$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json) Hash identifier: DRwn6kMWzNTGOz+3NYHpGo0wRplL3lMKMAaQ+i3Ppwg= Subject key identifier: A9:5A:35:8C:16:84:82:1D:A0:29:98:86:B2:53:40:CC:7D:11:14:1A Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft Manifest number: A7 Signing time: Sat 03 Oct 2026 08:01:59 +0000 Manifest this update: Sat 03 Oct 2026 08:01:59 +0000 Manifest next update: Sat 10 Oct 2026 08:01:59 +0000 Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: kytB50QLdHI3AwB/E0F+/AuyfrNLbeJsK0GGV2Gl0s8=) 2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Oct 3 08:01:59 2026 GMT Not After : Oct 10 08:01:59 2026 GMT Subject: CN=6ac0b677-1903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:d2:7a:81:f3:12:9c:d0:72:3e:c8:13:02: 82:3d:d4:35:90:15:21:f2:93:18:60:97:0a:84:64: 43:77:18:35:7f:23:25:c2:f7:dc:e9:f6:52:d1:8d: 1a:88:24:52:b4:7f:c1:8f:6d:15:be:22:ff:ee:d6: 16:fe:a9:f9:9a:fa:66:a0:08:14:54:b7:bc:ff:a7: 7d:f1:4e:a9:58:dc:04:0d:12:36:7f:31:bd:37:69: e4:4a:8e:65:10:3b:ef:64:14:08:15:f9:19:d3:63: 39:ac:fa:40:a4:81:ac:ce:72:58:5f:53:f0:fa:d4: 33:05:16:f0:9a:49:5b:ee:90:ef:e5:5c:e6:ca:33: 0c:bb:33:ae:f2:20:7c:ff:33:9b:95:62:74:af:a6: 5b:8e:dd:99:f9:a5:2a:32:52:fc:e7:25:ab:0d:5d: c2:ab:9f:ab:24:33:8f:2b:89:11:8b:bc:30:ad:e1: 42:1a:03:b4:32:9c:9a:6b:19:22:b7:20:e1:fa:d6: 56:82:b2:0b:09:4b:9f:ef:40:cc:85:d2:d7:5d:21: 85:88:62:7e:70:32:18:fe:60:77:39:ef:e9:95:bb: 30:6b:0b:df:c8:9e:06:88:35:6e:ac:a3:bc:a6:24: fa:82:aa:a3:e4:fd:1f:f2:18:34:93:18:84:bb:16: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5A:35:8C:16:84:82:1D:A0:29:98:86:B2:53:40:CC:7D:11:14:1A X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ec:0f:c9:1a:05:9c:ea:39:f5:0b:b5:78:45:2e:06:8c:07: f1:7b:92:4c:fc:3c:65:ba:13:2b:9e:66:5d:13:1a:ba:15:a9: 05:73:ef:14:7b:44:eb:36:48:94:39:bd:58:20:8e:82:0e:77: e4:cc:4c:58:92:01:a9:ea:7a:3d:08:91:8d:5b:3f:cd:f8:ea: 93:ab:b2:17:c7:4c:31:8a:71:b1:73:2b:33:94:f5:89:a5:80: 85:10:88:48:35:0a:59:ed:d5:99:b1:80:4a:99:53:33:b2:f8: bd:1d:64:95:31:69:db:74:e5:f9:5c:94:eb:38:d3:97:ab:5e: 25:3a:d7:24:59:f0:b8:1c:cf:22:32:2d:b3:62:89:bb:f4:08: 7c:00:7d:ae:57:bf:1a:b2:45:d8:72:0f:2d:24:82:a9:24:91: 42:94:fc:75:18:bb:1e:b1:14:4a:97:82:05:2a:5d:da:fa:26: 5b:4a:87:8e:bd:f4:fa:b4:a6:45:ab:9e:68:ba:8e:a0:fc:81: ba:09:04:c7:94:2d:0a:85:59:c2:64:59:85:6b:98:69:0e:f8: 75:d0:cf:e1:3f:9f:ca:9a:db:8c:ee:e9:94:2e:11:3e:be:41: 40:5a:3b:82:db:92:aa:f2:8b:7b:c1:dc:26:d1:47:f7:da:8a: cc:8a:08:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMUExMTAvBgNVBAUTKDY0QUI1RURCNTExMjYyQjczNkFGODE3NDFENEQ3MzE0 MTREMzRBNTcwHhcNMjYxMDAzMDgwMTU5WhcNMjYxMDEwMDgwMTU5WjAYMRYwFAYD VQQDEw02YWMwYjY3Ny0xOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutDSeoHzEpzQcj7IEwKCPdQ1kBUh8pMYYJcKhGRDdxg1fyMlwvfc6fZS0Y0a iCRStH/Bj20VviL/7tYW/qn5mvpmoAgUVLe8/6d98U6pWNwEDRI2fzG9N2nkSo5l EDvvZBQIFfkZ02M5rPpApIGsznJYX1Pw+tQzBRbwmklb7pDv5VzmyjMMuzOu8iB8 /zOblWJ0r6Zbjt2Z+aUqMlL85yWrDV3Cq5+rJDOPK4kRi7wwreFCGgO0Mpyaaxki tyDh+tZWgrILCUuf70DMhdLXXSGFiGJ+cDIY/mB3Oe/plbswawvfyJ4GiDVurKO8 piT6gqqj5P0f8hg0kxiEuxYi9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlaNYwW hIIdoCmYhrJTQMx9ERQaMB8GA1UdIwQYMBaAFGSrXttREmK3Nq+BdB1NcxQU00pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExQS9BMjNGMjNCOEQw QzAxMUYwODE1QUYwNjRDNEY5QUUwMi9aS3RlMjFFU1lyYzJyNEYwSFUxekZCVFRT bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExQS9BMjNGMjNCOEQwQzAxMUYwODE1QUYwNjRDNEY5QUUwMi9aS3RlMjFFU1ly YzJyNEYwSFUxekZCVFRTbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB+wPyRoFnOo59Qu1eEUuBowH8XuSTPw8ZboTK55mXRMauhWpBXPvFHtE6zZI lDm9WCCOgg535MxMWJIBqep6PQiRjVs/zfjqk6uyF8dMMYpxsXMrM5T1iaWAhRCI SDUKWe3VmbGASplTM7L4vR1klTFp23Tl+VyU6zjTl6teJTrXJFnwuBzPIjIts2KJ u/QIfAB9rle/GrJF2HIPLSSCqSSRQpT8dRi7HrEUSpeCBSpd2vomW0qHjr30+rSm RaueaLqOoPyBugkEx5QtCoVZwmRZhWuYaQ74ddDP4T+fyprbjO7plC4RPr5BQFo7 gtuSqvKLe8HcJtFH99qKzIoIQA== -----END CERTIFICATE-----Generated at Sun Oct 4 20:13:56 2026 by rpki-client