$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: pSbpYzTYUIHFYm1Ztfm9DplFasdVxgVqFqHZJ5FWBiQ= Subject key identifier: 98:E2:CE:14:36:2E:E1:8A:0C:FE:D6:2C:6C:3B:C7:D3:71:42:F8:7C Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0D4A Signing time: Wed 28 Oct 2026 18:23:27 +0000 Manifest this update: Wed 28 Oct 2026 18:23:27 +0000 Manifest next update: Wed 04 Nov 2026 18:23:27 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: ELJnG02kiMMAw/nROt/GOGT18CLcRJtmDg3f+lZo/UY=) 2: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Oj89BVTbff35iiUEgDKh/2E91FVnzurxC9Bnk1Qy+WY=) 3: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: FYuJrC31PU9aboeDs/Zo/WR1Zd9S0N3nIbn61WOZ2kE=) 4: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: fsfmLYQjCYyXbWH64txVnYTeAdLVUPvTMFUvd9WCSAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Oct 28 18:23:27 2026 GMT Not After : Nov 4 18:23:27 2026 GMT Subject: CN=6ae23d9f-8de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4e:dc:f8:58:a5:34:a8:98:ec:3e:58:53:9e: e2:98:37:f6:51:92:37:6a:26:00:ff:1e:e3:e0:c7: e8:d7:55:9b:c4:27:c5:71:05:a4:2c:81:3b:a9:6d: 93:00:c7:b8:b3:81:86:b3:1c:d2:a2:a9:02:66:25: 3d:19:52:43:c4:b0:8f:76:5a:7e:0a:cc:e0:b2:12: 02:96:21:dd:30:4b:8c:9c:33:1f:0f:51:a2:88:1d: 05:16:d5:99:6d:ad:1a:50:3f:c6:38:02:f8:9b:4f: 45:53:9f:b0:2c:af:05:f0:ae:6c:d5:75:c1:c5:77: c9:a0:01:71:ab:48:23:14:e2:7c:1d:3b:bf:34:de: a5:e5:4c:42:5e:5f:04:f7:f7:7b:15:da:ef:c2:7b: 1c:8b:92:d9:28:36:2c:71:e6:80:01:99:e6:b9:32: 67:e2:a4:75:8a:21:6e:37:06:5f:ef:df:9c:f7:d7: f1:52:b4:d2:41:a6:ff:b8:20:e4:75:36:aa:1e:ef: b6:0f:45:bf:2f:33:6d:7c:1b:b8:10:c1:fd:a3:8f: 00:ed:bf:82:34:14:11:98:7e:10:f5:71:fe:8e:a5: 1f:f6:45:d9:68:c3:c1:0e:a5:80:a0:60:83:1b:27: 58:60:e6:bd:4a:02:81:7c:c2:8a:06:15:62:f8:5f: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:CE:14:36:2E:E1:8A:0C:FE:D6:2C:6C:3B:C7:D3:71:42:F8:7C X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ee:f6:7d:5b:87:1a:a4:92:d9:e6:04:24:e3:bd:7e:1b:c7: 80:68:ba:6a:ad:e8:be:e1:3b:f7:f3:c5:2d:1e:98:b0:b8:37: ac:da:8c:e3:cd:7c:cf:32:e1:40:7e:08:d9:34:c5:af:bc:79: 2d:77:d6:56:c4:1d:d3:97:35:ea:a4:5a:bf:c7:0f:62:ce:63: 21:ef:e8:5d:75:12:bd:12:97:e5:35:b1:c4:f8:1a:4f:bb:01: 8b:05:a4:c5:d1:18:51:ef:f0:74:00:7e:49:be:eb:98:58:b4: 74:1b:4b:3b:0b:11:b4:e6:43:7b:1a:8f:b8:be:af:ea:57:15: b4:fc:57:10:f2:53:b0:84:ce:16:bf:e9:a4:ef:de:ee:d2:cd: 57:b2:82:90:18:02:b2:0d:82:d8:37:f8:47:f4:c2:7d:b1:be: b1:44:dd:0c:5e:aa:29:9e:e7:f4:f9:55:9f:03:9a:29:f7:e0: 10:e9:02:7f:8e:95:0f:15:23:a1:86:da:52:88:d3:c2:72:69: 85:c1:03:aa:8a:19:12:0c:bb:63:35:0d:b3:c3:f8:bc:8d:fd: 48:2b:0d:1e:12:68:bb:f8:4a:d7:be:7a:96:d6:d6:27:db:0a: 00:b1:dd:ba:e3:0b:5e:52:c4:08:fd:01:d8:a9:c7:04:dc:48: b8:97:e4:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYxMDI4MTgyMzI3WhcNMjYxMTA0MTgyMzI3WjAYMRYwFAYD VQQDEw02YWUyM2Q5Zi04ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA707c+FilNKiY7D5YU57imDf2UZI3aiYA/x7j4Mfo11WbxCfFcQWkLIE7qW2T AMe4s4GGsxzSoqkCZiU9GVJDxLCPdlp+CszgshICliHdMEuMnDMfD1GiiB0FFtWZ ba0aUD/GOAL4m09FU5+wLK8F8K5s1XXBxXfJoAFxq0gjFOJ8HTu/NN6l5UxCXl8E 9/d7Fdrvwnsci5LZKDYsceaAAZnmuTJn4qR1iiFuNwZf79+c99fxUrTSQab/uCDk dTaqHu+2D0W/LzNtfBu4EMH9o48A7b+CNBQRmH4Q9XH+jqUf9kXZaMPBDqWAoGCD GydYYOa9SgKBfMKKBhVi+F/FgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjizhQ2 LuGKDP7WLGw7x9NxQvh8MB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMO72fVuHGqSS2eYEJOO9fhvHgGi6aq3ovuE79/PFLR6YsLg3rNqM4818zzLh QH4I2TTFr7x5LXfWVsQd05c16qRav8cPYs5jIe/oXXUSvRKX5TWxxPgaT7sBiwWk xdEYUe/wdAB+Sb7rmFi0dBtLOwsRtOZDexqPuL6v6lcVtPxXEPJTsITOFr/ppO/e 7tLNV7KCkBgCsg2C2Df4R/TCfbG+sUTdDF6qKZ7n9PlVnwOaKffgEOkCf46VDxUj oYbaUojTwnJphcEDqooZEgy7YzUNs8P4vI39SCsNHhJou/hK1756ltbWJ9sKALHd uuMLXlLECP0B2KnHBNxIuJfkWQ== -----END CERTIFICATE-----Generated at Fri Oct 30 04:09:46 2026 by rpki-client