$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: 2xkkJIkhapsRXJ9FM/3lzzyM7J0CjIwg4GuzQ94KrpE= Subject key identifier: F0:49:6B:71:81:45:14:9E:AE:42:73:AE:1D:E7:0A:3B:B9:83:21:2A Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 021C Signing time: Fri 18 Sep 2026 16:43:38 +0000 Manifest this update: Fri 18 Sep 2026 16:43:38 +0000 Manifest next update: Fri 25 Sep 2026 16:43:38 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: TJZjhvKIIVZZlv7jvjwsWVohe1X9nS3P2yp0ipkB6kY=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Sep 18 16:43:38 2026 GMT Not After : Sep 25 16:43:38 2026 GMT Subject: CN=6aad6a3a-a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:59:fd:00:22:a3:fb:cf:2e:06:7a:45:70: 6a:4c:f1:14:a2:01:01:fc:9c:6d:16:62:2b:c2:30: 40:d7:34:67:d9:1f:7a:d3:f0:ef:de:ff:a5:07:95: af:0c:87:56:2b:e3:c0:7b:be:87:79:82:77:f8:c5: b0:74:62:c9:e9:c6:3c:6b:f1:5f:5e:89:bf:5c:28: 04:7f:9e:c0:0c:dc:08:47:01:5e:8e:88:20:bf:fb: fa:64:00:ce:77:6a:3e:d5:3e:d9:5b:75:11:97:9a: 49:2e:95:21:af:2a:61:73:ab:09:e6:20:04:c5:b7: 84:8d:9f:f5:df:93:b1:bf:d4:d7:b1:87:d2:17:8a: ea:1c:5d:ce:ad:f5:82:1e:98:2b:18:7e:0b:7c:b1: 7b:d9:64:93:29:d5:23:c4:93:2f:41:8f:9e:de:2a: 0e:c5:74:b4:19:00:b0:7c:87:8d:54:9d:ba:ab:a5: de:e8:1c:fc:04:be:67:0e:5e:93:93:a4:5c:a0:5a: 92:b2:1d:39:2d:a1:6c:a6:16:49:5c:3e:c4:be:ee: 17:34:4e:f8:0f:bc:ce:85:46:28:ec:7d:7c:35:f1: 0c:02:71:b0:45:78:8f:62:b8:de:af:c0:ba:a8:75: 6f:1c:31:d0:40:84:7a:69:db:24:81:e9:80:9a:81: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:49:6B:71:81:45:14:9E:AE:42:73:AE:1D:E7:0A:3B:B9:83:21:2A X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7a:9f:a0:0e:d0:f0:3b:1d:3b:75:49:d7:ea:0e:43:d6:a9: b0:fa:13:d4:60:7d:03:12:2c:cd:82:c1:34:43:5d:0f:3c:71: ba:d2:15:68:72:fe:53:9d:0d:b9:93:ba:c7:56:3a:0f:c1:6b: 1b:47:16:e8:6f:55:18:50:de:7e:9e:bc:15:f3:48:f5:33:a8: d9:cf:d9:31:e8:94:e0:43:4d:18:d7:cc:6f:dd:48:95:f2:be: bd:89:25:ef:03:46:02:45:71:b3:17:95:ce:ec:68:4d:7b:44: b5:40:83:e8:37:8c:2b:1e:06:a6:da:f5:e3:a6:33:30:8f:38: af:13:70:2e:b0:d1:f5:21:b9:a9:be:c4:24:82:33:61:5a:e3: 48:a5:29:a2:11:df:04:9e:8d:92:15:e4:f4:16:d2:96:24:40: 76:79:9a:5a:85:27:58:c9:7e:e9:a3:ad:c1:da:32:28:24:cf: 55:3d:a6:90:13:df:cc:dd:bd:32:3e:f1:61:21:1d:b9:4b:08: e5:c2:88:11:be:23:e6:53:a3:33:d8:41:a1:7a:1c:bf:ce:70: 7e:32:c0:09:82:d7:f5:b8:ee:ff:56:a3:b0:0c:38:1c:33:6a: 7d:32:13:3b:65:1c:dc:36:bc:d4:85:23:08:e6:e4:b0:41:8f: 47:ba:16:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjYwOTE4MTY0MzM4WhcNMjYwOTI1MTY0MzM4WjAYMRYwFAYD VQQDEw02YWFkNmEzYS1hOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30dZ/QAio/vPLgZ6RXBqTPEUogEB/JxtFmIrwjBA1zRn2R960/Dv3v+lB5Wv DIdWK+PAe76HeYJ3+MWwdGLJ6cY8a/FfXom/XCgEf57ADNwIRwFejoggv/v6ZADO d2o+1T7ZW3URl5pJLpUhryphc6sJ5iAExbeEjZ/135Oxv9TXsYfSF4rqHF3OrfWC HpgrGH4LfLF72WSTKdUjxJMvQY+e3ioOxXS0GQCwfIeNVJ26q6Xe6Bz8BL5nDl6T k6RcoFqSsh05LaFsphZJXD7Evu4XNE74D7zOhUYo7H18NfEMAnGwRXiPYrjer8C6 qHVvHDHQQIR6adskgemAmoE+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBJa3GB RRSerkJzrh3nCju5gyEqMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcnqfoA7Q8DsdO3VJ1+oOQ9apsPoT1GB9AxIszYLBNENdDzxxutIVaHL+U50N uZO6x1Y6D8FrG0cW6G9VGFDefp68FfNI9TOo2c/ZMeiU4ENNGNfMb91IlfK+vYkl 7wNGAkVxsxeVzuxoTXtEtUCD6DeMKx4Gptr146YzMI84rxNwLrDR9SG5qb7EJIIz YVrjSKUpohHfBJ6NkhXk9BbSliRAdnmaWoUnWMl+6aOtwdoyKCTPVT2mkBPfzN29 Mj7xYSEduUsI5cKIEb4j5lOjM9hBoXocv85wfjLACYLX9bju/1ajsAw4HDNqfTIT O2Uc3Da81IUjCObksEGPR7oW6A== -----END CERTIFICATE-----Generated at Sat Sep 19 08:46:30 2026 by rpki-client