$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: fdtWMJZVYOuGNvJLpf7euFPkIE7Tvu7mk9EaOAQ4S3U= Subject key identifier: C1:CB:DC:5F:24:F2:B7:09:A5:90:DD:DD:38:75:42:3F:9C:EA:4D:FC Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0A0F Signing time: Sat 26 Sep 2026 19:50:34 +0000 Manifest this update: Sat 26 Sep 2026 19:50:34 +0000 Manifest next update: Sat 03 Oct 2026 19:50:34 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: hg4df6xhcNOTo66uHtw+h8zBCsjm2HoRQuWhVbsTPK4=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2583 (0xa17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Sep 26 19:50:34 2026 GMT Not After : Oct 3 19:50:34 2026 GMT Subject: CN=6ab8220a-b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:31:0e:ea:77:a7:f3:5b:a4:31:aa:42:4f: f0:9e:89:ab:c8:e4:2c:2b:55:e5:73:1c:c9:6c:00: 8b:43:e3:4d:e9:0a:69:cc:1b:77:bc:a2:c8:9a:d4: 6a:e1:da:0e:93:4b:00:29:6b:9e:1f:dd:47:d0:39: 5b:16:94:57:22:db:9c:ef:c4:1b:a3:21:97:96:96: 74:fb:8d:8c:00:ac:10:a5:1f:dd:a9:b5:1e:33:db: c8:80:0b:e8:2b:d9:ae:1a:5c:b1:be:83:27:cf:c2: 9f:43:53:36:d6:83:09:0f:f8:6b:22:d5:ea:51:62: 0c:7c:74:d6:be:9a:02:b0:cf:1e:52:05:a2:ef:28: 7d:cc:b6:58:12:4d:91:aa:1f:8d:88:4e:b7:55:52: 20:5a:50:65:1c:35:10:f9:08:22:d3:29:4c:a0:5c: 95:03:07:91:59:75:ed:a0:93:e2:9e:28:35:c7:68: 46:ed:c9:48:43:41:8c:52:f6:34:f9:25:80:c4:cd: 0d:2d:88:de:b8:df:5f:d3:c9:ac:a8:ae:07:55:23: f7:42:3c:bc:73:94:3b:49:71:03:41:ef:ef:65:51: 4b:6b:0c:bf:c0:fb:2c:71:da:44:07:7c:21:67:4b: 4e:21:e6:10:60:9e:55:d5:93:61:b8:e9:97:d9:dd: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CB:DC:5F:24:F2:B7:09:A5:90:DD:DD:38:75:42:3F:9C:EA:4D:FC X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:02:62:ee:aa:bf:92:56:47:1e:a7:69:b4:f0:24:e4:de:72: 59:6b:fb:d5:6f:06:9d:ee:ec:42:61:40:fe:2c:1c:9e:fb:e5: 5d:89:4d:db:56:ac:9f:69:35:e2:fa:66:33:ef:aa:77:a3:2b: 44:a6:fd:9c:22:19:71:3d:e0:75:8f:e1:12:5c:d9:32:24:5b: 59:69:da:40:fb:39:43:f6:0a:b4:c9:4a:b2:84:a9:4a:9a:7f: 72:c4:b0:84:1b:3d:63:9e:5c:c0:15:b3:c1:29:3d:ab:d4:6a: 26:86:18:8f:ae:e0:f9:81:dd:da:ee:bc:87:7c:6f:79:c3:59: 7b:fc:af:77:8d:77:7a:95:b7:aa:32:cb:82:89:c4:42:1a:cf: 3d:d3:c6:c3:a6:68:c0:02:39:45:e6:8a:63:4c:c1:fa:0d:cb: 80:54:cb:78:5e:33:ce:1b:29:a9:1c:a3:b5:fb:d4:04:1d:ab: d2:8f:40:44:f5:e4:ef:8b:a1:c1:a3:63:28:5b:e7:62:c1:64: 7f:33:85:d2:96:e4:34:e2:5e:b5:db:b7:78:f3:8d:8e:b2:f5: 54:2e:23:c1:1f:7f:bd:1c:a2:a4:07:e0:d9:a6:92:f0:9c:50: d4:7d:fa:48:c1:b3:67:d4:ba:ad:f5:83:db:43:3e:8c:16:ac: 8b:9d:48:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjYwOTI2MTk1MDM0WhcNMjYxMDAzMTk1MDM0WjAYMRYwFAYD VQQDEw02YWI4MjIwYS1iMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmUxDup3p/NbpDGqQk/wnomryOQsK1XlcxzJbACLQ+NN6QppzBt3vKLImtRq 4doOk0sAKWueH91H0DlbFpRXItuc78QboyGXlpZ0+42MAKwQpR/dqbUeM9vIgAvo K9muGlyxvoMnz8KfQ1M21oMJD/hrItXqUWIMfHTWvpoCsM8eUgWi7yh9zLZYEk2R qh+NiE63VVIgWlBlHDUQ+Qgi0ylMoFyVAweRWXXtoJPinig1x2hG7clIQ0GMUvY0 +SWAxM0NLYjeuN9f08msqK4HVSP3Qjy8c5Q7SXEDQe/vZVFLawy/wPsscdpEB3wh Z0tOIeYQYJ5V1ZNhuOmX2d34+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHL3F8k 8rcJpZDd3Th1Qj+c6k38MB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKwJi7qq/klZHHqdptPAk5N5yWWv71W8Gne7sQmFA/iwcnvvlXYlN21asn2k1 4vpmM++qd6MrRKb9nCIZcT3gdY/hElzZMiRbWWnaQPs5Q/YKtMlKsoSpSpp/csSw hBs9Y55cwBWzwSk9q9RqJoYYj67g+YHd2u68h3xvecNZe/yvd413epW3qjLLgonE QhrPPdPGw6ZowAI5ReaKY0zB+g3LgFTLeF4zzhspqRyjtfvUBB2r0o9ARPXk74uh waNjKFvnYsFkfzOF0pbkNOJetdu3ePONjrL1VC4jwR9/vRyipAfg2aaS8JxQ1H36 SMGzZ9S6rfWD20M+jBasi51I+Q== -----END CERTIFICATE-----Generated at Mon Sep 28 10:33:33 2026 by rpki-client