$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: RB2DYBw4YOGaBKAgtzlrgAXww6DeC1sne7OzNFDMbmU= Subject key identifier: EA:EF:EB:9F:5E:C8:62:7A:17:00:B6:12:D4:75:E5:C6:21:21:9E:21 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 0223 Signing time: Thu 29 Oct 2026 03:35:56 +0000 Manifest this update: Thu 29 Oct 2026 03:35:56 +0000 Manifest next update: Thu 05 Nov 2026 03:35:56 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: 9ffcNti86OCpEx9JFZV26MBi7/iv66dO04qx9MSDJ+k=) 2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: QWdjMa362skAeBNvgxAJXWxflCE9lyIiKCxVK/zBF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Oct 29 03:35:56 2026 GMT Not After : Nov 5 03:35:56 2026 GMT Subject: CN=6ae2bf1c-3bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:c3:43:c5:5f:7b:63:14:21:be:e1:49:b0: ad:fc:21:be:9d:c1:25:52:f2:10:89:c3:92:92:6d: 21:80:06:1b:3e:ac:52:a9:8b:26:bc:79:52:9b:01: c8:b3:d5:cc:5f:9e:15:f2:ad:15:dc:71:b3:99:50: 2c:26:54:ab:aa:59:4b:02:50:bd:d1:a3:c2:54:e9: cb:90:c0:31:3a:83:f0:34:75:9a:ae:1c:d0:6d:40: 93:61:0b:6d:dc:bc:77:1b:2a:80:7e:f0:0b:6e:62: c7:50:66:53:76:66:00:e0:d1:58:71:bb:8d:ee:77: 11:fb:7f:da:de:82:18:4e:03:5f:c6:6e:bf:4b:33: 8c:0a:3b:e5:c5:02:ce:c5:35:f9:40:27:d9:03:7e: fc:3e:08:29:84:60:1b:d7:c0:af:59:ab:59:73:d5: 07:b9:8a:dc:5c:55:7f:7b:b1:fe:50:85:a4:51:e1: 51:d6:b9:b5:1c:ae:6b:31:2f:cc:b8:e1:bf:a6:8c: 03:74:29:c4:57:ca:c9:85:66:bd:40:5d:2c:8f:34: c0:29:18:c2:b8:2b:0e:85:fe:20:4d:a0:fb:27:2c: b9:d5:c3:8a:3d:61:5e:15:fa:d5:ce:d9:56:92:34: d4:44:8e:bb:15:e2:7e:a0:40:05:e4:f8:37:ed:32: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EF:EB:9F:5E:C8:62:7A:17:00:B6:12:D4:75:E5:C6:21:21:9E:21 X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:61:6e:bd:99:d8:3a:1d:85:ec:dd:25:22:33:a9:cb:d3:2b: 66:3a:ff:8d:d5:9e:8d:1f:47:9f:df:9b:2f:ad:6c:30:b5:c3: c1:02:5b:5f:ce:04:eb:05:fc:08:c6:12:08:75:d9:9b:c1:ae: 92:9e:67:4c:c1:69:dc:56:45:09:03:08:41:22:98:8a:7d:a7: b2:99:9a:cd:b8:91:87:a7:1d:92:69:a8:70:e3:54:b4:ab:0e: 25:3a:5a:d5:a9:02:8c:be:16:04:e2:4a:83:11:89:37:82:07: 52:4d:39:ed:f9:75:9e:4b:f1:20:3f:d0:97:76:a4:f8:72:70: a4:5f:2b:d5:73:57:5a:b2:2e:23:6e:74:d7:ef:d8:2c:ca:1b: 52:37:d5:15:db:aa:9f:c2:f9:93:05:14:74:64:fa:aa:0b:6a: 56:64:c8:7c:56:a3:4d:f0:d2:06:3c:34:ae:90:5f:89:ea:b0: 40:2e:b1:59:12:27:4b:8c:b4:37:a1:25:fd:7b:8d:76:70:cb: 14:c0:49:5d:d4:24:b0:73:16:8d:7e:f3:f6:15:32:33:62:7c: 4b:8e:75:9c:77:fc:96:be:fb:79:f2:bf:38:63:b1:b3:67:34: a6:13:74:65:4e:05:cc:55:ef:90:f9:fe:37:99:85:ed:97:69: 55:87:4c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjYxMDI5MDMzNTU2WhcNMjYxMTA1MDMzNTU2WjAYMRYwFAYD VQQDEw02YWUyYmYxYy0zYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrjDQ8Vfe2MUIb7hSbCt/CG+ncElUvIQicOSkm0hgAYbPqxSqYsmvHlSmwHI s9XMX54V8q0V3HGzmVAsJlSrqllLAlC90aPCVOnLkMAxOoPwNHWarhzQbUCTYQtt 3Lx3GyqAfvALbmLHUGZTdmYA4NFYcbuN7ncR+3/a3oIYTgNfxm6/SzOMCjvlxQLO xTX5QCfZA378PggphGAb18CvWatZc9UHuYrcXFV/e7H+UIWkUeFR1rm1HK5rMS/M uOG/powDdCnEV8rJhWa9QF0sjzTAKRjCuCsOhf4gTaD7Jyy51cOKPWFeFfrVztlW kjTURI67FeJ+oEAF5Pg37TLr4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrv659e yGJ6FwC2EtR15cYhIZ4hMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJmFuvZnYOh2F7N0lIjOpy9MrZjr/jdWejR9Hn9+bL61sMLXDwQJbX84E6wX8 CMYSCHXZm8Gukp5nTMFp3FZFCQMIQSKYin2nspmazbiRh6cdkmmocONUtKsOJTpa 1akCjL4WBOJKgxGJN4IHUk057fl1nkvxID/Ql3ak+HJwpF8r1XNXWrIuI2501+/Y LMobUjfVFduqn8L5kwUUdGT6qgtqVmTIfFajTfDSBjw0rpBfieqwQC6xWRInS4y0 N6El/XuNdnDLFMBJXdQksHMWjX7z9hUyM2J8S451nHf8lr77efK/OGOxs2c0phN0 ZU4FzFXvkPn+N5mF7ZdpVYdMsw== -----END CERTIFICATE-----Generated at Thu Oct 29 22:54:23 2026 by rpki-client