$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft File: Z3baH1fz652mWcNicdGV5tPOXEU.mft (raw, json) Hash identifier: bhnfye19Z0ja53jqHtgEo8KbdOQs3NyDrpLtgjLIgac= Subject key identifier: 2B:2F:60:F1:03:45:41:47:3F:40:EC:45:7E:0E:80:BD:FB:63:B8:45 Authority key identifier: 67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45 Certificate issuer: /CN=A9167352/serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft Manifest number: 36 Signing time: Mon 05 Oct 2026 09:05:02 +0000 Manifest this update: Mon 05 Oct 2026 09:05:01 +0000 Manifest next update: Mon 12 Oct 2026 09:05:01 +0000 Files and hashes: 1: Z3baH1fz652mWcNicdGV5tPOXEU.crl (hash: 0GMZMZxWMlgfeRO9Ub+BTkhI/zRogWIVlr09ZfYG89A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167352, serialNumber=6776DA1F57F3EB9DA659C36271D195E6D3CE5C45 Validity Not Before: Oct 5 09:05:01 2026 GMT Not After : Oct 12 09:05:01 2026 GMT Subject: CN=6ac3683e-226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:60:ee:1a:e1:33:14:18:4f:1d:19:ec:6c: 56:09:77:f1:a1:3a:a0:8b:22:34:8a:3e:8a:d1:cc: 6a:7b:ef:42:4b:60:c0:fb:50:2e:93:2c:11:08:60: 0d:90:92:e1:84:69:04:a6:67:ce:25:2c:0d:bc:e2: 31:1f:8b:8c:93:3c:36:a6:77:90:f6:82:bd:06:2e: b4:4a:57:d5:6e:f3:84:3e:1a:1a:df:db:65:57:c7: 5a:f9:c7:2b:3f:62:de:e6:eb:44:ef:e7:94:b3:59: 8e:5d:85:8a:1f:62:e3:31:e4:f5:de:02:3e:e3:65: 2c:a6:76:12:fc:fa:da:ad:00:2a:54:9a:16:e0:7f: 65:22:f2:c9:b9:45:60:4d:a5:72:33:7d:e7:89:d6: 91:4e:bf:f2:a5:9c:26:cc:f5:95:e1:15:85:69:65: 44:73:ad:28:7d:c7:a5:b9:d5:79:cc:47:5a:29:1a: d5:72:50:c5:e2:d7:bc:17:be:07:31:67:f1:95:d5: de:d0:23:99:b4:06:e8:85:99:2d:7d:7e:38:ee:04: d1:48:d0:6d:db:0b:92:a2:11:4f:6b:e9:0f:13:f0: b1:00:c9:04:b7:00:7d:7b:53:d6:42:6c:05:fb:15: 73:15:d2:63:a0:41:3b:30:1e:56:eb:7e:07:ff:e1: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:60:F1:03:45:41:47:3F:40:EC:45:7E:0E:80:BD:FB:63:B8:45 X509v3 Authority Key Identifier: keyid:67:76:DA:1F:57:F3:EB:9D:A6:59:C3:62:71:D1:95:E6:D3:CE:5C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z3baH1fz652mWcNicdGV5tPOXEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/8EB0C1EC704A11F1B350ABC268A30FBC/Z3baH1fz652mWcNicdGV5tPOXEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:6c:0e:64:69:bb:fa:35:93:d5:a8:2e:c7:d3:da:e3:8b: 