$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: KOscRnsZUNIO1UL9J3y94Jvx3oWDJyt5/IvHbFOxQ+8= Subject key identifier: 90:E2:4D:FD:7B:70:8E:C8:2A:D8:B0:69:15:8B:62:1A:B2:46:7A:96 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 0697 Signing time: Tue 22 Sep 2026 22:10:07 +0000 Manifest this update: Tue 22 Sep 2026 22:10:07 +0000 Manifest next update: Tue 29 Sep 2026 22:10:07 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: LXa73WBE9W49RP9SnT0IHBmHBQ8u44VjNNifnwkQMnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Sep 22 22:10:07 2026 GMT Not After : Sep 29 22:10:07 2026 GMT Subject: CN=6ab2fcbf-b335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:64:b0:af:75:b6:79:d8:14:c5:d9:68:fd: 73:55:36:b0:79:b2:fa:11:3e:c8:75:ba:c8:a6:73: 23:b5:46:09:0d:b3:ef:41:c0:22:15:d2:dc:aa:e3: cb:79:04:3c:32:e3:26:42:c3:28:86:02:8c:c6:49: 9d:d6:2f:66:0b:5b:8a:53:b2:eb:85:f0:d0:26:df: 5d:3f:03:9c:93:99:cf:d2:1b:8a:65:d6:2a:6c:82: 87:af:f6:3a:b4:d6:c7:4c:b2:3a:5a:15:e8:db:3c: 82:20:c8:17:47:fd:8b:87:df:a0:c5:9d:50:62:d8: 59:d1:40:bf:e5:1d:f3:3e:1e:f8:33:ab:26:00:5a: 3a:67:f5:34:8e:a9:f2:41:b1:f7:f8:14:17:a3:0e: e2:5d:dd:8f:14:1c:a0:8a:cb:94:12:4f:22:ae:93: bb:85:a2:d5:77:a6:18:2e:26:8e:f7:f3:08:ac:8e: f5:5d:81:65:d8:76:52:21:48:fc:36:78:76:34:a8: 36:79:3b:d3:93:79:d7:43:a2:c1:ef:1c:c4:5e:df: ab:9a:72:57:b8:91:fe:52:2e:75:19:8f:cf:9e:ef: 45:fe:0e:2f:91:a8:11:df:69:7c:7e:cb:91:99:9e: 53:98:ef:88:d1:29:c2:d3:db:32:27:82:ae:02:73: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E2:4D:FD:7B:70:8E:C8:2A:D8:B0:69:15:8B:62:1A:B2:46:7A:96 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f8:4b:cc:85:d7:b4:ef:1c:86:4d:ad:9c:8f:fb:ca:5d:e4: 99:5c:47:3a:e6:b4:a6:79:3d:28:b1:7f:be:3c:ab:df:0a:2e: 76:32:64:03:74:96:62:23:66:6b:f8:69:6a:ef:7e:03:4b:6e: 19:28:ae:b6:c1:fe:c5:8c:11:ca:4d:93:fe:98:9c:92:2a:67: b6:ed:96:d9:e0:af:ae:0d:67:38:fa:7a:75:32:ee:ab:bb:80: 33:8b:86:0b:00:84:f0:b6:30:82:3a:9b:a6:c9:a2:7a:fb:3e: 60:52:9b:17:ae:38:db:33:5f:50:2c:de:ba:c6:6b:a0:ad:3d: 61:b9:40:a0:b5:d8:17:ea:7e:2d:40:f0:76:58:e9:3a:ae:e8: 86:ac:b3:7b:e1:3b:16:51:a9:9e:87:26:8a:bd:79:8e:6d:af: d3:1f:6e:45:47:92:f7:cd:8b:09:cf:bf:3b:42:24:d1:f9:7e: a9:67:94:d8:c3:0e:4a:c5:28:4e:af:aa:de:6d:39:b3:e2:18: ef:af:e2:a4:ea:33:09:14:e0:5b:1e:e0:61:ef:1f:ed:34:93: af:c1:0c:65:68:28:76:0f:6e:69:7e:76:dc:04:03:d8:67:59: 3c:2f:89:81:fb:cf:3c:ce:da:39:1c:a4:ab:69:f3:95:9d:1f: 00:d0:be:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjYwOTIyMjIxMDA3WhcNMjYwOTI5MjIxMDA3WjAYMRYwFAYD VQQDEw02YWIyZmNiZi1iMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVBksK91tnnYFMXZaP1zVTawebL6ET7IdbrIpnMjtUYJDbPvQcAiFdLcquPL eQQ8MuMmQsMohgKMxkmd1i9mC1uKU7LrhfDQJt9dPwOck5nP0huKZdYqbIKHr/Y6 tNbHTLI6WhXo2zyCIMgXR/2Lh9+gxZ1QYthZ0UC/5R3zPh74M6smAFo6Z/U0jqny QbH3+BQXow7iXd2PFBygisuUEk8irpO7haLVd6YYLiaO9/MIrI71XYFl2HZSIUj8 Nnh2NKg2eTvTk3nXQ6LB7xzEXt+rmnJXuJH+Ui51GY/Pnu9F/g4vkagR32l8fsuR mZ5TmO+I0SnC09syJ4KuAnMQpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDiTf17 cI7IKtiwaRWLYhqyRnqWMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvhLzIXXtO8chk2tnI/7yl3kmVxHOua0pnk9KLF/vjyr3woudjJkA3SWYiNm a/hpau9+A0tuGSiutsH+xYwRyk2T/pickipntu2W2eCvrg1nOPp6dTLuq7uAM4uG CwCE8LYwgjqbpsmievs+YFKbF6442zNfUCzeusZroK09YblAoLXYF+p+LUDwdljp Oq7ohqyze+E7FlGpnocmir15jm2v0x9uRUeS982LCc+/O0Ik0fl+qWeU2MMOSsUo Tq+q3m05s+IY76/ipOozCRTgWx7gYe8f7TSTr8EMZWgodg9uaX523AQD2GdZPC+J gfvPPM7aORykq2nzlZ0fANC+GA== -----END CERTIFICATE-----Generated at Thu Sep 24 17:05:19 2026 by rpki-client