$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: 8Ez+lqfLx2yB5PVJaSzGux/V7Igyzy6pX6pkk2BK8rM= Subject key identifier: 01:7D:79:70:71:74:59:E6:E5:0E:4E:01:B0:43:0D:9C:75:07:9E:23 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 01B5 Signing time: Fri 25 Sep 2026 04:04:16 +0000 Manifest this update: Fri 25 Sep 2026 04:04:15 +0000 Manifest next update: Fri 02 Oct 2026 04:04:15 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: DGvh54pN94/PkTyce5oUgO69miPh2Mw72yL1qIDdq2k=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Sep 25 04:04:15 2026 GMT Not After : Oct 2 04:04:15 2026 GMT Subject: CN=6ab5f2c0-b4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:a6:f2:2c:43:59:cc:e9:8a:bd:8e:6e:4f: 52:5c:32:0f:a9:b7:b4:1c:17:b3:7d:99:d1:bd:83: 2a:98:56:50:44:6f:ee:23:bc:b6:ae:0e:06:a3:cc: f5:55:ac:d7:92:09:0e:84:7a:3d:fc:cf:f5:91:38: d2:09:18:2b:11:86:3e:3b:6c:6e:1e:e6:f0:ba:e9: b5:42:c2:ff:4f:35:f3:1c:dd:af:ff:5e:9b:58:71: 63:24:51:79:c2:b7:58:f1:37:9a:e2:14:3c:34:ee: 28:c1:80:b0:b7:6a:9c:6a:0f:ef:49:a7:ae:3e:ec: c1:db:9d:87:d7:c2:28:cb:35:b1:10:76:b5:72:42: 07:8e:5e:78:de:0b:65:f6:45:38:38:61:7f:1c:5b: 93:28:25:16:9b:f7:b2:9c:bd:f9:39:83:ce:9a:4f: e4:11:02:4b:df:40:61:2c:ea:e3:c2:10:6e:e0:89: 13:94:75:b8:93:80:c2:5d:fd:86:3b:89:5c:7a:52: 8f:0a:c8:9b:58:f6:d4:33:cb:ac:ab:91:ee:5b:40: cb:43:3f:4b:39:19:6a:8c:91:63:db:17:d7:b9:49: c4:f8:98:56:59:55:eb:8d:01:06:19:20:95:f8:91: 7f:66:a1:08:29:e6:8c:79:31:b5:81:27:98:98:e8: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:79:70:71:74:59:E6:E5:0E:4E:01:B0:43:0D:9C:75:07:9E:23 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:08:3e:74:20:2a:6e:f9:77:3b:28:6e:6b:42:fd:b7:27:38: 89:a6:70:db:bb:f9:44:fd:d2:bc:4c:b5:8d:69:42:bb:bf:85: 05:7a:cb:ce:4f:19:cb:97:0f:82:c4:ff:3f:4f:49:8a:3e:d1: 26:07:90:34:2d:12:5d:28:4b:92:a7:6a:0d:70:77:86:93:c8: 5a:65:51:71:e1:34:3b:7f:e9:74:7f:19:7e:37:19:1d:f7:7c: 44:54:61:0b:48:f8:6e:44:1d:83:b5:fa:88:67:fc:bc:c2:85: ac:4f:07:59:7c:a8:94:38:3f:4f:e8:98:12:06:6f:17:67:6b: d1:db:58:d1:8d:8f:c2:b1:2f:72:28:9e:56:22:ec:56:d1:b3: ca:60:60:bc:93:46:32:05:65:e8:fd:90:80:c5:37:57:8b:8a: b3:0a:38:a0:a8:7a:ff:8f:91:0f:3a:ef:14:8e:1d:14:51:b8: f6:9a:50:c6:e3:3f:ae:b2:a3:46:be:e0:ec:fd:9b:75:bc:f7: 4a:b0:60:09:4d:e1:4b:7d:41:47:86:4c:b3:6b:c8:49:bf:6e: d8:7d:32:3c:3e:d9:97:5a:24:97:12:07:25:96:bd:9a:57:5c: 89:cd:09:39:26:23:2b:90:9c:da:d5:e9:c4:53:ff:b4:4c:c1: cd:07:d5:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjYwOTI1MDQwNDE1WhcNMjYxMDAyMDQwNDE1WjAYMRYwFAYD VQQDEw02YWI1ZjJjMC1iNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1Om8ixDWczpir2Obk9SXDIPqbe0HBezfZnRvYMqmFZQRG/uI7y2rg4Go8z1 VazXkgkOhHo9/M/1kTjSCRgrEYY+O2xuHubwuum1QsL/TzXzHN2v/16bWHFjJFF5 wrdY8Tea4hQ8NO4owYCwt2qcag/vSaeuPuzB252H18IoyzWxEHa1ckIHjl543gtl 9kU4OGF/HFuTKCUWm/eynL35OYPOmk/kEQJL30BhLOrjwhBu4IkTlHW4k4DCXf2G O4lcelKPCsibWPbUM8usq5HuW0DLQz9LORlqjJFj2xfXuUnE+JhWWVXrjQEGGSCV +JF/ZqEIKeaMeTG1gSeYmOgI0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAF9eXBx dFnm5Q5OAbBDDZx1B54jMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKAg+dCAqbvl3Oyhua0L9tyc4iaZw27v5RP3SvEy1jWlCu7+FBXrLzk8Zy5cP gsT/P09Jij7RJgeQNC0SXShLkqdqDXB3hpPIWmVRceE0O3/pdH8ZfjcZHfd8RFRh C0j4bkQdg7X6iGf8vMKFrE8HWXyolDg/T+iYEgZvF2dr0dtY0Y2PwrEvciieViLs VtGzymBgvJNGMgVl6P2QgMU3V4uKswo4oKh6/4+RDzrvFI4dFFG49ppQxuM/rrKj Rr7g7P2bdbz3SrBgCU3hS31BR4ZMs2vISb9u2H0yPD7Zl1oklxIHJZa9mldcic0J OSYjK5Cc2tXpxFP/tEzBzQfV5A== -----END CERTIFICATE-----Generated at Fri Sep 25 07:33:58 2026 by rpki-client