RT21jNWZnZFF0ZFZkRGxqUDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 MzU1L0NCNTMyODk0NUMxMTExRjFCQUY5REZDOTkyODMzNzczL1pnSEJmUklPUU9t YzVmZ2RRdGRWZERsalAxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgcL0ZGvji4JvK2TkBiXPIKI4wLzGNZjUZGKOorlCRqHGmdClcW0tq3V88+qxv P8QMs7rqZGcqqA5L70Khv6P5QfAQc4nWLQOJpazCikmRAzzyd5EHPqwriAMICKqU XHTeoBlNMchT3ejiy+xqaC3DBMsHRHLWqIJvHv8ZNzwjYvJaxuLeKV4OQYZXxmAA /HbTXQF2B8br90HFVSAqRFApdg47FzXvQgJuFmtrMXoGkGtaj2umgzhtQIhP9Wuw 4ByKq2F2wL74j19jVtdhRqEKZaxzMRNH6GF95hKv6iUQMmY1xFC4M7G0ujs+Yjsg S0QPDArRRt6aOheBG0ZxVENu -----END CERTIFICATE-----Generated at Tue Nov 3 22:37:07 2026 by rpki-client