$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: 9aM9/GU6zEbee2BXfGTuhkhlRGOJoUUSKWb3ZJ/vrto= Subject key identifier: 3E:18:91:94:F5:5A:77:62:3B:EA:17:34:C5:23:5E:63:9E:DF:87:DA Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 0240 Signing time: Mon 21 Sep 2026 02:37:29 +0000 Manifest this update: Mon 21 Sep 2026 02:37:28 +0000 Manifest next update: Mon 28 Sep 2026 02:37:28 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: xyQJiF+XHkfpbsFYhx8eFi37kA3x0FzMeggPolVQmxw=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Sep 21 02:37:28 2026 GMT Not After : Sep 28 02:37:28 2026 GMT Subject: CN=6ab09869-d610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:bf:e6:33:70:97:7a:f8:38:82:b5:fa:ed: ea:13:18:28:57:00:6f:16:0e:b3:44:6f:97:e9:35: 67:3b:02:d2:e2:6b:6b:2f:54:bd:ce:0f:fd:b2:66: 73:d0:ec:97:d4:e6:6d:a1:18:14:80:54:b3:08:c8: 14:8c:5a:f5:05:48:a9:74:28:18:4b:36:5c:6a:2d: cc:9a:0c:cd:1b:9a:db:d9:13:d7:12:85:4f:f0:78: b5:36:5c:80:00:b5:b9:d3:00:3d:29:01:b7:15:ef: 1d:02:6d:9a:1a:e9:24:f4:99:6f:fc:80:d1:50:cf: a9:92:fa:9b:ef:e4:26:a4:15:b3:4c:3f:fc:28:ba: e8:1e:15:4d:2a:e8:80:e2:9a:a7:71:60:66:9f:7a: 77:8b:35:c9:93:57:1c:91:37:8f:fb:db:49:da:d8: cd:bb:ab:8d:bc:d5:5b:be:df:ef:74:a6:01:72:dc: c9:75:d7:59:bb:29:b7:6b:03:37:8c:5e:52:73:f9: 8d:9b:18:03:27:e8:6b:49:3c:4c:8e:98:02:ce:74: 34:26:1b:40:0d:0a:8c:71:14:b2:6a:fa:26:77:c7: 09:1f:83:15:3c:d0:7b:b2:a8:d7:3c:23:96:d8:61: 19:f6:6e:66:5a:13:ac:64:09:42:ba:c5:28:d6:48: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:18:91:94:F5:5A:77:62:3B:EA:17:34:C5:23:5E:63:9E:DF:87:DA X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9e:4a:3d:a4:13:79:11:79:e7:25:66:1f:bd:60:85:6b:98: c3:9a:a9:fc:49:9f:40:4e:f9:be:27:3e:e7:f0:b8:00:dd:b1: 45:43:c7:b8:06:ec:aa:37:b5:c0:96:8e:65:44:63:9e:2c:56: 9a:22:ba:69:68:26:31:95:4b:38:0d:d2:66:35:d4:23:82:89: 23:62:cf:22:92:94:7e:ab:80:37:d7:76:fa:95:cd:2a:14:7e: 26:b7:a4:e0:c3:3d:73:2b:54:23:90:49:f2:ed:65:54:ac:1e: 2c:16:65:7e:a2:c1:08:7c:aa:fd:1a:a7:08:69:ed:e0:67:5a: a0:20:04:68:af:82:79:17:18:32:d9:e2:2a:61:65:0a:85:e5: 27:76:52:ed:3a:3f:81:4f:9a:9b:98:94:da:f4:22:de:0b:6c: bb:a5:91:27:d7:77:71:48:66:cb:d7:b0:cc:29:d0:c2:63:4d: c6:9b:2a:d8:cf:2a:b1:3c:d8:2a:97:51:21:a4:8a:76:95:76: 08:52:05:5c:0b:90:e0:e4:08:2d:28:ba:4c:f6:f8:b5:8f:30: 55:ad:9a:5d:05:bc:ad:26:65:c5:c1:d7:c2:13:39:60:1a:f3: c6:b0:9a:d3:b7:94:92:01:27:95:96:22:80:1d:82:45:4d:9a: 42:76:12:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYwOTIxMDIzNzI4WhcNMjYwOTI4MDIzNzI4WjAYMRYwFAYD VQQDEw02YWIwOTg2OS1kNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YG/5jNwl3r4OIK1+u3qExgoVwBvFg6zRG+X6TVnOwLS4mtrL1S9zg/9smZz 0OyX1OZtoRgUgFSzCMgUjFr1BUipdCgYSzZcai3MmgzNG5rb2RPXEoVP8Hi1NlyA ALW50wA9KQG3Fe8dAm2aGukk9Jlv/IDRUM+pkvqb7+QmpBWzTD/8KLroHhVNKuiA 4pqncWBmn3p3izXJk1cckTeP+9tJ2tjNu6uNvNVbvt/vdKYBctzJdddZuym3awM3 jF5Sc/mNmxgDJ+hrSTxMjpgCznQ0JhtADQqMcRSyavomd8cJH4MVPNB7sqjXPCOW 2GEZ9m5mWhOsZAlCusUo1kiTPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4YkZT1 WndiO+oXNMUjXmOe34faMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnZ5KPaQTeRF55yVmH71ghWuYw5qp/EmfQE75vic+5/C4AN2xRUPHuAbsqje1 wJaOZURjnixWmiK6aWgmMZVLOA3SZjXUI4KJI2LPIpKUfquAN9d2+pXNKhR+Jrek 4MM9cytUI5BJ8u1lVKweLBZlfqLBCHyq/RqnCGnt4GdaoCAEaK+CeRcYMtniKmFl CoXlJ3ZS7To/gU+am5iU2vQi3gtsu6WRJ9d3cUhmy9ewzCnQwmNNxpsq2M8qsTzY KpdRIaSKdpV2CFIFXAuQ4OQILSi6TPb4tY8wVa2aXQW8rSZlxcHXwhM5YBrzxrCa 07eUkgEnlZYigB2CRU2aQnYSKA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:48:03 2026 by rpki-client