$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: Pjv6rFkek+zmdfnCDAf0llpFi0ZV/rYe9InoeGEm9Jc= Subject key identifier: 27:4F:5A:8D:5C:0D:57:2F:E6:EA:82:5B:38:FE:8C:BC:8A:AC:E2:89 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 0170 Signing time: Sun 11 Oct 2026 05:32:59 +0000 Manifest this update: Sun 11 Oct 2026 05:32:59 +0000 Manifest next update: Sun 18 Oct 2026 05:32:59 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: 8kxO2yGz0XnxZYPMtNJX39QLzj2ohi6qNdt2Z5DujL0=) 2: 9FC2AD1A7B0811F1BE7AA8BE81A30FBC.roa (hash: dvCtuuZOukYSqlh4ugbWrxgCAoJu1f7EJvhUOlYHnJ0=) 3: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Oct 11 05:32:59 2026 GMT Not After : Oct 18 05:32:59 2026 GMT Subject: CN=6acb1f8b-f75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:c3:44:7e:e1:a5:73:89:83:61:70:a4:e6: 8c:75:28:e1:7e:50:76:fe:59:dd:69:87:b0:3e:d0: f8:49:5e:e5:0b:28:62:46:1c:7e:a5:e3:cc:0c:61: ae:b5:14:03:4e:a5:16:61:f1:08:83:5e:cb:4f:bb: 7f:9f:78:7d:f5:47:0f:c5:89:14:c7:17:c3:ca:a9: 5f:ef:b8:dd:4a:6c:57:68:56:8e:82:60:0d:0d:f2: 92:7d:72:8a:17:67:58:bb:18:26:2d:51:55:fb:57: 4b:cf:e1:d5:80:81:eb:c4:b4:91:86:6b:e6:c2:dd: bf:01:15:29:cf:fc:dc:93:f0:db:82:f1:75:b4:d3: 4a:ab:82:17:9c:f1:b1:2f:79:9e:19:dc:d2:06:22: d4:b4:35:4c:3f:de:42:ba:5a:98:2a:ae:20:ff:3e: e4:63:d9:f4:21:db:b0:c6:77:92:04:05:6e:85:88: b6:63:0f:14:1d:c6:8c:ec:30:d6:75:07:1f:d3:1a: 51:4a:a0:3a:bb:17:8d:eb:c3:9a:75:40:75:4f:14: 1f:98:e2:14:fd:9b:40:dc:ce:bb:18:67:c0:42:41: 81:54:4d:83:22:63:09:75:8e:cf:34:0c:e0:94:2d: dd:64:26:25:7f:d5:a8:76:ed:3e:d6:2e:93:e1:8e: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:5A:8D:5C:0D:57:2F:E6:EA:82:5B:38:FE:8C:BC:8A:AC:E2:89 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:e4:14:b6:41:ca:68:25:2f:1d:9c:39:bc:47:b6:02:3c: d1:9d:ed:96:d8:0b:cb:42:f3:0d:21:d3:c4:22:40:27:f7:3a: 28:91:d8:45:bf:b6:7b:5d:3d:fd:25:c1:ef:8b:94:b2:32:49: 63:69:46:da:ce:fa:33:08:b9:d8:4f:c9:e3:57:26:c6:f0:c3: 41:99:b9:2a:c2:55:b0:11:a4:88:1f:55:a7:c3:9c:ea:b7:f0: ef:57:99:d5:b8:d2:3f:14:da:48:f5:96:d9:7d:bc:1c:6a:bc: 42:e0:33:7b:a5:65:37:60:11:9c:3d:a8:13:5d:7d:4f:c2:31: c9:3d:bf:f5:f5:c0:95:e1:53:90:ef:57:b6:07:ef:dc:fa:4a: bf:45:5a:fa:d0:58:5b:c2:11:8a:09:b7:25:66:b9:c4:ce:22: 58:fc:d2:d4:7e:d6:60:4e:74:3b:a4:32:bc:8f:65:3b:6f:a7: 8b:5c:78:cd:a6:d3:c1:5f:b2:9f:91:98:b4:e8:2e:e2:a7:4c: 08:b8:9c:e4:15:89:6b:56:47:86:5a:a4:f9:43:d2:1c:85:23: 12:37:27:06:b7:44:33:36:f0:e2:8f:1c:9a:b3:4e:02:b3:76: 60:47:19:0b:6e:c6:20:7c:40:17:2a:5c:e3:10:b5:9d:c0:34: 0b:64:f2:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjYxMDExMDUzMjU5WhcNMjYxMDE4MDUzMjU5WjAYMRYwFAYD VQQDEw02YWNiMWY4Yi1mNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlrDRH7hpXOJg2FwpOaMdSjhflB2/lndaYewPtD4SV7lCyhiRhx+pePMDGGu tRQDTqUWYfEIg17LT7t/n3h99UcPxYkUxxfDyqlf77jdSmxXaFaOgmANDfKSfXKK F2dYuxgmLVFV+1dLz+HVgIHrxLSRhmvmwt2/ARUpz/zck/DbgvF1tNNKq4IXnPGx L3meGdzSBiLUtDVMP95CulqYKq4g/z7kY9n0IduwxneSBAVuhYi2Yw8UHcaM7DDW dQcf0xpRSqA6uxeN68OadUB1TxQfmOIU/ZtA3M67GGfAQkGBVE2DImMJdY7PNAzg lC3dZCYlf9Wodu0+1i6T4Y6hlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdPWo1c DVcv5uqCWzj+jLyKrOKJMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZ3kFLZBymglLx2cObxHtgI80Z3tltgLy0LzDSHTxCJAJ/c6KJHYRb+2e109 /SXB74uUsjJJY2lG2s76Mwi52E/J41cmxvDDQZm5KsJVsBGkiB9Vp8Oc6rfw71eZ 1bjSPxTaSPWW2X28HGq8QuAze6VlN2ARnD2oE119T8IxyT2/9fXAleFTkO9Xtgfv 3PpKv0Va+tBYW8IRigm3JWa5xM4iWPzS1H7WYE50O6QyvI9lO2+ni1x4zabTwV+y n5GYtOgu4qdMCLic5BWJa1ZHhlqk+UPSHIUjEjcnBrdEMzbw4o8cmrNOArN2YEcZ C27GIHxAFypc4xC1ncA0C2TysA== -----END CERTIFICATE-----Generated at Sun Oct 11 08:21:34 2026 by rpki-client