$ rpki-client -vvvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: zDxgtCPKWdI/+DCjFMSBUs2cxv8udoNbNrUKL0fF5GM= Subject key identifier: 47:AE:BC:A0:D2:65:F8:5E:37:E5:CD:B1:D3:A3:48:9D:8B:F4:01:B4 Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0345 Signing time: Fri 09 Oct 2026 01:09:13 +0000 Manifest this update: Fri 09 Oct 2026 01:09:12 +0000 Manifest next update: Fri 16 Oct 2026 01:09:12 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: c8XHSyBMlju4V0T7l209kR3jpd9I8pOWKl96UENPKIE=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: F9A0wbG9NVz5Hpz2mCwKTslS2OQaqnT/r9honcurHU0=) 3: 9D48E6FA74A311F1A9A5878E8DA30FBC.roa (hash: CYnlQwJhOXPmNMNcyFoFVL+xq39QoxL8huvEcrt7zhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 01:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Oct 9 01:09:12 2026 GMT Not After : Oct 16 01:09:12 2026 GMT Subject: CN=6ac83eb9-2f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:76:7b:80:8f:42:5d:3b:f0:7c:36:08:30:33: e6:64:37:b2:be:60:71:7c:90:19:87:2f:21:60:e0: bb:a7:03:30:cc:4f:df:6f:cb:ef:15:b4:a6:9b:fc: d3:78:17:b0:37:7a:9c:e4:20:41:2e:f8:8e:d7:b6: 94:ed:fb:31:c9:43:17:b4:ba:3c:84:c8:88:e5:49: 1c:c1:d2:3e:17:64:04:a4:4b:2a:97:ae:71:5c:45: 2b:a1:28:11:16:5a:a4:57:03:8f:b7:ec:d9:27:ad: 4f:e6:f4:08:1e:83:d1:13:91:5f:07:88:5d:1b:c4: 7d:ca:65:43:fa:55:6b:c4:b2:03:03:6b:dd:63:f2: 0e:6b:0f:aa:cc:ce:92:d6:c1:ca:8c:e3:4c:0d:a2: 9f:8b:01:4c:41:d5:48:98:c0:a0:ba:39:a4:45:56: db:ec:d6:26:d8:d6:77:3e:ee:8c:bf:c4:df:e9:b8: 3c:29:12:12:dd:d7:af:8a:8f:44:5d:cb:c7:57:55: d7:45:bb:c8:ec:e2:be:c5:6d:7b:ee:ff:c5:42:23: 11:fa:d8:ff:36:04:b3:65:a2:64:bf:af:91:87:cd: 75:8c:a0:b3:96:4f:a9:d3:20:32:8f:d6:b4:ce:21: 17:42:9e:90:79:55:85:f2:3d:59:0f:6d:d0:e7:79: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AE:BC:A0:D2:65:F8:5E:37:E5:CD:B1:D3:A3:48:9D:8B:F4:01:B4 X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:06:72:98:3a:f6:cb:e9:c6:f8:b0:1d:d7:11:30:40:b8:cf: 64:14:64:9f:ae:8d:33:17:2a:21:7e:36:a2:9e:be:0a:b4:c0: e3:ff:3c:05:b6:bf:ce:0e:b2:fc:5d:a6:d0:f0:d8:fc:94:20: 22:74:42:b9:4d:c3:bd:ed:b0:2b:07:b1:a4:b7:df:10:b2:19: 89:fb:ea:f7:87:90:4d:4d:d1:e9:ce:37:b3:6b:40:b9:1b:8e: c3:a2:18:7a:6a:07:b4:1c:ce:26:7f:43:ac:49:fb:6d:29:fd: 62:e3:04:82:cf:64:58:fa:41:f6:48:31:33:17:85:2d:d9:ea: 11:b8:f3:b6:e5:9b:5c:16:38:51:bf:ba:4c:ce:e6:9f:3d:99: b3:db:bb:db:d0:15:a2:46:78:bf:ad:d0:1d:a7:96:5d:a8:8a: 02:7e:e7:57:e3:59:ab:03:2c:56:dd:c4:8d:b8:cd:60:1a:bb: 1b:ca:1f:72:79:f8:c3:1a:76:c2:cb:1f:13:9a:0c:f8:87:43: 5e:14:1c:24:f7:e9:74:8e:e7:68:77:ea:a6:0e:13:e4:3d:59: 5d:57:8e:77:35:25:cb:71:d6:bb:b8:a8:81:c4:74:86:8d:b6: 02:3a:97:7a:a0:38:93:c6:db:0f:e3:cd:c3:d2:c8:19:82:ad: 32:11:df:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjYxMDA5MDEwOTEyWhcNMjYxMDE2MDEwOTEyWjAYMRYwFAYD VQQDEw02YWM4M2ViOS0yZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHZ7gI9CXTvwfDYIMDPmZDeyvmBxfJAZhy8hYOC7pwMwzE/fb8vvFbSmm/zT eBewN3qc5CBBLviO17aU7fsxyUMXtLo8hMiI5UkcwdI+F2QEpEsql65xXEUroSgR FlqkVwOPt+zZJ61P5vQIHoPRE5FfB4hdG8R9ymVD+lVrxLIDA2vdY/IOaw+qzM6S 1sHKjONMDaKfiwFMQdVImMCgujmkRVbb7NYm2NZ3Pu6Mv8Tf6bg8KRIS3devio9E XcvHV1XXRbvI7OK+xW177v/FQiMR+tj/NgSzZaJkv6+Rh811jKCzlk+p0yAyj9a0 ziEXQp6QeVWF8j1ZD23Q53nDIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeuvKDS ZfheN+XNsdOjSJ2L9AG0MB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARAZymDr2y+nG+LAd1xEwQLjPZBRkn66NMxcqIX42op6+CrTA4/88Bba/zg6y /F2m0PDY/JQgInRCuU3Dve2wKwexpLffELIZifvq94eQTU3R6c43s2tAuRuOw6IY emoHtBzOJn9DrEn7bSn9YuMEgs9kWPpB9kgxMxeFLdnqEbjztuWbXBY4Ub+6TM7m nz2Zs9u729AVokZ4v63QHaeWXaiKAn7nV+NZqwMsVt3EjbjNYBq7G8ofcnn4wxp2 wssfE5oM+IdDXhQcJPfpdI7naHfqpg4T5D1ZXVeOdzUly3HWu7iogcR0ho22AjqX eqA4k8bbD+PNw9LIGYKtMhHfCg== -----END CERTIFICATE-----Generated at Fri Oct 9 23:35:37 2026 by rpki-client