$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: V/Qcjo3OxpCicr7HqvKLU4ZGlr/OgpYmb7zq96kkbS4= Subject key identifier: 0E:98:85:30:BD:D2:31:89:49:CD:83:73:2B:03:FB:EE:68:D9:7D:DD Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: 0189 Signing time: Sat 03 Oct 2026 05:11:50 +0000 Manifest this update: Sat 03 Oct 2026 05:11:49 +0000 Manifest next update: Sat 10 Oct 2026 05:11:49 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: suRW/nVKYS+yiVnKMv1o0U7EuSGIwm1+DnJZL23o6u0=) 2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: VacfDcobXZwt2pK6XAvRhxuJBdzslSZAkq50qpH5PGU=) 3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: dguyqJJlfQdrZxS7gBVnP+fhLGVgFc3v59CnlE7InbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Oct 3 05:11:49 2026 GMT Not After : Oct 10 05:11:49 2026 GMT Subject: CN=6ac08e96-3d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:d0:5b:9d:ec:74:29:77:00:a0:e2:e0:69: 0a:79:83:8b:56:9f:cc:c1:3b:a6:ca:51:28:3e:15: b0:11:98:fe:f8:3c:3c:6a:27:b4:4e:5f:d1:75:d0: b0:30:cf:b2:16:1f:c3:f4:31:84:f0:b9:0b:00:e7: 9f:36:e9:f9:05:36:69:76:ad:16:b9:05:91:b0:ad: 3f:e3:0b:b3:7d:91:9d:ad:77:c2:d4:c4:45:6e:6e: 81:16:ee:6c:4a:a1:85:a8:f9:e2:13:29:ac:73:c7: 79:c5:c3:4f:61:a2:4e:77:62:70:5d:90:f7:4e:4d: 49:0a:82:a3:97:01:0c:81:c4:d1:87:28:cd:c8:3f: c0:d3:f8:b2:aa:85:c4:cd:d7:a6:88:9e:41:6d:b6: 12:2e:fb:47:8c:d0:2a:13:65:d3:31:29:49:f1:0a: e6:b2:37:dd:49:e9:09:61:b3:7f:22:1f:e3:17:4f: 3a:6d:3a:b7:ba:fd:3e:d6:5b:db:a8:65:34:bf:51: 7d:43:fa:a6:f7:38:e7:bf:43:0f:4f:20:75:ce:52: 9b:b3:03:e7:ee:ab:7d:73:a3:8c:a7:2b:6c:b6:bd: 22:31:84:2c:af:00:19:40:62:02:60:e4:22:6b:82: 25:23:df:bd:c4:59:d0:fa:5b:eb:4d:60:da:5f:08: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:85:30:BD:D2:31:89:49:CD:83:73:2B:03:FB:EE:68:D9:7D:DD X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7e:24:3a:0c:b2:5c:b1:16:07:e5:1b:26:fc:27:47:89:37: c8:c8:9d:a8:56:79:62:a5:3b:2a:75:87:c2:f4:e7:23:23:b9: 43:d2:66:71:9e:3c:ae:a0:0e:1b:b0:7e:c1:10:a0:a1:e9:30: 3c:75:ad:cf:08:7a:93:f4:12:5e:8a:7a:8e:66:f5:00:35:b1: 03:5d:18:8b:77:c9:eb:1b:94:29:ba:e7:ba:63:2f:bc:71:1d: fe:77:8f:de:ed:f8:f2:6b:74:95:18:e4:c0:96:5a:67:57:5b: 51:d6:cc:32:b2:db:1a:23:62:02:60:2d:59:d7:ec:5b:14:3b: 6d:39:66:51:0c:f5:96:7e:f7:1a:09:11:9a:79:f6:ec:21:ee: c9:c9:52:db:e0:ee:7b:87:60:ee:e1:2f:f6:e3:22:f7:a6:8f: 1c:2a:ed:13:4a:a9:03:3c:5b:24:49:a2:c1:86:88:4e:f2:2e: e7:a6:5a:93:75:c5:8b:5f:5f:e5:b6:8b:0c:f2:41:9e:8b:fe: 1b:1f:bf:97:b8:73:24:2f:88:65:bc:c1:cd:13:b7:9e:a6:f2: 60:c5:48:82:6c:99:64:c0:5a:5a:8f:3a:ec:c7:bd:13:83:c4: f0:25:49:72:6f:f2:1a:cf:5b:c0:2a:ef:07:bf:5d:a1:f9:12: 9a:09:d9:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjYxMDAzMDUxMTQ5WhcNMjYxMDEwMDUxMTQ5WjAYMRYwFAYD VQQDEw02YWMwOGU5Ni0zZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/PQW53sdCl3AKDi4GkKeYOLVp/MwTumylEoPhWwEZj++Dw8aie0Tl/RddCw MM+yFh/D9DGE8LkLAOefNun5BTZpdq0WuQWRsK0/4wuzfZGdrXfC1MRFbm6BFu5s SqGFqPniEymsc8d5xcNPYaJOd2JwXZD3Tk1JCoKjlwEMgcTRhyjNyD/A0/iyqoXE zdemiJ5BbbYSLvtHjNAqE2XTMSlJ8QrmsjfdSekJYbN/Ih/jF086bTq3uv0+1lvb qGU0v1F9Q/qm9zjnv0MPTyB1zlKbswPn7qt9c6OMpytstr0iMYQsrwAZQGICYOQi a4IlI9+9xFnQ+lvrTWDaXwiKlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6YhTC9 0jGJSc2DcysD++5o2X3dMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcH4kOgyyXLEWB+UbJvwnR4k3yMidqFZ5YqU7KnWHwvTnIyO5Q9JmcZ48rqAO G7B+wRCgoekwPHWtzwh6k/QSXop6jmb1ADWxA10Yi3fJ6xuUKbrnumMvvHEd/neP 3u348mt0lRjkwJZaZ1dbUdbMMrLbGiNiAmAtWdfsWxQ7bTlmUQz1ln73GgkRmnn2 7CHuyclS2+Due4dg7uEv9uMi96aPHCrtE0qpAzxbJEmiwYaITvIu56Zak3XFi19f 5baLDPJBnov+Gx+/l7hzJC+IZbzBzRO3nqbyYMVIgmyZZMBaWo867Me9E4PE8CVJ cm/yGs9bwCrvB79dofkSmgnZsA== -----END CERTIFICATE-----Generated at Sun Oct 4 17:21:03 2026 by rpki-client