$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft File: ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft (raw, json) Hash identifier: gHFKagOXWXVHCC9jgO7V52e2IwupXw/HmTFmz7Ixdp8= Subject key identifier: 40:F7:C7:42:40:46:1B:A3:FC:46:EE:30:EF:1A:C7:30:A0:11:00:A7 Authority key identifier: 66:45:0F:17:D8:6D:96:CA:E6:54:00:22:28:2B:03:E7:21:29:9E:CC Certificate issuer: /CN=A918E173/serialNumber=66450F17D86D96CAE6540022282B03E721299ECC Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft Manifest number: 29 Signing time: Sun 25 Oct 2026 09:14:59 +0000 Manifest this update: Sun 25 Oct 2026 09:14:59 +0000 Manifest next update: Sun 01 Nov 2026 09:14:59 +0000 Files and hashes: 1: ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl (hash: 7izyXnmNamqGlipJZ0ns0nb0Ty4GaLuOBsq9/+IQVIE=) 2: FC6FC6A29FE711F18B94CE765F11F970.roa (hash: g2f+EoYHFG+LFRIeeVX6NmZdCaR6P/6t2a9QOrCB+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E173, serialNumber=66450F17D86D96CAE6540022282B03E721299ECC Validity Not Before: Oct 25 09:14:59 2026 GMT Not After : Nov 1 09:14:59 2026 GMT Subject: CN=6addc893-fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:5d:13:8b:ec:57:70:cc:ab:a6:b3:75:f8: 90:92:1c:ec:2c:b6:29:e2:9d:e8:ca:91:78:12:e1: e0:ee:d8:61:5f:9f:a0:b3:f8:34:cd:73:13:80:6b: c9:34:97:86:97:c7:1a:7d:8e:08:3e:6d:f0:7d:2c: 36:fb:f7:04:97:ce:35:a5:c5:41:b8:a8:54:6b:3f: 44:21:5b:a8:77:46:b0:1e:dc:45:86:f3:e0:ac:b9: 1e:84:82:7d:b7:1e:18:d3:80:89:0c:fe:f9:a1:e9: 72:3e:e8:da:27:68:7e:95:c2:10:1b:3f:8c:57:59: 60:be:2a:df:40:58:0d:38:50:91:02:e5:0f:d0:21: 75:d6:67:91:2d:65:2e:01:0e:04:09:12:df:26:62: 7e:f2:1c:be:d0:1b:54:6e:a8:4f:c8:f1:56:94:c5: cd:1e:c6:2d:3f:20:c6:53:c3:ad:ae:cb:6c:c0:7b: 90:9d:5d:99:3d:eb:2e:d1:95:22:90:64:3e:38:2d: 25:f7:7c:ab:9c:86:75:ce:b6:c4:d2:a3:89:08:39: 44:37:a6:d1:b6:b9:cf:f1:a2:10:b4:ba:ba:80:0f: a5:3d:cb:77:b1:93:35:86:d7:0d:92:1d:93:3b:df: 7b:c6:ff:3e:0e:e3:19:59:fd:1a:3f:d0:7a:87:19: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F7:C7:42:40:46:1B:A3:FC:46:EE:30:EF:1A:C7:30:A0:11:00:A7 X509v3 Authority Key Identifier: keyid:66:45:0F:17:D8:6D:96:CA:E6:54:00:22:28:2B:03:E7:21:29:9E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6d:10:89:2d:31:8e:2c:a1:4c:ae:67:20:52:a6:67:02:7f: 