$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: Xlxrwt8Z5i9HVeKx4EqL13ma9672lQjWCYLVHt1z50w= Subject key identifier: C8:51:BB:DE:C8:82:46:A4:D2:22:F6:7C:E5:A0:02:95:1E:5F:16:11 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0653 Signing time: Fri 02 Oct 2026 22:56:11 +0000 Manifest this update: Fri 02 Oct 2026 22:56:11 +0000 Manifest next update: Fri 09 Oct 2026 22:56:11 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: nSJZNtoLrWkDc7LGH0SkAjsxL/LMSdja3lXiFXNoh+U=) 2: C4F853EEB0A211F199DDB5AB5F11F970.roa (hash: cbR/jFkW9sp5wygPP/jHcZAeyT3xFSTE1LVmfYL6Ybo=) 3: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Oct 2 22:56:11 2026 GMT Not After : Oct 9 22:56:11 2026 GMT Subject: CN=6ac0368b-f41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:a0:00:59:ee:e9:22:42:8d:c9:d1:a0:78: 63:8a:ca:fa:a7:ba:9f:06:1b:fc:1b:51:ce:b6:fc: 13:7f:26:c9:bc:d9:7b:08:aa:9e:92:80:29:3e:32: 6f:08:4f:70:ad:00:85:f7:15:bb:01:ce:e6:29:60: 2b:2d:7c:b8:39:57:ef:01:ff:7e:72:2f:77:a8:76: 14:89:6b:50:6e:2f:ff:e5:d2:11:c8:e2:4e:11:b7: 62:6c:1b:32:ea:75:d4:33:7b:3f:33:03:da:4a:b9: ca:37:6d:48:00:3a:f0:94:ab:df:2c:9f:78:78:52: f0:6f:7e:3a:42:6f:ff:f6:82:29:ba:84:ad:89:fe: d0:74:0c:9e:4f:1b:35:a5:1e:ec:46:89:34:82:86: 63:f9:7c:b4:68:b1:36:1c:7b:6e:cf:02:ec:d4:97: a9:a4:96:7e:14:79:f5:f8:0c:3f:34:dd:03:b8:54: 98:d1:50:50:e4:23:65:27:09:c6:25:b6:11:11:ef: 19:8d:23:dd:56:d5:f4:51:83:6e:df:a7:47:df:c6: 3a:d9:5b:a9:4c:30:5a:84:61:a1:a2:89:86:a1:11: de:d6:e3:71:c6:4f:cb:13:89:d8:65:4d:db:69:bc: 7c:27:f8:96:16:88:38:76:31:81:7e:37:a7:07:c9: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:BB:DE:C8:82:46:A4:D2:22:F6:7C:E5:A0:02:95:1E:5F:16:11 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3a:45:3f:80:ef:d7:3c:a1:6d:d9:e5:c5:b9:fd:b7:c7:81: 27:84:83:83:d8:65:45:0d:e7:a4:44:bc:9e:b4:8d:ca:36:e9: 07:37:0b:e3:1a:68:85:6c:cd:14:79:84:57:c5:36:04:09:55: 76:19:3a:82:03:82:87:31:81:78:90:90:c3:36:60:ca:db:b4: 03:24:2c:a1:af:39:b7:8a:4a:8d:fc:20:e0:23:a7:3b:7b:b4: ee:fa:d0:13:c0:28:a9:e4:86:98:cc:42:12:d0:dd:fa:19:6a: c9:56:1d:4e:5d:6b:c5:fe:ac:34:cc:93:16:11:5e:b9:5c:69: 59:db:3b:b1:14:86:95:ec:06:75:04:ab:92:db:dd:80:26:34: bb:9c:bb:ff:ae:2c:43:9d:7c:0e:d9:22:5b:be:0d:4e:4f:23: de:a9:4e:e1:33:ec:f8:9c:b6:f0:c5:63:46:8c:df:0e:45:05: bc:42:3f:19:b6:51:ac:53:6b:0a:37:04:5e:73:d2:fe:5c:19: e4:d0:6b:e9:2d:f7:2e:4a:44:9c:1f:f4:4d:c6:b3:c7:c9:be: 9e:18:0e:ae:03:0e:f5:f5:09:c5:1e:2f:f6:1b:9e:4e:14:47: 66:06:c4:0e:3a:55:76:f6:d6:01:a4:87:a1:8c:6c:c3:ea:4e: 3c:cd:b0:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjYxMDAyMjI1NjExWhcNMjYxMDA5MjI1NjExWjAYMRYwFAYD VQQDEw02YWMwMzY4Yi1mNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTqgAFnu6SJCjcnRoHhjisr6p7qfBhv8G1HOtvwTfybJvNl7CKqekoApPjJv CE9wrQCF9xW7Ac7mKWArLXy4OVfvAf9+ci93qHYUiWtQbi//5dIRyOJOEbdibBsy 6nXUM3s/MwPaSrnKN21IADrwlKvfLJ94eFLwb346Qm//9oIpuoStif7QdAyeTxs1 pR7sRok0goZj+Xy0aLE2HHtuzwLs1JeppJZ+FHn1+Aw/NN0DuFSY0VBQ5CNlJwnG JbYREe8ZjSPdVtX0UYNu36dH38Y62VupTDBahGGhoomGoRHe1uNxxk/LE4nYZU3b abx8J/iWFog4djGBfjenB8k65QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhRu97I gkak0iL2fOWgApUeXxYRMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzpFP4Dv1zyhbdnlxbn9t8eBJ4SDg9hlRQ3npES8nrSNyjbpBzcL4xpohWzN FHmEV8U2BAlVdhk6ggOChzGBeJCQwzZgytu0AyQsoa85t4pKjfwg4COnO3u07vrQ E8AoqeSGmMxCEtDd+hlqyVYdTl1rxf6sNMyTFhFeuVxpWds7sRSGlewGdQSrktvd gCY0u5y7/64sQ518DtkiW74NTk8j3qlO4TPs+Jy28MVjRozfDkUFvEI/GbZRrFNr CjcEXnPS/lwZ5NBr6S33LkpEnB/0Tcazx8m+nhgOrgMO9fUJxR4v9hueThRHZgbE DjpVdvbWAaSHoYxsw+pOPM2wow== -----END CERTIFICATE-----Generated at Sun Oct 4 20:02:17 2026 by rpki-client