$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: geSvtsJFesiivSOOtNszDzHQOpE4//ZWOnMEam3kPHQ= Subject key identifier: 49:E3:F7:E8:FE:B0:D1:08:B1:13:54:20:DF:A1:77:EC:16:C4:25:46 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 0163 Signing time: Sat 03 Oct 2026 05:41:10 +0000 Manifest this update: Sat 03 Oct 2026 05:41:09 +0000 Manifest next update: Sat 10 Oct 2026 05:41:09 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: L9oaG7KmbAMrjixfd4NgPHFASiydFHxjXAUCSgT2jaQ=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Oct 3 05:41:09 2026 GMT Not After : Oct 10 05:41:09 2026 GMT Subject: CN=6ac09576-c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:db:94:21:35:01:58:43:68:3b:57:0b:24: 56:2b:33:90:f7:8c:08:81:96:e5:1f:28:8c:ed:49: d0:c1:2e:2a:32:ee:b6:8f:15:31:27:ed:92:8e:41: 55:7d:b8:7b:f3:fb:38:56:f5:d9:54:d8:25:2f:4d: aa:39:c8:3a:4d:30:d9:60:ef:8f:e2:61:dd:d9:3a: a9:c1:0d:6a:c4:2e:6b:e2:3e:43:dd:2e:51:ad:e9: 6b:d6:43:b7:e5:42:3d:3c:48:05:7f:e6:8a:41:5d: be:fb:d3:29:e1:dd:d9:8d:81:25:39:73:bf:aa:df: 32:f8:9e:1e:ad:e9:b7:73:8a:f9:3e:e9:40:f5:5b: 72:be:14:2e:9e:83:c5:ec:ae:cd:fe:91:01:0e:3f: 42:59:21:11:53:37:bb:10:48:79:e1:bd:11:af:72: 04:b4:2e:f4:13:63:41:6b:54:0e:6b:3c:cf:80:02: 5b:97:3f:fe:b7:1a:b7:d7:6d:61:eb:8b:ee:a4:43: 3e:fa:d5:ed:37:7f:37:99:7c:7d:b8:f9:13:2f:2e: 87:6b:21:be:79:99:b2:87:20:49:54:8d:ff:10:0f: f3:69:a7:19:5d:63:01:2a:b4:8a:a0:79:dc:2e:4c: 31:46:80:87:3a:5e:22:a1:95:a6:22:c0:f0:3a:5b: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:F7:E8:FE:B0:D1:08:B1:13:54:20:DF:A1:77:EC:16:C4:25:46 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:05:2b:31:59:ae:81:16:5c:9b:94:42:3d:e3:e5:30:b5:87: d9:de:b7:89:ec:eb:0c:52:dd:09:78:5d:34:04:64:8f:9c:82: 5b:4f:0a:1e:59:1e:d6:b7:df:2d:f6:68:ab:22:a4:14:15:e5: 15:81:40:4e:ed:3f:fe:14:f6:94:90:89:74:5e:df:d8:9c:43: 71:e9:ae:f5:26:f7:99:27:df:6a:3c:ee:d2:32:63:b9:8a:13: 34:ee:b3:bc:cf:5e:73:83:87:4a:dd:e9:33:70:cc:0e:87:0e: c2:e6:4e:08:54:c8:3d:46:bf:7a:8f:5a:b4:4a:6e:31:d5:6f: b0:c6:83:14:a4:93:83:4c:9b:ae:a7:0b:90:ba:c7:55:90:29: 1e:73:3e:1a:54:a2:fd:58:a3:a7:cb:c5:a4:84:34:4c:a1:69: de:8d:ce:c5:27:da:fc:d8:e5:4c:cf:67:d7:32:ab:0e:5a:0a: e6:3f:f5:ee:29:13:f3:2a:da:21:c8:e1:2e:4e:1a:91:63:aa: ad:3a:a1:4a:c2:70:2e:ff:62:33:38:44:0b:d1:ef:3e:41:7d: 84:52:c8:9e:e2:bb:6e:4f:29:2e:37:ca:63:c9:15:f4:8a:49: 2f:21:90:27:33:6b:c9:87:06:1a:c3:71:33:79:cb:27:ae:ec: e3:51:2c:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjYxMDAzMDU0MTA5WhcNMjYxMDEwMDU0MTA5WjAYMRYwFAYD VQQDEw02YWMwOTU3Ni1jMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9XblCE1AVhDaDtXCyRWKzOQ94wIgZblHyiM7UnQwS4qMu62jxUxJ+2SjkFV fbh78/s4VvXZVNglL02qOcg6TTDZYO+P4mHd2TqpwQ1qxC5r4j5D3S5Rrelr1kO3 5UI9PEgFf+aKQV2++9Mp4d3ZjYElOXO/qt8y+J4erem3c4r5PulA9VtyvhQunoPF 7K7N/pEBDj9CWSERUze7EEh54b0Rr3IEtC70E2NBa1QOazzPgAJblz/+txq3121h 64vupEM++tXtN383mXx9uPkTLy6HayG+eZmyhyBJVI3/EA/zaacZXWMBKrSKoHnc LkwxRoCHOl4ioZWmIsDwOlshlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnj9+j+ sNEIsRNUIN+hd+wWxCVGMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVgUrMVmugRZcm5RCPePlMLWH2d63iezrDFLdCXhdNARkj5yCW08KHlke1rff LfZoqyKkFBXlFYFATu0//hT2lJCJdF7f2JxDcemu9Sb3mSffajzu0jJjuYoTNO6z vM9ec4OHSt3pM3DMDocOwuZOCFTIPUa/eo9atEpuMdVvsMaDFKSTg0ybrqcLkLrH VZApHnM+GlSi/Vijp8vFpIQ0TKFp3o3OxSfa/NjlTM9n1zKrDloK5j/17ikT8yra IcjhLk4akWOqrTqhSsJwLv9iMzhEC9HvPkF9hFLInuK7bk8pLjfKY8kV9IpJLyGQ JzNryYcGGsNxM3nLJ67s41Es6A== -----END CERTIFICATE-----Generated at Sun Oct 4 21:16:35 2026 by rpki-client