$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: iw25M7KvjEwkoJR9ob+i/TLBp2uEwaCj7Q20YgP6vqw= Subject key identifier: 7E:DD:36:0D:38:CE:6E:F6:06:5D:9B:71:AF:82:A0:8E:36:E0:FF:D4 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 0167 Signing time: Sun 11 Oct 2026 05:33:25 +0000 Manifest this update: Sun 11 Oct 2026 05:33:24 +0000 Manifest next update: Sun 18 Oct 2026 05:33:24 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: iWBdTSgWGuloVzEiT9VNeVR5IBeB+6VKd8waxjA2J1E=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Oct 11 05:33:24 2026 GMT Not After : Oct 18 05:33:24 2026 GMT Subject: CN=6acb1fa5-85f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:fb:1e:8e:a0:cf:08:e0:e5:c7:db:b9:33: 67:41:59:be:a8:3a:f3:4d:53:8f:47:cd:e2:6a:e5: 7d:8b:d0:2f:fe:bf:ed:98:01:d1:12:60:e8:9a:e6: cf:7c:c5:68:41:47:3a:9f:f8:1b:be:f5:48:0b:3b: ca:de:1c:6a:1d:d8:3a:aa:1f:26:2f:03:af:0f:fa: d1:9b:da:85:51:7f:91:7f:d0:e9:58:9a:dc:0d:5f: 75:17:41:fe:f9:9c:44:5d:03:a1:4e:f5:b1:99:86: a2:8d:1e:66:e3:41:e8:52:bf:6c:9d:e0:5a:8a:f7: 83:93:e4:50:ba:75:13:29:16:9c:12:6e:32:d0:6e: 44:8d:8d:7e:72:38:75:61:34:58:37:d9:ed:e9:3f: 2f:75:e6:7c:ab:ab:27:15:83:b0:a0:b5:14:54:50: b0:fc:b4:29:0b:f8:af:50:4c:e7:37:0d:48:68:05: c1:2a:bf:6a:23:5b:8d:66:6d:3c:50:e0:e5:05:b2: 58:e1:23:d8:33:b2:52:30:f7:33:70:11:1f:35:69: 22:43:9d:d5:db:3f:3b:b1:e9:1e:c2:a4:16:f9:57: 31:6f:6e:94:e0:38:b6:33:45:78:c6:30:5d:b3:68: 45:31:41:43:5c:04:9f:d2:c6:cb:b3:31:7c:68:c8: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:36:0D:38:CE:6E:F6:06:5D:9B:71:AF:82:A0:8E:36:E0:FF:D4 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7b:bb:dc:a8:03:32:7f:70:36:f9:a6:c0:ad:6f:09:ff:14: 79:c0:c6:dd:c4:23:e3:0e:63:d1:40:1d:86:ed:bf:93:89:11: 9d:c3:c8:12:e2:41:c2:9b:e5:8b:fe:e2:d0:a5:94:b0:d6:11: 91:02:80:1c:7f:47:19:95:a9:3c:27:16:0d:95:bb:97:9f:5d: 46:2f:ed:ed:8f:0f:6a:5f:9a:f2:c8:9b:9a:b0:9f:ba:ad:39: 1c:d3:78:68:94:c0:5e:c2:bf:f8:a3:fa:06:51:db:86:cf:ba: 40:e4:2d:94:0a:07:61:50:74:ba:2c:a2:fb:b5:cc:2b:92:c0: 6b:5e:9c:64:f6:8d:b1:96:93:99:db:5f:a2:86:36:85:92:a3: e1:d6:36:fa:bc:8f:5d:48:8e:a8:6f:04:43:f4:f3:3b:a5:58: bb:3f:a1:b8:51:ee:ae:a2:6a:e3:a8:44:a1:fe:67:1a:71:c0: 4c:f2:b6:d7:5b:52:d4:69:f7:aa:07:45:2a:d1:10:c1:15:42: 1a:01:c5:71:58:30:37:a7:29:70:11:21:1c:f5:c8:fa:a4:89: 52:79:13:1f:14:af:a5:e7:86:9e:52:7c:77:4a:0b:bf:b1:13: 3c:da:c1:fe:36:74:e3:0a:55:3f:b8:c3:34:af:97:23:48:4e: 2c:fe:f5:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjYxMDExMDUzMzI0WhcNMjYxMDE4MDUzMzI0WjAYMRYwFAYD VQQDEw02YWNiMWZhNS04NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyX7Ho6gzwjg5cfbuTNnQVm+qDrzTVOPR83iauV9i9Av/r/tmAHREmDomubP fMVoQUc6n/gbvvVICzvK3hxqHdg6qh8mLwOvD/rRm9qFUX+Rf9DpWJrcDV91F0H+ +ZxEXQOhTvWxmYaijR5m40HoUr9sneBaiveDk+RQunUTKRacEm4y0G5EjY1+cjh1 YTRYN9nt6T8vdeZ8q6snFYOwoLUUVFCw/LQpC/ivUEznNw1IaAXBKr9qI1uNZm08 UODlBbJY4SPYM7JSMPczcBEfNWkiQ53V2z87sekewqQW+Vcxb26U4Di2M0V4xjBd s2hFMUFDXASf0sbLszF8aMhQ8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7dNg04 zm72Bl2bca+CoI424P/UMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYXu73KgDMn9wNvmmwK1vCf8UecDG3cQj4w5j0UAdhu2/k4kRncPIEuJBwpvl i/7i0KWUsNYRkQKAHH9HGZWpPCcWDZW7l59dRi/t7Y8Pal+a8sibmrCfuq05HNN4 aJTAXsK/+KP6BlHbhs+6QOQtlAoHYVB0uiyi+7XMK5LAa16cZPaNsZaTmdtfooY2 hZKj4dY2+ryPXUiOqG8EQ/TzO6VYuz+huFHurqJq46hEof5nGnHATPK211tS1Gn3 qgdFKtEQwRVCGgHFcVgwN6cpcBEhHPXI+qSJUnkTHxSvpeeGnlJ8d0oLv7ETPNrB /jZ04wpVP7jDNK+XI0hOLP71uQ== -----END CERTIFICATE-----Generated at Mon Oct 12 02:10:06 2026 by rpki-client