$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: gZVH2FAsiSumWmZI6aLBJAIFLzobcMRhsQajO16/t8Y= Subject key identifier: 1F:05:BA:CB:7F:86:C2:92:79:DB:71:B6:90:26:29:4E:1E:92:5A:E9 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0D65 Signing time: Tue 08 Sep 2026 18:05:20 +0000 Manifest this update: Tue 08 Sep 2026 18:05:19 +0000 Manifest next update: Tue 15 Sep 2026 18:05:19 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: vZdLJwlh/STiVASDYbAsmkuL3VBlMbU39+nomvo0hAU=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: ggJ5ieK6u9Bx4lh1H2SAIUHjGvpUwoHUksb1s6thrAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 18:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Sep 8 18:05:19 2026 GMT Not After : Sep 15 18:05:19 2026 GMT Subject: CN=6aa04e5f-56f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:68:6c:ec:e2:bc:2c:e8:89:60:aa:d0:a4: 01:84:dd:d8:11:12:32:0d:54:4f:94:73:1a:7e:ed: 4e:79:3f:c1:26:78:ed:5d:f6:fe:69:56:f7:fc:b5: 22:df:81:19:32:31:29:9d:62:00:ba:28:23:8f:58: 4d:e6:67:69:33:b8:3c:4a:04:50:92:4a:9c:c7:c1: 43:cc:de:39:f3:f7:8c:75:83:64:11:3c:d5:c2:cc: f9:8a:5a:02:b8:22:21:6e:18:06:d0:be:ec:be:34: ef:58:6b:8a:e9:c8:78:7d:3e:6d:bb:40:d2:75:8c: 9b:9c:94:28:54:c5:57:dc:2c:fd:f3:cc:cb:90:98: f7:9a:0c:aa:0c:a0:d1:3d:e6:58:1a:f1:3e:fc:b6: 6e:ac:2c:a1:d7:c0:57:e5:8c:48:38:d4:10:dc:5b: 40:33:d2:bc:ec:37:dc:24:06:29:30:a0:03:fe:01: 39:b4:fc:4c:14:26:ba:08:c0:3b:97:27:0c:d3:27: 32:33:47:2a:37:9a:1d:52:58:66:2f:51:89:39:5a: 2a:d0:30:5f:54:e9:38:66:5e:ad:5b:5f:e1:21:20: 64:8a:ee:dc:81:f7:22:53:b8:5e:d5:f3:71:b7:76: 8d:67:07:40:ec:0e:e9:70:5b:b1:e2:f1:06:0f:d6: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:BA:CB:7F:86:C2:92:79:DB:71:B6:90:26:29:4E:1E:92:5A:E9 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:7d:fc:3b:60:fd:94:d6:4a:d8:39:a2:55:ec:2b:45:5a: 57:34:28:a9:31:f3:6b:a0:07:9a:bb:27:13:8c:81:6d:17:c6: c6:77:75:2a:c6:c8:a0:8f:1e:83:e8:3d:33:6a:97:39:ad:c5: f7:a5:7b:21:8b:fc:94:9b:2d:7b:e9:93:04:0a:eb:52:20:c1: d4:a2:2d:bb:5d:72:0b:19:7e:34:2f:27:77:a0:ef:d4:f0:2f: b6:0a:38:3e:78:5c:cf:08:10:a9:ca:67:7c:f7:f3:da:3d:f1: 6c:96:b0:16:b9:96:de:72:67:f7:2d:90:93:cb:57:52:db:27: 5e:4c:36:a7:f9:48:0e:0e:9e:17:95:52:e8:a0:6a:27:5a:fd: d7:21:1a:be:41:26:02:c9:6a:d1:4e:4b:06:18:8e:d4:75:53: b5:78:00:69:50:9e:1a:9c:f4:19:01:a8:13:fd:0d:c1:15:dc: 90:fc:9b:ff:0a:b6:bf:55:3b:6f:e6:19:46:f2:e8:fd:23:11: 6d:80:e6:15:d3:39:6c:1d:29:52:6b:90:3b:ae:27:aa:82:54: 73:58:c1:bb:62:61:64:32:db:9d:dd:13:e0:ae:66:8b:24:d1: 99:18:bb:46:f6:3b:f3:cd:0b:7c:f9:11:45:75:64:a1:21:5c: 5d:11:97:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjYwOTA4MTgwNTE5WhcNMjYwOTE1MTgwNTE5WjAYMRYwFAYD VQQDEw02YWEwNGU1Zi01NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtflobOzivCzoiWCq0KQBhN3YERIyDVRPlHMafu1OeT/BJnjtXfb+aVb3/LUi 34EZMjEpnWIAuigjj1hN5mdpM7g8SgRQkkqcx8FDzN458/eMdYNkETzVwsz5iloC uCIhbhgG0L7svjTvWGuK6ch4fT5tu0DSdYybnJQoVMVX3Cz988zLkJj3mgyqDKDR PeZYGvE+/LZurCyh18BX5YxIONQQ3FtAM9K87DfcJAYpMKAD/gE5tPxMFCa6CMA7 lycM0ycyM0cqN5odUlhmL1GJOVoq0DBfVOk4Zl6tW1/hISBkiu7cgfciU7he1fNx t3aNZwdA7A7pcFux4vEGD9ZCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8Fust/ hsKSedtxtpAmKU4eklrpMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1l9/Dtg/ZTWStg5olXsK0VaVzQoqTHza6AHmrsnE4yBbRfGxnd1KsbIoI8e g+g9M2qXOa3F96V7IYv8lJste+mTBArrUiDB1KItu11yCxl+NC8nd6Dv1PAvtgo4 PnhczwgQqcpnfPfz2j3xbJawFrmW3nJn9y2Qk8tXUtsnXkw2p/lIDg6eF5VS6KBq J1r91yEavkEmAslq0U5LBhiO1HVTtXgAaVCeGpz0GQGoE/0NwRXckPyb/wq2v1U7 b+YZRvLo/SMRbYDmFdM5bB0pUmuQO64nqoJUc1jBu2JhZDLbnd0T4K5miyTRmRi7 RvY7880LfPkRRXVkoSFcXRGX4A== -----END CERTIFICATE-----Generated at Thu Sep 10 18:39:42 2026 by rpki-client