$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: WFPK3uXmK9V64qjcFpU9car3rc5R+YZHuXFDMSicZe0= Subject key identifier: EC:1D:87:34:C8:9B:C4:E5:A3:D8:F5:EA:8F:FF:DE:B7:B8:51:C5:49 Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 84 Signing time: Mon 05 Oct 2026 08:10:22 +0000 Manifest this update: Mon 05 Oct 2026 08:10:21 +0000 Manifest next update: Mon 12 Oct 2026 08:10:21 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: lHNL36xViQ6DmH6oHxWly90q6w9FhYv+Xk4Yr622Uvw=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 08:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Oct 5 08:10:21 2026 GMT Not After : Oct 12 08:10:21 2026 GMT Subject: CN=6ac35b6d-fd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:b0:89:3d:48:9f:84:a2:95:0c:a1:97:9b: db:dc:ca:2f:f9:46:45:da:f5:e4:d2:1b:30:70:27: 7e:b5:91:81:13:38:6d:51:8f:4e:54:cd:6e:cd:c2: b9:bd:6f:6f:35:b4:e6:e0:9e:62:f0:59:23:8e:f1: 42:20:ae:1f:e6:bb:2b:58:67:c0:aa:16:00:15:b8: 2f:63:25:0c:30:3c:c7:20:66:e8:cc:3b:5a:e2:87: ea:e4:5f:09:88:41:f5:d1:75:8b:82:e2:40:e4:7c: 8c:74:c1:21:32:e4:70:5b:a3:2a:23:a6:70:3a:fd: 8a:58:31:3c:d6:17:ec:d3:d3:7e:fe:60:ac:ed:10: b3:4f:37:34:1d:ce:77:b2:6e:6d:76:13:88:1d:9f: be:f0:f9:07:b3:07:0d:bc:cf:ba:59:65:d7:eb:bb: c6:ce:8d:0b:bd:98:8b:c7:98:fa:7e:0b:c6:ac:cb: f8:6b:02:93:26:b4:25:2a:7f:df:3e:58:1b:3b:d4: 0f:1c:d8:72:b4:4d:7e:51:bb:44:ee:b6:01:88:57: 96:af:2a:57:80:b1:ba:55:8d:25:f3:c0:90:f3:ae: 13:d8:08:4a:39:8e:6a:75:48:32:70:8d:cf:09:78: d9:04:e4:a2:c4:2b:f0:80:92:28:89:d7:fb:7b:76: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:87:34:C8:9B:C4:E5:A3:D8:F5:EA:8F:FF:DE:B7:B8:51:C5:49 X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a4:ab:a8:40:14:92:30:fb:0a:62:7b:35:b2:36:6d:84:e0: 75:17:be:0c:8d:02:f0:d5:e5:1e:f6:32:4b:51:b1:bf:a0:03: d3:20:65:17:d9:32:d8:f8:a0:d8:8f:c2:5a:58:45:74:60:1d: 8b:80:75:98:d6:3d:00:33:df:05:5f:3d:d8:ea:23:3d:b8:a7: a7:82:05:e5:0d:42:57:92:32:4c:8a:b3:6a:d3:64:3a:a0:f2: 35:01:4b:5b:71:7b:56:fd:b9:40:cd:72:28:34:e4:39:74:93: fe:24:ae:eb:d1:60:7c:f2:1d:bf:38:dc:6f:71:b3:ca:7b:71: 14:e5:0b:ce:3b:c2:5a:a8:63:95:63:cd:3d:41:47:87:aa:5f: 86:b9:e0:77:ea:53:2c:1e:cb:86:06:57:86:af:03:11:89:31: 5a:94:6c:7e:e6:a4:3f:07:46:2e:0a:4f:7d:2e:66:db:d0:85: 2b:99:6a:d5:7c:6d:71:f6:0b:70:6a:7c:d2:05:72:1c:71:93: 35:6a:85:1b:28:74:ba:df:52:0d:f3:91:de:f2:5a:ce:b7:c9: 21:b2:7f:59:dd:76:ff:6a:91:5a:bf:69:6e:53:6b:b7:f8:2d: 6a:dc:74:55:af:22:54:5e:17:d8:52:c7:83:f4:3a:35:4b:20: de:56:c4:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZEMDIxMTAvBgNVBAUTKENEQzY5MDgzMkYyRDEyMzVEQUJGMUVGMzE3RjExQjY5 NUVFQkRBNEYwHhcNMjYxMDA1MDgxMDIxWhcNMjYxMDEyMDgxMDIxWjAYMRYwFAYD VQQDEw02YWMzNWI2ZC1mZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C+wiT1In4SilQyhl5vb3Mov+UZF2vXk0hswcCd+tZGBEzhtUY9OVM1uzcK5 vW9vNbTm4J5i8FkjjvFCIK4f5rsrWGfAqhYAFbgvYyUMMDzHIGbozDta4ofq5F8J iEH10XWLguJA5HyMdMEhMuRwW6MqI6ZwOv2KWDE81hfs09N+/mCs7RCzTzc0Hc53 sm5tdhOIHZ++8PkHswcNvM+6WWXX67vGzo0LvZiLx5j6fgvGrMv4awKTJrQlKn/f PlgbO9QPHNhytE1+UbtE7rYBiFeWrypXgLG6VY0l88CQ864T2AhKOY5qdUgycI3P CXjZBOSixCvwgJIoidf7e3Z9GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwdhzTI m8Tlo9j16o//3re4UcVJMB8GA1UdIwQYMBaAFM3GkIMvLRI12r8e8xfxG2le69pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkQwMi9FMUE2NkYxODAw REUxMUYxQUQ4NEFEODQ3NTZGNTZCQy96Y2FRZ3k4dEVqWGF2eDd6Rl9FYmFWN3Iy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkQwMi9FMUE2NkYxODAwREUxMUYxQUQ4NEFEODQ3NTZGNTZCQy96Y2FRZ3k4dEVq WGF2eDd6Rl9FYmFWN3IyazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKSrqEAUkjD7CmJ7NbI2bYTgdRe+DI0C8NXlHvYyS1Gxv6AD0yBlF9ky2Pig 2I/CWlhFdGAdi4B1mNY9ADPfBV892OojPbinp4IF5Q1CV5IyTIqzatNkOqDyNQFL W3F7Vv25QM1yKDTkOXST/iSu69FgfPIdvzjcb3GzyntxFOULzjvCWqhjlWPNPUFH h6pfhrngd+pTLB7LhgZXhq8DEYkxWpRsfuakPwdGLgpPfS5m29CFK5lq1XxtcfYL cGp80gVyHHGTNWqFGyh0ut9SDfOR3vJazrfJIbJ/Wd12/2qRWr9pblNrt/gtatx0 Va8iVF4X2FLHg/Q6NUsg3lbEJg== -----END CERTIFICATE-----Generated at Tue Oct 6 23:19:25 2026 by rpki-client