69:bc:8d:99:a1:ed:02:ab:bb:74:76:f7:55:3b:f0:78:80:24: 61:08:77:0c:ab:ca:03:ed:cc:a0:90:78:f8:b9:b3:29:e3:5c: 84:1f:52:ba:b0:d5:c0:34:84:fc:64:b4:cc:70:3d:90:24:8f: 63:5f:a4:0d:c5:8e:8c:5a:70:b7:3d:14:03:b6:a9:b4:39:eb: 79:61:de:a5:23:ea:b5:e5:e6:78:ef:ea:0d:c5:f6:17:38:e3: 6d:e2:d2:6a:ab:33:77:ac:67:3a:95:7f:33:47:da:4d:d6:cc: 98:5d:c6:74:50:f2:2c:c9:d7:63:6b:5d:40:4e:d5:c9:2f:51: 69:c7:de:d4:83:d5:ed:ca:91:ed:2a:05:c2:6b:b1:d7:74:4d: 69:14:40:50:11:1b:10:bd:10:27:db:25:f8:44:25:aa:75:6a: b8:8d:6d:04:22:08:70:96:85:a4:b7:da:93:50:83:96:4c:b7: 26:5e:4c:42:4a:e1:e3:f8:3a:b6:75:30:1b:06:cb:61:2f:74: a4:77:c1:d8:37:14:c2:20:42:0c:89:41:a1:1c:70:17:94:33: 0a:4c:73:7b:d9:77:67:06:8f:5c:9c:62:92:28:f7:9e:3f:9b: 97:4d:ed:86 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTE3MzExMC8GA1UEBRMoNjY0NTBGMTdEODZEOTZDQUU2NTQwMDIyMjgyQjAzRTcy MTI5OUVDQzAeFw0yNjEwMjUwOTE0NTlaFw0yNjExMDEwOTE0NTlaMBgxFjAUBgNV BAMTDTZhZGRjODkzLWZjM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDREl0Ti+xXcMyrprN1+JCSHOwstininejKkXgS4eDu2GFfn6Cz+DTNcxOAa8k0 l4aXxxp9jgg+bfB9LDb79wSXzjWlxUG4qFRrP0QhW6h3RrAe3EWG8+CsuR6Egn23 HhjTgIkM/vmh6XI+6NonaH6VwhAbP4xXWWC+Kt9AWA04UJEC5Q/QIXXWZ5EtZS4B DgQJEt8mYn7yHL7QG1RuqE/I8VaUxc0exi0/IMZTw62uy2zAe5CdXZk96y7RlSKQ ZD44LSX3fKuchnXOtsTSo4kIOUQ3ptG2uc/xohC0urqAD6U9y3exkzWG1w2SHZM7 33vG/z4O4xlZ/Ro/0HqHGYm9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQPfHQkBG G6P8Ru4w7xrHMKARAKcwHwYDVR0jBBgwFoAUZkUPF9htlsrmVAAiKCsD5yEpnsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMTczL0RBOUZCQUY4OUU0 RjExRjE4QUZFQkFDMTYwMTFGOTcwL1prVVBGOWh0bHNybVZBQWlLQ3NENXlFcG5z dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmtVUEY5aHRsc3JtVkFBaUtDc0Q1eUVwbnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MTczL0RBOUZCQUY4OUU0RjExRjE4QUZFQkFDMTYwMTFGOTcwL1prVVBGOWh0bHNy bVZBQWlLQ3NENXlFcG5zdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANbRCJLTGOLKFMrmcgUqZnAn9pvI2Zoe0Cq7t0dvdVO/B4gCRhCHcMq8oD7cyg kHj4ubMp41yEH1K6sNXANIT8ZLTMcD2QJI9jX6QNxY6MWnC3PRQDtqm0Oet5Yd6l I+q15eZ47+oNxfYXOONt4tJqqzN3rGc6lX8zR9pN1syYXcZ0UPIsyddja11ATtXJ L1Fpx97Ug9XtypHtKgXCa7HXdE1pFEBQERsQvRAn2yX4RCWqdWq4jW0EIghwloWk t9qTUIOWTLcmXkxCSuHj+Dq2dTAbBsthL3Skd8HYNxTCIEIMiUGhHHAXlDMKTHN7 2XdnBo9cnGKSKPeeP5uXTe2G -----END CERTIFICATE-----Generated at Sun Oct 25 23:08:37 2026 by rpki-client