$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: WKG82EQmEtfybdK+4U9P4rjwmwCiMU5zfh8nY49pwp4= Subject key identifier: 06:CC:7C:C5:DE:07:83:FC:50:8D:1A:0E:0A:C5:2E:FD:DB:53:16:2C Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 121D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1212 Signing time: Wed 30 Sep 2026 17:17:28 +0000 Manifest this update: Wed 30 Sep 2026 17:17:28 +0000 Manifest next update: Wed 07 Oct 2026 17:17:28 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: 3JLiZblIlMYl74ReLXHeQ1BzPaTnx189KbEHhuAEIjw=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 16:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4637 (0x121d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Sep 30 17:17:28 2026 GMT Not After : Oct 7 17:17:28 2026 GMT Subject: CN=6abd4428-7137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:c2:d1:85:bb:a1:0f:17:8f:da:2b:98:bf: 00:6e:e3:b1:82:50:96:88:39:ae:af:e4:22:8e:16: 95:4a:e2:a0:3d:51:4e:9f:ce:f1:57:b4:d5:bf:2e: ad:71:14:3f:c9:e4:9f:7a:e2:1e:22:be:aa:c8:7e: 58:ee:43:9d:44:bd:c8:d2:8a:17:34:72:5e:35:e6: e1:69:e4:eb:df:1a:2c:6f:e5:ff:5b:22:f6:96:b6: 1a:71:98:1b:e1:b0:43:83:1a:63:f4:03:2e:4e:5c: d1:10:af:8c:59:13:80:9f:f9:09:dc:9e:88:33:13: 43:76:ef:aa:4e:c0:c7:74:2d:1f:25:50:a5:6d:b0: 26:52:7d:96:4f:1b:ab:20:75:cb:e6:04:38:54:28: 46:c8:72:2c:f8:5d:f4:92:c2:26:dc:7d:fd:19:38: c9:b3:03:5a:3b:e3:af:4c:0b:c9:c7:a1:23:fd:f7: 4a:9b:60:a0:e9:a0:96:f7:6e:20:36:99:1d:f0:5a: 09:91:5c:dc:da:7f:e4:a7:07:6e:0e:12:fb:c5:0e: a6:d5:84:c9:11:38:53:d2:14:89:73:19:cc:51:34: a7:db:42:7b:56:b4:d8:a6:a8:94:48:7f:9f:4e:53: 98:39:d8:7d:06:f1:40:ec:1e:17:10:e7:9f:8c:8a: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:7C:C5:DE:07:83:FC:50:8D:1A:0E:0A:C5:2E:FD:DB:53:16:2C X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7e:44:df:78:63:ea:09:1d:37:16:18:f9:5d:42:cc:43:db: 03:62:48:a0:8d:37:bc:3d:de:90:f0:da:ff:c2:cc:05:04:34: 52:9a:9d:5d:48:9e:20:f7:53:e4:3a:b7:db:0e:0d:0b:ee:50: c3:8c:1c:b9:3c:fb:86:ff:de:f6:da:c3:7d:66:81:54:b2:6d: bb:f2:91:df:26:14:1d:72:92:d9:1e:36:3a:b9:3c:e7:c9:9e: 9c:14:9f:fc:22:5c:82:64:00:f4:f2:ef:38:54:41:05:c8:18: 56:7b:ec:7a:35:09:50:5e:d9:82:1c:14:53:c6:5c:ff:c4:aa: 3b:1e:2e:43:2d:8a:66:65:6d:a0:f0:12:c2:d4:e2:0f:50:5f: 59:ba:bf:b2:29:6d:2f:93:46:ae:06:84:88:b1:52:9e:14:81: bc:9f:ca:dc:6b:71:5b:6f:e6:99:5e:7c:85:9c:0b:69:f8:ba: d1:e0:2a:1f:be:40:b3:92:26:15:bb:f2:c2:00:ec:2c:a6:fb: 33:ca:60:f0:ef:a2:98:61:a1:8a:d3:90:26:53:a4:d6:85:3b: 89:d3:f2:26:06:ad:1b:5a:62:5a:06:f0:2f:2d:89:97:8e:74: 40:74:ef:87:1e:ee:46:52:58:3b:7c:cf:9f:c0:c1:97:b9:09: ae:ed:e3:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwOTMwMTcxNzI4WhcNMjYxMDA3MTcxNzI4WjAYMRYwFAYD VQQDEw02YWJkNDQyOC03MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9bC0YW7oQ8Xj9ormL8AbuOxglCWiDmur+QijhaVSuKgPVFOn87xV7TVvy6t cRQ/yeSfeuIeIr6qyH5Y7kOdRL3I0ooXNHJeNebhaeTr3xosb+X/WyL2lrYacZgb 4bBDgxpj9AMuTlzREK+MWROAn/kJ3J6IMxNDdu+qTsDHdC0fJVClbbAmUn2WTxur IHXL5gQ4VChGyHIs+F30ksIm3H39GTjJswNaO+OvTAvJx6Ej/fdKm2Cg6aCW924g Npkd8FoJkVzc2n/kpwduDhL7xQ6m1YTJEThT0hSJcxnMUTSn20J7VrTYpqiUSH+f TlOYOdh9BvFA7B4XEOefjIpL9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbMfMXe B4P8UI0aDgrFLv3bUxYsMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAX5E33hj6gkdNxYY+V1CzEPbA2JIoI03vD3ekPDa/8LMBQQ0UpqdXUieIPdT 5Dq32w4NC+5Qw4wcuTz7hv/e9trDfWaBVLJtu/KR3yYUHXKS2R42Ork858menBSf /CJcgmQA9PLvOFRBBcgYVnvsejUJUF7ZghwUU8Zc/8SqOx4uQy2KZmVtoPASwtTi D1BfWbq/siltL5NGrgaEiLFSnhSBvJ/K3GtxW2/mmV58hZwLafi60eAqH75As5Im FbvywgDsLKb7M8pg8O+imGGhitOQJlOk1oU7idPyJgatG1piWgbwLy2Jl450QHTv hx7uRlJYO3zPn8DBl7kJru3jdw== -----END CERTIFICATE-----Generated at Wed Sep 30 20:06:43 2026 by rpki-client