$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: XjIVDF3c0gKc8vpiSc8yRKoQro+9c6J4VbPTdqnILVg= Subject key identifier: 2A:22:1F:1F:AF:3C:14:B4:10:09:26:7C:E8:49:23:C1:3D:47:C7:91 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 0189 Signing time: Mon 09 Nov 2026 04:44:24 +0000 Manifest this update: Mon 09 Nov 2026 04:44:24 +0000 Manifest next update: Mon 16 Nov 2026 04:44:24 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: 7ZkD/H42kSzwbYjgvZQwO2kSTIpz13rRJNg0GTUXmXs=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 29N0/Pto5Qtfpphej2/9iShMt++zfcDr+xCewBLs+Zs=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: oEnlXV7mYmXvv738neoWp88oLRBr1QzlCLxiAzbuFig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Nov 9 04:44:24 2026 GMT Not After : Nov 16 04:44:24 2026 GMT Subject: CN=6af14fa8-2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:5a:6a:ba:30:3b:b5:1a:63:dc:0f:36:b7: ce:c2:4e:ca:41:5c:44:d5:2c:aa:b7:8d:43:a5:21: c1:63:ed:39:68:ba:9f:5f:df:e7:3e:6c:df:3d:43: 03:4e:f5:62:a8:ec:bb:8d:6f:25:80:0b:47:06:08: b8:40:0f:7c:1f:44:90:0e:99:86:ec:53:25:51:43: 27:e4:ad:94:45:7f:b8:17:02:47:25:8e:75:b7:3a: eb:c7:3c:04:bc:b1:9a:cb:76:c9:a4:22:53:d6:a2: e0:0a:1a:0b:7e:b2:76:f5:1a:2e:14:d2:14:46:26: 9d:7e:ae:1f:99:66:b6:b9:cc:04:33:86:5a:b3:c3: f3:1a:d7:fe:1a:be:37:19:83:33:13:8a:50:3a:3e: 2b:0d:61:82:1f:03:39:ad:6f:1f:54:18:89:49:8e: f1:e0:49:17:57:19:d7:b7:b2:48:6c:b1:f3:45:ab: a5:3b:78:7a:b0:13:88:bf:3e:e4:d4:d5:b8:86:77: de:2a:e1:5f:0e:32:14:0e:97:f3:d1:1b:00:7a:14: 84:c5:5e:02:d9:ac:4b:fe:6e:e1:49:af:f5:b4:98: a7:6d:cb:6c:98:a4:ef:93:4f:03:a3:0e:db:fe:12: cc:3f:78:68:31:d2:25:89:66:c4:50:a7:af:d7:f4: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:1F:1F:AF:3C:14:B4:10:09:26:7C:E8:49:23:C1:3D:47:C7:91 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a3:09:45:4e:ea:4b:57:b8:f3:60:20:ac:7b:ca:b9:28:4c: 95:29:3f:f8:b7:f0:a2:f9:ee:a1:e5:57:46:c9:12:87:43:51: 06:59:38:2c:82:b3:0e:27:fc:c9:b4:2f:e8:06:af:c5:06:c6: c7:da:b0:fd:f8:28:45:ac:41:6e:d1:a5:ee:b5:9e:a8:20:c4: eb:b8:14:77:29:b7:3c:3e:17:dd:a5:1a:c5:33:2c:38:33:d2: 4f:c2:a0:1f:79:e1:ae:0f:9e:ac:d8:97:8b:bf:f4:8a:77:ce: de:17:94:f7:4c:62:f0:38:0c:4f:c5:d9:a6:9c:f2:23:5d:f7: 40:ef:ca:5a:1e:0d:c1:2e:18:79:aa:ba:45:af:8d:cb:77:26: c7:07:42:ce:c9:e8:55:58:a8:e7:33:4c:c4:a1:fe:b3:f3:01: f6:fd:e2:a1:c9:55:e5:9d:9b:12:9e:b8:00:41:7b:c7:32:e6: 9c:d6:c4:8b:2d:7c:0f:4e:20:ca:b2:a0:f7:18:26:d2:6f:63: 85:d4:a7:a6:c6:f4:8a:d4:85:15:8f:24:7a:21:5f:dd:5f:50: 4f:6c:5d:00:65:24:aa:b1:16:91:a8:32:23:e6:51:aa:c6:da: 76:19:dc:66:b6:c5:96:ed:49:a5:c5:14:9f:05:d7:58:ae:ab: e3:ec:05:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYxMTA5MDQ0NDI0WhcNMjYxMTE2MDQ0NDI0WjAYMRYwFAYD VQQDEw02YWYxNGZhOC0yYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVRaarowO7UaY9wPNrfOwk7KQVxE1Syqt41DpSHBY+05aLqfX9/nPmzfPUMD TvViqOy7jW8lgAtHBgi4QA98H0SQDpmG7FMlUUMn5K2URX+4FwJHJY51tzrrxzwE vLGay3bJpCJT1qLgChoLfrJ29RouFNIURiadfq4fmWa2ucwEM4Zas8PzGtf+Gr43 GYMzE4pQOj4rDWGCHwM5rW8fVBiJSY7x4EkXVxnXt7JIbLHzRaulO3h6sBOIvz7k 1NW4hnfeKuFfDjIUDpfz0RsAehSExV4C2axL/m7hSa/1tJinbctsmKTvk08Dow7b /hLMP3hoMdIliWbEUKev1/T9oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoiHx+v PBS0EAkmfOhJI8E9R8eRMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARaMJRU7qS1e482AgrHvKuShMlSk/+LfwovnuoeVXRskSh0NRBlk4LIKzDif8 ybQv6AavxQbGx9qw/fgoRaxBbtGl7rWeqCDE67gUdym3PD4X3aUaxTMsODPST8Kg H3nhrg+erNiXi7/0infO3heU90xi8DgMT8XZppzyI133QO/KWh4NwS4Yeaq6Ra+N y3cmxwdCzsnoVVio5zNMxKH+s/MB9v3ioclV5Z2bEp64AEF7xzLmnNbEiy18D04g yrKg9xgm0m9jhdSnpsb0itSFFY8keiFf3V9QT2xdAGUkqrEWkagyI+ZRqsbadhnc ZrbFlu1JpcUUnwXXWK6r4+wFsQ== -----END CERTIFICATE-----Generated at Tue Nov 10 20:08:23 2026 by rpki-client