$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft File: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json) Hash identifier: mKs8EHrH/KZGgjMM71IH6wBPkEBrusHfj2wlx+TL9hE= Subject key identifier: 12:FE:CD:A4:E5:89:1D:CA:CC:F6:03:12:47:75:22:C3:8E:B5:DC:E8 Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1 Certificate issuer: /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft Manifest number: 3E Signing time: Wed 07 Oct 2026 09:07:53 +0000 Manifest this update: Wed 07 Oct 2026 09:07:53 +0000 Manifest next update: Wed 14 Oct 2026 09:07:53 +0000 Files and hashes: 1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: Hxz66eL4jURve8LYNPMia5QinYpO0R+E7GSJ70E39rg=) 2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1 Validity Not Before: Oct 7 09:07:53 2026 GMT Not After : Oct 14 09:07:53 2026 GMT Subject: CN=6ac60be9-8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:c0:de:a5:e9:ce:55:f9:6f:5a:74:e9:14: b2:b5:03:f2:81:dd:4d:12:5d:c9:c4:46:61:39:22: 3d:b0:9d:d7:96:be:94:01:84:05:38:a8:8a:36:aa: 1e:b1:b3:4d:68:44:95:d2:20:7e:d2:3b:a4:50:78: 81:e7:6c:fb:28:ac:dd:b4:d8:f7:b5:62:ea:e5:e8: 79:9d:b3:9d:64:95:bb:53:7c:f8:88:40:a7:bc:1c: a8:16:70:da:63:d1:12:c8:8c:ef:1a:ec:c7:05:0d: 2f:8e:6a:62:96:7b:f9:0d:88:2f:b9:71:bc:5c:ef: b5:5b:98:6a:dd:3f:db:79:ab:d6:7d:1e:9c:e5:ee: 48:2a:50:d0:ad:d3:2b:24:ac:dd:ca:21:43:e5:06: a0:48:33:9d:a3:8f:9b:ca:de:6b:e7:2e:53:6b:d2: 45:19:ec:1b:b2:f5:d4:53:55:73:1d:e9:86:d1:77: 87:3f:4d:c9:d0:f2:11:ed:4f:55:ec:47:71:e2:fd: 0b:6d:b3:0a:05:b0:a7:19:ab:6e:5b:18:d5:b7:e7: 24:89:48:74:15:f0:4d:b2:a6:e2:14:49:01:f7:9b: c5:b9:bc:de:a5:7d:0a:ef:b8:84:ee:50:fc:00:01: 15:a1:b8:dd:72:b0:f3:16:20:17:2c:5c:c1:1f:c3: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:CD:A4:E5:89:1D:CA:CC:F6:03:12:47:75:22:C3:8E:B5:DC:E8 X509v3 Authority Key Identifier: keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:d4:d3:1e:53:c7:dc:6a:56:ea:05:3c:c8:5f:e6:a4:f5: 45:69:e0:71:eb:f8:86:8b:22:97:21:5b:5d:a6:71:b2:3a:2e: 1f:6e:02:0a:a9:d2:73:c8:ab:33:a8:bf:22:f9:6e:b8:aa:c4: 80:16:98:3e:8b:e6:30:59:c5:43:8e:d7:ab:13:a8:0b:32:66: f9:15:38:d1:46:e2:46:ad:76:04:31:ca:74:08:6b:4b:8e:2c: 62:dc:24:e4:94:2c:b9:eb:e7:67:85:19:d6:39:d6:1c:1c:b5: 3d:fe:32:6d:4b:75:c4:f3:46:d6:b5:fa:30:02:0f:97:b8:f5: d3:e3:0a:f8:13:8f:34:25:d5:c2:ea:97:16:30:a4:33:65:db: 30:e5:7a:15:d1:17:e5:35:24:a3:ae:f1:c6:17:ca:1e:af:06: 6c:5a:98:c8:92:42:8d:c9:56:e1:90:4d:27:ed:6f:20:37:65: e6:21:1f:7e:23:02:35:93:f6:a3:cb:9c:d4:25:9b:54:b4:8b: 6f:7d:81:45:00:13:be:f3:ee:d8:43:9e:4f:9a:ac:4a:e5:7b: 2c:84:32:53:c9:67:cb:e8:35:a9:23:45:14:d0:7f:42:71:cc: d8:f9:f2:15:b9:2e:ec:9c:18:8e:5b:12:44:f6:89:9e:24:5f: 62:a7:e9:96 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OTRBNDExMC8GA1UEBRMoNjQ2NEE4RDRDQjdBNkJDOTJCOTQ5RDFBMUU2RjA5OTMz M0M1NkRGMTAeFw0yNjEwMDcwOTA3NTNaFw0yNjEwMTQwOTA3NTNaMBgxFjAUBgNV BAMTDTZhYzYwYmU5LThkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmcDepenOVflvWnTpFLK1A/KB3U0SXcnERmE5Ij2wndeWvpQBhAU4qIo2qh6x s01oRJXSIH7SO6RQeIHnbPsorN202Pe1Yurl6Hmds51klbtTfPiIQKe8HKgWcNpj 0RLIjO8a7McFDS+OamKWe/kNiC+5cbxc77VbmGrdP9t5q9Z9Hpzl7kgqUNCt0ysk rN3KIUPlBqBIM52jj5vK3mvnLlNr0kUZ7Buy9dRTVXMd6YbRd4c/TcnQ8hHtT1Xs R3Hi/QttswoFsKcZq25bGNW35ySJSHQV8E2ypuIUSQH3m8W5vN6lfQrvuITuUPwA ARWhuN1ysPMWIBcsXMEfw1L9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEv7NpOWJ HcrM9gMSR3Uiw4613OgwHwYDVR0jBBgwFoAUZGSo1Mt6a8krlJ0aHm8JkzPFbfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NEE0LzIyNjk4RTQ0NjVC QzExRjE5QTgxMDQzQzdFNDdBODg4L1pHU28xTXQ2YThrcmxKMGFIbThKa3pQRmJm RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkdTbzFNdDZhOGtybEowYUhtOEprelBGYmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 NEE0LzIyNjk4RTQ0NjVCQzExRjE5QTgxMDQzQzdFNDdBODg4L1pHU28xTXQ2YThr cmxKMGFIbThKa3pQRmJmRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaDNTTHlPH3GpW6gU8yF/mpPVFaeBx6/iGiyKXIVtdpnGyOi4fbgIKqdJzyKsz qL8i+W64qsSAFpg+i+YwWcVDjterE6gLMmb5FTjRRuJGrXYEMcp0CGtLjixi3CTk lCy56+dnhRnWOdYcHLU9/jJtS3XE80bWtfowAg+XuPXT4wr4E480JdXC6pcWMKQz Zdsw5XoV0RflNSSjrvHGF8oerwZsWpjIkkKNyVbhkE0n7W8gN2XmIR9+IwI1k/aj y5zUJZtUtItvfYFFABO+8+7YQ55PmqxK5XsshDJTyWfL6DWpI0UU0H9CcczY+fIV uS7snBiOWxJE9omeJF9ip+mW -----END CERTIFICATE-----Generated at Thu Oct 8 20:48:48 2026 by rpki-client