$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: ce/qcXXQcUD7Zu1zDpsj5Q4utjsYuxpIRsW/NuSgLIg= Subject key identifier: D0:D3:42:38:66:BD:3A:BC:6C:B9:E9:45:0F:EC:4B:04:BF:7D:4C:D3 Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 0A00 Signing time: Tue 06 Oct 2026 19:53:14 +0000 Manifest this update: Tue 06 Oct 2026 19:53:13 +0000 Manifest next update: Tue 13 Oct 2026 19:53:13 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: /LPtFo2GUHOIPcXMq02SI2cRmOJ7lRUOgw3kS36eGEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Oct 6 19:53:13 2026 GMT Not After : Oct 13 19:53:13 2026 GMT Subject: CN=6ac551a9-f135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:8b:0b:9f:fa:ab:5a:97:52:c9:41:68:5f: 0d:06:10:0d:47:6c:ea:25:17:ce:c1:fe:50:16:19: 04:3d:92:76:5d:21:85:fe:c2:b2:e9:28:9b:44:36: 71:a0:80:e6:f8:c0:7e:f1:48:0d:d6:cf:35:14:91: f2:41:bd:7c:84:2b:0f:de:34:d2:76:f9:d4:cf:07: 3a:82:39:c9:93:62:43:8c:af:4f:c2:f9:59:0c:fa: fd:2b:52:05:4c:ab:0c:e7:54:2b:64:7c:aa:29:c0: 79:53:19:fc:8f:53:b0:bc:e2:9d:6b:e2:b1:b0:0c: 7e:78:7b:a0:00:31:cd:cb:60:5c:3b:f4:02:c2:ec: 2f:87:a5:1c:66:eb:d8:eb:a1:ca:f7:c1:8d:cf:1e: 05:ed:61:16:ee:06:14:cb:24:64:bd:d2:3b:6d:5d: 7a:a7:a4:1e:27:2a:d0:54:f8:01:39:2b:55:a1:6d: 64:99:bd:b9:5b:04:e5:00:e8:17:2c:44:4e:9c:5f: 96:d6:71:03:7d:e7:4c:69:46:49:fe:69:b2:1b:b9: 40:3d:39:d3:6d:25:f3:05:d8:ff:8d:f7:8c:a3:ba: ff:f0:59:d1:ff:98:cf:fb:91:dd:c8:1c:c8:3f:a7: 88:61:63:af:6b:cc:64:99:cc:1d:d8:47:2b:aa:49: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D3:42:38:66:BD:3A:BC:6C:B9:E9:45:0F:EC:4B:04:BF:7D:4C:D3 X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b6:99:46:d1:2b:9d:9b:1d:a9:b0:b6:3f:0c:b7:08:25:28: 2f:d1:a8:88:7e:3d:be:be:44:59:72:32:40:76:24:bd:8a:0a: d9:cb:09:eb:23:c4:39:13:23:db:f2:37:a3:6f:ec:42:c7:9d: 69:e9:a7:23:b9:75:e6:8c:06:01:84:df:5a:37:f7:70:c4:74: 36:65:67:93:d7:59:89:e1:ea:f9:e6:ed:cd:2c:4e:bb:ac:64: 00:9a:3c:09:1b:65:01:b6:f3:b2:b5:54:6c:c1:b7:ae:f6:df: 0c:ac:38:b9:2f:b3:dc:a6:24:14:44:4d:6a:1d:21:2c:32:fa: a8:79:d3:d8:ba:4d:27:4d:5e:7f:d8:c5:bc:31:25:3f:15:61: ac:5f:26:25:1f:fc:5d:61:3b:e4:06:d8:0e:2d:b3:7d:6f:8e: ae:49:7a:5a:c2:ac:af:96:15:e6:29:7f:4f:75:eb:d2:17:ee: bb:77:38:25:97:e7:53:f2:87:d6:57:5e:5d:fe:78:4a:2c:b1: fb:7f:1d:4d:1c:a4:71:03:43:cb:e4:9d:e4:c7:dc:50:8e:e5: c2:05:0f:6a:95:8f:33:79:8c:d7:b4:e9:dc:79:0c:f7:5c:ec: ed:7e:be:da:10:95:c6:9f:e9:3f:25:5d:bd:e9:77:40:c0:bd: e2:75:e2:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjYxMDA2MTk1MzEzWhcNMjYxMDEzMTk1MzEzWjAYMRYwFAYD VQQDEw02YWM1NTFhOS1mMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F2LC5/6q1qXUslBaF8NBhANR2zqJRfOwf5QFhkEPZJ2XSGF/sKy6SibRDZx oIDm+MB+8UgN1s81FJHyQb18hCsP3jTSdvnUzwc6gjnJk2JDjK9PwvlZDPr9K1IF TKsM51QrZHyqKcB5Uxn8j1OwvOKda+KxsAx+eHugADHNy2BcO/QCwuwvh6UcZuvY 66HK98GNzx4F7WEW7gYUyyRkvdI7bV16p6QeJyrQVPgBOStVoW1kmb25WwTlAOgX LEROnF+W1nEDfedMaUZJ/mmyG7lAPTnTbSXzBdj/jfeMo7r/8FnR/5jP+5HdyBzI P6eIYWOva8xkmcwd2Ecrqkn7LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDTQjhm vTq8bLnpRQ/sSwS/fUzTMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7aZRtErnZsdqbC2Pwy3CCUoL9GoiH49vr5EWXIyQHYkvYoK2csJ6yPEORMj 2/I3o2/sQsedaemnI7l15owGAYTfWjf3cMR0NmVnk9dZieHq+ebtzSxOu6xkAJo8 CRtlAbbzsrVUbMG3rvbfDKw4uS+z3KYkFERNah0hLDL6qHnT2LpNJ01ef9jFvDEl PxVhrF8mJR/8XWE75AbYDi2zfW+Orkl6WsKsr5YV5il/T3Xr0hfuu3c4JZfnU/KH 1ldeXf54Siyx+38dTRykcQNDy+Sd5MfcUI7lwgUPapWPM3mM17Tp3HkM91zs7X6+ 2hCVxp/pPyVdvel3QMC94nXiYQ== -----END CERTIFICATE-----Generated at Wed Oct 7 13:25:46 2026 by rpki-client