81:a7:10:0e:0b:0f:a6:5c:f9:80:18:4e:d3:c6:d6:a3:0b:19: e4:66:9c:1f:11:5e:8d:85:06:1d:ab:9b:50:de:f9:39:0b:2f: 46:6c:05:a1:61:93:6d:d6:32:e5:4d:07:f8:0e:76:45:fc:68: fc:8e:6d:73:8f:e9:af:74:4c:aa:a5:87:54:99:b6:8f:59:d0: 94:44:10:64:01:8c:20:b4:1e:fa:63:99:42:9c:a9:fd:c2:83: 55:b6:8b:2c:88:dd:cf:b8:7d:33:bd:85:5d:b6:89:ba:98:89: 99:48:68:eb:78:2b:50:d7:07:0f:67:08:db:f0:51:2f:3e:c1: 9b:f5:19:dc:58:f9:74:66:c9:fe:1f:1f:c3:3b:35:8f:d8:ae: 2b:78:d8:7e:5e:a0:63:2c:0a:55:03:fd:e2:48:40:ef:4e:4a: 38:e4:76:c7:2d:c1:12:b6:12:58:10:54:a6:b8:87:c6:a0:9a: 96:4e:fc:f5:0d:a9:57:dc:b6:9b:31:8c:73:5e:0c:ad:b9:7c: 61:f7:dd:55:e2:5d:2d:bd:84:86:0c:59:81:87:80:52:49:df: e2:5e:3a:8f:9c:79:60:47:c5:a9:4f:1a:2e:47:7d:06:6a:36: 74:b2:74:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzM1MjExMC8GA1UEBRMoNjc3NkRBMUY1N0YzRUI5REE2NTlDMzYyNzFEMTk1RTZE M0NFNUM0NTAeFw0yNjEwMDUwOTA1MDFaFw0yNjEwMTIwOTA1MDFaMBgxFjAUBgNV BAMTDTZhYzM2ODNlLTIyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClE2DuGuEzFBhPHRnsbFYJd/GhOqCLIjSKPorRzGp770JLYMD7UC6TLBEIYA2Q kuGEaQSmZ84lLA284jEfi4yTPDamd5D2gr0GLrRKV9Vu84Q+Ghrf22VXx1r5xys/ Yt7m60Tv55SzWY5dhYofYuMx5PXeAj7jZSymdhL8+tqtACpUmhbgf2Ui8sm5RWBN pXIzfeeJ1pFOv/KlnCbM9ZXhFYVpZURzrSh9x6W51XnMR1opGtVyUMXi17wXvgcx Z/GV1d7QI5m0BuiFmS19fjjuBNFI0G3bC5KiEU9r6Q8T8LEAyQS3AH17U9ZCbAX7 FXMV0mOgQTswHlbrfgf/4cRdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKy9g8QNF QUc/QOxFfg6AvftjuEUwHwYDVR0jBBgwFoAUZ3baH1fz652mWcNicdGV5tPOXEUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MzUyLzhFQjBDMUVDNzA0 QTExRjFCMzUwQUJDMjY4QTMwRkJDL1ozYmFIMWZ6NjUybVdjTmljZEdWNXRQT1hF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjNiYUgxZno2NTJtV2NOaWNkR1Y1dFBPWEVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 MzUyLzhFQjBDMUVDNzA0QTExRjFCMzUwQUJDMjY4QTMwRkJDL1ozYmFIMWZ6NjUy bVdjTmljZEdWNXRQT1hFVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDVWwOZGm7+jWT1agux9Pa44uBpxAOCw+mXPmAGE7TxtajCxnkZpwfEV6NhQYd q5tQ3vk5Cy9GbAWhYZNt1jLlTQf4DnZF/Gj8jm1zj+mvdEyqpYdUmbaPWdCURBBk AYwgtB76Y5lCnKn9woNVtossiN3PuH0zvYVdtom6mImZSGjreCtQ1wcPZwjb8FEv PsGb9RncWPl0Zsn+Hx/DOzWP2K4reNh+XqBjLApVA/3iSEDvTko45HbHLcESthJY EFSmuIfGoJqWTvz1DalX3LabMYxzXgytuXxh991V4l0tvYSGDFmBh4BSSd/iXjqP nHlgR8WpTxouR30GajZ0snSd -----END CERTIFICATE-----Generated at Wed Oct 7 09:31:56 2026 by rpki-client