$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft File: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft (raw, json) Hash identifier: 79RH3D+tCfHg5s6ldhkQ4oatVTkAIQaMK8VjxboAqJg= Subject key identifier: BF:64:E1:03:88:C1:F2:3A:25:40:76:D9:46:92:09:DD:85:15:8B:FB Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE Certificate issuer: /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft Manifest number: 02A5 Signing time: Wed 23 Sep 2026 01:34:28 +0000 Manifest this update: Wed 23 Sep 2026 01:34:28 +0000 Manifest next update: Wed 30 Sep 2026 01:34:28 +0000 Files and hashes: 1: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl (hash: 9fEyy0gGs28EJ7KYtnNDvi/gHprBpl373XJ937t4MfU=) 2: 689F5D92AD0D11F1B7FCF9B63C11F970.roa (hash: LqFz+QpCHdb+FFI2JwU4umo63b3bsdSNGQqg9a9Guc8=) 3: EEA88E78AD0C11F1A1B76E9C3C11F970.roa (hash: /b7wdkd1tUOXcTuWD0AJo9xrePpTHVqnq+j16rznxnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Validity Not Before: Sep 23 01:34:28 2026 GMT Not After : Sep 30 01:34:28 2026 GMT Subject: CN=6ab32ca4-3338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:07:c6:e7:99:a0:48:fe:c4:ba:b2:2e:18: ce:c0:9e:39:f4:64:40:8c:e4:76:5a:d9:50:06:6a: 53:80:fa:ef:5d:04:a7:cb:7f:0a:92:b6:f4:c3:26: 4c:47:90:a9:44:fb:53:04:bf:77:68:1d:f4:d3:e6: 8d:81:bf:4e:74:f1:8e:9b:6e:8f:d8:77:1e:23:03: 5b:96:fc:2f:7f:92:49:c5:18:dd:1f:5b:13:c7:ab: 9b:4d:7e:27:ee:69:2c:01:c0:ac:70:c6:4f:65:99: 22:5c:50:35:d8:ea:76:fe:77:25:75:99:f4:1d:e3: ba:7d:e1:50:db:b1:f3:ab:3c:33:cf:c3:d6:2a:23: 26:78:3e:3a:cd:5d:86:eb:e7:33:61:bf:dd:fd:54: 39:40:8c:d3:a8:4f:ea:17:7d:8f:3a:76:ff:5d:ed: ea:e4:2f:94:8c:46:bd:63:11:91:92:ca:87:1f:ae: d5:88:9c:ce:c6:b4:76:51:d9:46:ac:e1:c0:98:81: 50:60:66:a4:3e:d7:4f:b1:79:aa:58:1b:fb:e6:03: de:47:9f:5d:3a:95:3b:91:d2:1f:8b:3b:67:9c:48: f5:0e:61:3c:f1:05:7c:87:9c:32:93:f1:75:bd:41: 70:45:fa:75:48:01:fe:c5:89:99:d3:0b:61:92:e4: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:64:E1:03:88:C1:F2:3A:25:40:76:D9:46:92:09:DD:85:15:8B:FB X509v3 Authority Key Identifier: keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:ad:a5:da:73:52:8b:b0:0a:07:58:31:de:ee:63:fd:22: 3d:cf:e4:ce:83:d6:96:27:a7:13:2f:bc:3e:06:51:5f:7d:3c: d4:17:d1:8e:73:f5:f6:ba:19:aa:ed:d8:39:f5:08:0a:ca:7d: 94:38:a3:3c:23:98:86:45:db:a3:fd:46:16:4a:b3:1d:78:1f: 86:3a:ad:23:ea:2d:32:6d:79:cb:6f:ae:61:dc:3b:68:db:16: 5f:eb:f9:42:f9:66:ba:4f:99:da:8c:5a:0b:43:96:67:76:3a: 96:80:b7:db:a5:42:89:69:a2:2b:8c:4a:f6:c6:d0:b2:db:59: b7:25:d1:54:96:6c:be:c3:6d:fb:2a:63:37:0c:37:ab:2b:68: 6a:68:cf:09:82:ab:14:5b:1f:08:67:c3:b6:81:4f:24:cb:a8: ed:1e:df:32:c9:b4:a0:21:b2:0d:f3:0f:39:43:42:d3:0f:76: 29:c5:b3:60:ff:92:1d:3a:84:51:38:bd:8a:0c:5f:5a:ac:eb: f7:46:ac:21:04:45:e7:8e:be:5c:c7:dd:af:ca:50:c2:88:4c: e3:a5:8a:50:13:be:26:2a:6a:46:4b:49:a9:13:59:43:d4:21: ae:18:07:fb:3f:8f:c2:6c:b5:b8:0a:33:3f:e6:29:3a:b1:fe: be:ed:e3:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjhEOTExMC8GA1UEBRMoNjczRDZDODE4NTU4OEIwQ0YwNjY3OUMzNTRGQkJEMEND QkJCNTRERTAeFw0yNjA5MjMwMTM0MjhaFw0yNjA5MzAwMTM0MjhaMBgxFjAUBgNV BAMTDTZhYjMyY2E0LTMzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI0wfG55mgSP7EurIuGM7Anjn0ZECM5HZa2VAGalOA+u9dBKfLfwqStvTDJkxH kKlE+1MEv3doHfTT5o2Bv0508Y6bbo/Ydx4jA1uW/C9/kknFGN0fWxPHq5tNfifu aSwBwKxwxk9lmSJcUDXY6nb+dyV1mfQd47p94VDbsfOrPDPPw9YqIyZ4PjrNXYbr 5zNhv939VDlAjNOoT+oXfY86dv9d7erkL5SMRr1jEZGSyocfrtWInM7GtHZR2Uas 4cCYgVBgZqQ+10+xeapYG/vmA95Hn106lTuR0h+LO2ecSPUOYTzxBXyHnDKT8XW9 QXBF+nVIAf7FiZnTC2GS5MdzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv2ThA4jB 8jolQHbZRpIJ3YUVi/swHwYDVR0jBBgwFoAUZz1sgYVYiwzwZnnDVPu9DMu7VN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCOEQ5L0FGNUNEQjA0Qzcw ODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6d1pubkRWUHU5RE11N1ZO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnoxc2dZVllpd3p3Wm5uRFZQdTlETXU3Vk40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC OEQ5L0FGNUNEQjA0QzcwODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6 d1pubkRWUHU5RE11N1ZONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtr62l2nNSi7AKB1gx3u5j/SI9z+TOg9aWJ6cTL7w+BlFffTzUF9GOc/X2uhmq 7dg59QgKyn2UOKM8I5iGRduj/UYWSrMdeB+GOq0j6i0ybXnLb65h3Dto2xZf6/lC +Wa6T5najFoLQ5ZndjqWgLfbpUKJaaIrjEr2xtCy21m3JdFUlmy+w237KmM3DDer K2hqaM8JgqsUWx8IZ8O2gU8ky6jtHt8yybSgIbIN8w85Q0LTD3YpxbNg/5IdOoRR OL2KDF9arOv3RqwhBEXnjr5cx92vylDCiEzjpYpQE74mKmpGS0mpE1lD1CGuGAf7 P4/CbLW4CjM/5ik6sf6+7ePo -----END CERTIFICATE-----Generated at Wed Sep 23 22:16:38 2026 by rpki-client