$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: Rqr4EvudqF2ulH1BbSXwCJ1f0ktnqNzmw5EhCX8wRCM= Subject key identifier: E9:FA:6F:A2:21:30:45:D9:6E:BA:43:1F:13:AF:CA:65:96:4E:5C:BB Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0586 Signing time: Fri 02 Oct 2026 23:35:07 +0000 Manifest this update: Fri 02 Oct 2026 23:35:07 +0000 Manifest next update: Fri 09 Oct 2026 23:35:06 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: B/6o6rdB9ah7nYBmL1N2+nx6XUStolVNUkcLTBc1Ujc=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Oct 2 23:35:07 2026 GMT Not After : Oct 9 23:35:06 2026 GMT Subject: CN=6ac03fab-c59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:bb:e9:a5:32:d3:3e:66:1b:a1:eb:22:70: 84:cc:4a:dd:a5:e2:99:45:fa:0b:c7:75:6c:2d:65: 02:d0:9c:f9:1f:fe:1d:d7:13:3b:e4:8b:79:7b:1c: 6f:22:1a:f9:99:9b:5e:99:95:f2:d3:a4:1d:35:79: 47:80:1d:dd:51:bd:f8:93:a5:05:a9:b1:58:b7:9c: 74:78:90:c1:55:27:18:a7:df:33:ba:7f:cb:c0:bb: de:76:94:ad:3c:8d:82:f9:59:c4:00:6e:ca:1d:52: 81:96:9f:78:72:54:8e:b8:79:5e:ff:1f:37:9f:7e: 0e:35:27:70:5c:c2:c0:6b:f0:8b:ba:70:ae:04:b6: a9:be:be:6f:44:00:a5:1a:38:e0:ce:ca:b9:84:de: 20:78:d2:12:04:3c:f8:0b:72:cd:30:30:aa:07:b2: 83:6e:e5:e1:47:66:8c:7b:05:3a:76:90:58:ad:26: 5d:eb:84:bf:4e:81:d8:15:75:36:96:9b:57:4e:0b: 07:a4:23:40:2d:cb:22:f6:cc:bd:71:03:bf:bf:39: bf:72:71:c1:d9:55:65:61:7f:80:7f:e7:6e:44:51: f7:43:46:d9:0b:35:f8:4d:1f:59:7e:c0:ef:46:34: 95:0f:b2:26:76:68:d3:a8:2f:9f:56:40:d2:cc:d2: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:6F:A2:21:30:45:D9:6E:BA:43:1F:13:AF:CA:65:96:4E:5C:BB X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:35:8a:4b:eb:d8:ca:8c:cd:15:a3:53:ca:d9:89:37:35:99: fe:09:01:e9:dc:ae:c3:59:d4:9d:75:34:67:82:e3:02:7e:cb: 06:03:69:6d:e5:6b:b5:e7:a9:9b:c7:ca:25:ab:c6:eb:87:62: 1b:54:ee:05:96:6f:24:5b:1c:b7:c2:9d:fb:a2:15:84:be:76: 17:e8:96:0a:95:13:b0:0b:ae:69:24:e2:ce:ba:72:81:70:ab: 55:4a:cf:40:95:00:93:77:08:c9:fa:f7:be:da:55:1a:f5:9e: c3:9f:6d:80:40:5e:f4:af:80:78:ae:4b:79:83:55:cf:d2:ab: 55:20:52:37:71:ff:22:e9:b6:ad:58:19:85:d4:1a:80:c5:68: fd:52:df:da:bd:c8:70:80:ae:ec:09:5d:66:b3:0d:1e:b1:bc: 39:e2:a5:85:68:51:fe:32:6f:ae:06:d7:5a:42:b2:d8:dd:7a: b1:2f:ef:33:18:9f:9d:94:20:9d:1d:78:cc:14:75:95:20:31: b4:8e:b8:19:28:fa:8d:05:f7:24:90:dd:59:bd:56:28:5f:17: cc:26:82:df:14:0c:d8:3f:5d:fc:63:34:2d:55:eb:10:0b:3a: b9:b6:4c:38:8e:09:d4:6a:b6:a3:1e:db:04:15:b3:a3:00:68: bc:4d:4e:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjYxMDAyMjMzNTA3WhcNMjYxMDA5MjMzNTA2WjAYMRYwFAYD VQQDEw02YWMwM2ZhYi1jNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf676aUy0z5mG6HrInCEzErdpeKZRfoLx3VsLWUC0Jz5H/4d1xM75It5exxv Ihr5mZtemZXy06QdNXlHgB3dUb34k6UFqbFYt5x0eJDBVScYp98zun/LwLvedpSt PI2C+VnEAG7KHVKBlp94clSOuHle/x83n34ONSdwXMLAa/CLunCuBLapvr5vRACl Gjjgzsq5hN4geNISBDz4C3LNMDCqB7KDbuXhR2aMewU6dpBYrSZd64S/ToHYFXU2 lptXTgsHpCNALcsi9sy9cQO/vzm/cnHB2VVlYX+Af+duRFH3Q0bZCzX4TR9ZfsDv RjSVD7ImdmjTqC+fVkDSzNLWIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOn6b6Ih MEXZbrpDHxOvymWWTly7MB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPTWKS+vYyozNFaNTytmJNzWZ/gkB6dyuw1nUnXU0Z4LjAn7LBgNpbeVrteep m8fKJavG64diG1TuBZZvJFsct8Kd+6IVhL52F+iWCpUTsAuuaSTizrpygXCrVUrP QJUAk3cIyfr3vtpVGvWew59tgEBe9K+AeK5LeYNVz9KrVSBSN3H/Ium2rVgZhdQa gMVo/VLf2r3IcICu7AldZrMNHrG8OeKlhWhR/jJvrgbXWkKy2N16sS/vMxifnZQg nR14zBR1lSAxtI64GSj6jQX3JJDdWb1WKF8XzCaC3xQM2D9d/GM0LVXrEAs6ubZM OI4J1Gq2ox7bBBWzowBovE1Ovg== -----END CERTIFICATE-----Generated at Sun Oct 4 18:00:26 2026 by rpki-client