$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: XS7B9LpIY2hqrhTxf7VdL1PbdewD1I/WIOdkUFT2gxo= Subject key identifier: C5:B5:58:21:C8:2B:AE:A9:39:13:1E:C9:E7:0F:74:AC:20:18:76:21 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2E5A Signing time: Tue 06 Oct 2026 15:30:09 +0000 Manifest this update: Tue 06 Oct 2026 15:30:09 +0000 Manifest next update: Tue 13 Oct 2026 15:30:09 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: WipPdWWxy7niS/F1tmgjiudSOzoW8ukMBS14aP6LQKM=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11904 (0x2e80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Oct 6 15:30:09 2026 GMT Not After : Oct 13 15:30:09 2026 GMT Subject: CN=6ac51401-3d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:e3:2f:57:e1:fe:f3:07:3f:70:b7:bc:b7: fe:e5:f5:a8:46:83:a0:af:73:2c:4d:66:e7:2b:64: f7:09:87:c8:70:f7:d5:87:1f:3c:c9:9b:81:7a:5a: bf:fd:2d:d4:02:49:8a:a1:c5:ec:d7:ff:2d:7f:3a: 3f:4f:20:04:a7:c1:42:73:d6:4a:e8:48:b8:53:a5: 5e:f9:2c:ab:e9:e9:3d:37:db:0a:76:de:0c:16:8e: 7a:31:3e:80:c6:e3:7e:13:2c:46:50:8c:c2:b7:86: 76:4f:f5:d5:ee:52:af:e6:5d:2b:15:48:5f:10:75: 28:c5:b8:c6:5a:07:64:4f:e5:64:3b:e8:e2:80:ec: eb:c2:85:c5:d1:f1:7a:e9:b2:e9:3e:5a:9d:ed:72: 54:98:7c:cf:30:27:71:1e:cc:2f:d3:b8:19:8b:cc: 0d:2b:aa:6b:e9:c3:de:6c:24:75:8c:4b:da:b7:c1: b3:f1:bd:8d:29:d0:71:b0:30:b7:4a:fe:07:77:a3: 93:3b:4e:11:26:68:3e:67:76:08:fa:b5:aa:e5:9f: 9b:fe:35:c7:a3:8a:02:2e:8e:3f:02:0d:4e:12:d7: 6f:68:6f:4d:5f:e0:26:ae:3b:8c:92:30:cf:81:18: 32:d7:48:8d:0f:56:07:bf:5a:e3:47:ba:1b:85:0d: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:58:21:C8:2B:AE:A9:39:13:1E:C9:E7:0F:74:AC:20:18:76:21 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b7:14:cf:3a:5c:5f:8c:c7:d2:ed:80:3b:90:94:83:71:50: d9:33:a3:86:26:49:cf:85:da:d0:aa:0c:36:e1:ef:e8:ba:97: e1:83:56:97:04:6d:63:f9:73:4e:5b:ef:e9:4f:61:a3:ad:23: 34:79:0c:da:b8:3d:9d:ca:7d:04:31:ba:00:df:86:2e:da:00: 43:53:9d:da:35:e6:7c:47:8e:04:34:ce:09:fc:26:51:61:7f: 9f:a2:ad:72:84:fe:bf:52:d7:36:3a:6e:68:98:b4:fe:21:71: d1:bb:e1:74:c6:6c:3b:12:e3:a1:41:8e:63:66:d3:1f:ec:80: 76:7d:76:fc:c3:e2:36:b2:4f:1d:6c:f0:83:93:d9:1c:80:df: 2f:42:f2:f7:b9:e0:a4:a0:85:69:2b:10:b7:9d:33:e6:37:15: 81:23:6b:34:95:0c:eb:9d:e0:65:ce:7d:24:72:28:c1:b9:dd: 6a:da:c4:da:8e:4b:6a:98:89:ce:14:74:da:3c:cb:a6:2b:a5: 4e:ac:e0:32:0c:1a:db:f6:14:6f:fe:19:d1:d4:d9:e1:e0:9f: 14:f9:08:26:e0:7b:18:5c:b9:de:be:21:f5:9b:35:15:61:e6: da:77:f6:27:60:08:53:7c:4d:bf:f4:01:35:c0:88:7b:04:6e: 96:4c:4a:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYxMDA2MTUzMDA5WhcNMjYxMDEzMTUzMDA5WjAYMRYwFAYD VQQDEw02YWM1MTQwMS0zZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1zjL1fh/vMHP3C3vLf+5fWoRoOgr3MsTWbnK2T3CYfIcPfVhx88yZuBelq/ /S3UAkmKocXs1/8tfzo/TyAEp8FCc9ZK6Ei4U6Ve+Syr6ek9N9sKdt4MFo56MT6A xuN+EyxGUIzCt4Z2T/XV7lKv5l0rFUhfEHUoxbjGWgdkT+VkO+jigOzrwoXF0fF6 6bLpPlqd7XJUmHzPMCdxHswv07gZi8wNK6pr6cPebCR1jEvat8Gz8b2NKdBxsDC3 Sv4Hd6OTO04RJmg+Z3YI+rWq5Z+b/jXHo4oCLo4/Ag1OEtdvaG9NX+AmrjuMkjDP gRgy10iND1YHv1rjR7obhQ0ihwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMW1WCHI K66pORMeyecPdKwgGHYhMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbcUzzpcX4zH0u2AO5CUg3FQ2TOjhiZJz4Xa0KoMNuHv6LqX4YNWlwRtY/lz Tlvv6U9ho60jNHkM2rg9ncp9BDG6AN+GLtoAQ1Od2jXmfEeOBDTOCfwmUWF/n6Kt coT+v1LXNjpuaJi0/iFx0bvhdMZsOxLjoUGOY2bTH+yAdn12/MPiNrJPHWzwg5PZ HIDfL0Ly97ngpKCFaSsQt50z5jcVgSNrNJUM653gZc59JHIowbndatrE2o5LapiJ zhR02jzLpiulTqzgMgwa2/YUb/4Z0dTZ4eCfFPkIJuB7GFy53r4h9Zs1FWHm2nf2 J2AIU3xNv/QBNcCIewRulkxKGw== -----END CERTIFICATE-----Generated at Thu Oct 8 15:49:50 2026 by rpki-client