$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: 2fU76tFvP/S0sR5y3XR+deaSntPPMibnkuy8pWNaBZM= Subject key identifier: F3:56:50:AD:D6:E1:FC:F4:91:57:AA:C9:76:6F:F0:32:94:DA:EB:17 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0D85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0D7D Signing time: Mon 26 Oct 2026 17:59:16 +0000 Manifest this update: Mon 26 Oct 2026 17:59:15 +0000 Manifest next update: Mon 02 Nov 2026 17:59:15 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: ZucJaQliD+ZZqL+IuATO3fblwVdQp25W4Ea/A+Q8aAM=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3461 (0xd85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Oct 26 17:59:15 2026 GMT Not After : Nov 2 17:59:15 2026 GMT Subject: CN=6adf94f4-80fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:98:d2:6b:5a:65:12:72:dd:bd:a9:76:c1:63: 53:8f:c8:a6:40:2e:47:fe:86:6d:2a:ff:3f:36:1d: 11:78:23:ff:24:91:0c:c1:ca:7a:e9:5c:da:7f:53: 2e:b6:e4:f3:39:d6:75:d6:e0:a9:27:bd:28:c8:a9: a9:ce:85:24:ba:3a:89:41:8b:d9:48:b2:24:12:f5: 12:3d:2f:b4:41:95:72:45:f3:86:6c:bf:ce:68:07: da:54:da:5c:d3:83:4f:6b:23:a6:83:15:3a:14:74: 34:f4:4a:de:50:a1:54:38:e6:d8:4f:91:31:a5:44: 6b:03:36:e6:d1:4f:8d:a0:a4:1a:ce:8d:e1:79:91: 23:72:ee:97:de:94:2f:61:39:4d:03:3f:bd:1a:27: 58:a3:eb:63:4d:24:20:ef:06:d6:6a:ba:9e:d1:af: 6f:3e:d3:89:3f:fc:b2:ea:8b:9c:bd:5b:8c:3b:f0: 8c:99:5f:15:de:5a:93:c0:4d:4c:74:b8:72:8a:55: 13:7a:04:27:03:ce:80:84:53:97:13:e6:f7:6e:68: 1a:e1:2e:ac:f7:3a:ca:c6:cd:6f:3e:c6:31:3c:17: b7:39:95:8b:7c:d3:d0:83:0d:24:39:cf:0a:8b:6e: e5:87:ad:1d:c2:eb:21:5c:e9:86:47:5a:db:4c:b0: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:50:AD:D6:E1:FC:F4:91:57:AA:C9:76:6F:F0:32:94:DA:EB:17 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:07:18:e9:69:55:64:5d:f3:ed:ba:ae:9e:b8:1a:f9:31:d3: dc:70:00:34:54:54:56:e2:7f:0f:62:a0:c4:28:fb:9b:ac:99: 13:9d:a2:00:19:05:f5:a0:6e:c6:49:45:ef:fa:fa:da:e2:d6: e9:5d:7a:cf:af:14:62:df:da:79:00:80:54:f9:9a:9c:3d:cb: 4a:26:ca:0e:29:fa:72:d2:6e:f2:31:2a:05:49:e9:99:88:de: 5a:3e:0e:c1:d9:39:38:aa:c2:11:df:44:cd:3e:49:4e:75:5d: 66:8b:2d:fe:1f:b2:ce:c1:f3:e1:62:1d:07:88:2c:f1:bf:4d: a9:a3:45:35:20:f9:7d:6f:59:25:cf:77:50:a0:27:5b:7a:74: 61:06:d0:24:60:15:ff:22:d9:af:c9:dd:dd:71:8b:92:a3:dd: 39:8b:1f:2d:90:04:56:20:db:2a:51:12:b6:aa:c1:f7:ee:27: 96:89:ff:e6:0b:1b:0a:35:f6:c2:e8:37:f2:ba:11:89:81:8d: d0:2e:d1:33:cc:8a:47:1d:a4:8a:08:b6:9c:83:ba:b6:8d:30: d3:35:fc:ab:34:0f:75:39:bc:55:02:1d:db:31:8c:ee:62:75: de:93:bd:2d:b0:5b:32:b5:a5:59:dc:db:fa:3a:4d:ee:fb:84: 1f:38:6e:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjYxMDI2MTc1OTE1WhcNMjYxMTAyMTc1OTE1WjAYMRYwFAYD VQQDEw02YWRmOTRmNC04MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85jSa1plEnLdval2wWNTj8imQC5H/oZtKv8/Nh0ReCP/JJEMwcp66Vzaf1Mu tuTzOdZ11uCpJ70oyKmpzoUkujqJQYvZSLIkEvUSPS+0QZVyRfOGbL/OaAfaVNpc 04NPayOmgxU6FHQ09EreUKFUOObYT5ExpURrAzbm0U+NoKQazo3heZEjcu6X3pQv YTlNAz+9GidYo+tjTSQg7wbWarqe0a9vPtOJP/yy6oucvVuMO/CMmV8V3lqTwE1M dLhyilUTegQnA86AhFOXE+b3bmga4S6s9zrKxs1vPsYxPBe3OZWLfNPQgw0kOc8K i27lh60dwushXOmGR1rbTLBe0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNWUK3W 4fz0kVeqyXZv8DKU2usXMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcgcY6WlVZF3z7bqunrga+THT3HAANFRUVuJ/D2KgxCj7m6yZE52iABkF9aBu xklF7/r62uLW6V16z68UYt/aeQCAVPmanD3LSibKDin6ctJu8jEqBUnpmYjeWj4O wdk5OKrCEd9EzT5JTnVdZost/h+yzsHz4WIdB4gs8b9NqaNFNSD5fW9ZJc93UKAn W3p0YQbQJGAV/yLZr8nd3XGLkqPdOYsfLZAEViDbKlEStqrB9+4nlon/5gsbCjX2 wug38roRiYGN0C7RM8yKRx2kigi2nIO6to0w0zX8qzQPdTm8VQId2zGM7mJ13pO9 LbBbMrWlWdzb+jpN7vuEHzhuYg== -----END CERTIFICATE-----Generated at Wed Oct 28 00:42:15 2026 by rpki-client