$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: SXLFdrFpRRw9TgAOC3agmMYgD+q8DrkMs+A7wMg/ULg= Subject key identifier: 31:65:C6:9C:E4:37:52:C8:05:F1:08:F8:F6:39:85:17:0F:AB:8F:10 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 01AA Signing time: Thu 29 Oct 2026 05:06:53 +0000 Manifest this update: Thu 29 Oct 2026 05:06:52 +0000 Manifest next update: Thu 05 Nov 2026 05:06:52 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: jtYUEM4yTt6HFQSYD/omiLsuddA7AGySFH+NWC/Q5S8=) 2: 42A767BE92E711F1A9AF51EC6611F970.roa (hash: HUBLJSCNsrJdYYyYuHs3ar1Hoeyo76HEg1o/gDczBe4=) 3: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: sSCsbAespKsi6vl2psJYVlnWWlGIuiPTWax+dVAB//o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Oct 29 05:06:52 2026 GMT Not After : Nov 5 05:06:52 2026 GMT Subject: CN=6ae2d46d-9bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:a5:aa:c0:3e:81:50:6c:83:62:bd:ec:f3: 8b:51:44:b0:87:0d:52:97:aa:5d:79:79:7e:37:2b: 3a:a2:a6:b6:03:c8:75:86:09:09:22:de:cc:07:11: b3:6c:00:4a:d5:83:33:f4:76:41:d3:44:7e:fd:6d: 48:0e:95:e7:ee:5b:00:39:f7:b1:69:be:e1:f2:0d: 47:8a:e3:94:64:19:2f:6e:73:05:88:65:be:d0:2a: f1:61:59:d5:6d:d9:9e:d3:a9:f3:51:5a:de:ac:5a: 88:7a:db:4d:27:85:22:e1:7c:d1:8e:ec:ca:f0:7d: 12:8c:db:c1:9c:5d:a0:77:2c:14:b5:9c:56:ce:47: 13:70:d9:1a:66:ab:83:f0:85:ec:6b:5b:a3:21:06: 51:82:37:0b:41:d8:a3:2d:34:9a:8e:40:11:83:e6: 8d:bf:ff:71:51:fd:2a:f4:e7:7d:ee:e9:99:cd:4d: 89:e8:b8:92:de:4a:b0:d8:5e:c6:75:aa:9f:dc:2c: c0:cb:e0:ad:11:62:1e:71:80:dd:f4:4f:2e:6f:a0: eb:3d:f7:9a:d8:11:8f:8b:a3:8f:14:49:0f:ed:fb: ac:8b:26:dd:dd:13:e6:c7:8b:89:bc:8d:5b:00:5d: 45:92:43:3c:c3:ab:e6:7a:34:0a:52:ce:a9:ff:97: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:65:C6:9C:E4:37:52:C8:05:F1:08:F8:F6:39:85:17:0F:AB:8F:10 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:2a:11:80:3c:ba:31:0f:ef:70:92:9a:68:5d:55:3b:a8:26: ec:c7:84:28:bd:3a:b9:c1:5a:4c:a2:af:27:81:8b:4a:dd:b6: 91:a6:ed:f6:98:f1:4a:3d:64:db:cc:6a:27:c2:98:70:a5:b6: 89:a9:4c:cf:6e:07:57:99:52:74:41:29:bb:ed:ed:19:32:45: a7:82:36:ad:d6:2c:07:d1:36:d4:2a:0f:8d:a2:13:c5:c5:1c: 5c:fc:11:0f:8f:34:73:53:a4:0c:97:80:68:43:96:1f:11:f9: 14:66:8a:7e:fd:41:ac:74:3e:f5:fc:56:d8:2d:f7:e7:ca:d7: e8:ba:5d:27:be:d6:c7:1c:b8:b8:7d:a6:c3:8d:66:da:fa:64: 8c:fa:96:1e:31:26:8f:72:f1:48:af:5d:09:f9:3c:69:9b:6b: 7c:d5:42:e2:5b:7e:6b:e9:1b:3d:56:80:b7:9a:9a:d0:e9:fe: c7:a2:e2:57:34:aa:5a:db:a1:f4:24:61:d4:a6:b8:bd:69:79: 9c:c0:0b:ff:c5:b8:b0:c3:d6:1c:cb:dc:43:40:93:e4:da:8a: a3:a2:19:96:33:c6:e8:0d:af:48:5c:6d:7f:37:d5:f7:6a:bb: 9c:3b:8b:cb:2a:c8:80:2c:b9:e6:92:e9:d8:9e:74:f8:2b:78: 2d:20:20:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjYxMDI5MDUwNjUyWhcNMjYxMTA1MDUwNjUyWjAYMRYwFAYD VQQDEw02YWUyZDQ2ZC05YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdKlqsA+gVBsg2K97POLUUSwhw1Sl6pdeXl+Nys6oqa2A8h1hgkJIt7MBxGz bABK1YMz9HZB00R+/W1IDpXn7lsAOfexab7h8g1HiuOUZBkvbnMFiGW+0CrxYVnV bdme06nzUVrerFqIettNJ4Ui4XzRjuzK8H0SjNvBnF2gdywUtZxWzkcTcNkaZquD 8IXsa1ujIQZRgjcLQdijLTSajkARg+aNv/9xUf0q9Od97umZzU2J6LiS3kqw2F7G daqf3CzAy+CtEWIecYDd9E8ub6DrPfea2BGPi6OPFEkP7fusiybd3RPmx4uJvI1b AF1FkkM8w6vmejQKUs6p/5cfewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFlxpzk N1LIBfEI+PY5hRcPq48QMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwioRgDy6MQ/vcJKaaF1VO6gm7MeEKL06ucFaTKKvJ4GLSt22kabt9pjxSj1k 28xqJ8KYcKW2ialMz24HV5lSdEEpu+3tGTJFp4I2rdYsB9E21CoPjaITxcUcXPwR D480c1OkDJeAaEOWHxH5FGaKfv1BrHQ+9fxW2C3358rX6LpdJ77Wxxy4uH2mw41m 2vpkjPqWHjEmj3LxSK9dCfk8aZtrfNVC4lt+a+kbPVaAt5qa0On+x6LiVzSqWtuh 9CRh1Ka4vWl5nMAL/8W4sMPWHMvcQ0CT5NqKo6IZljPG6A2vSFxtfzfV92q7nDuL yyrIgCy55pLp2J50+Ct4LSAgwA== -----END CERTIFICATE-----Generated at Thu Oct 29 13:54:12 2026 by rpki-client