$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: fCymY5MvrJ2ij1BnIu/VzF5pQmRJQxqIDvjd9GQO4eU= Subject key identifier: B2:F9:A2:B0:50:FC:78:A0:94:54:A7:0E:B5:AE:68:AF:5F:B8:0E:DB Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 0221 Signing time: Mon 28 Sep 2026 16:48:20 +0000 Manifest this update: Mon 28 Sep 2026 16:48:20 +0000 Manifest next update: Mon 05 Oct 2026 16:48:20 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: WwB5XpZBqNznRCtXxG8QtxdhPIa1Gv0ZEYESXyUEBuo=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Sep 28 16:48:20 2026 GMT Not After : Oct 5 16:48:20 2026 GMT Subject: CN=6aba9a54-fdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:48:73:29:00:3e:91:68:91:8c:f3:67:19: d8:37:18:14:ab:9a:21:28:f4:88:7d:7d:7a:9b:19: a5:b8:0c:83:f1:ce:38:a6:07:fe:82:d3:e9:cc:76: 5b:4b:62:e7:0d:75:3c:7a:46:41:ef:41:54:c0:23: ab:b3:53:b2:9d:99:1e:1b:29:6c:5e:54:68:90:6f: bc:1f:53:32:84:fd:f1:37:25:6a:68:b1:1d:b1:74: 07:82:2e:e8:42:a5:9e:24:53:61:f1:51:23:2f:fe: ad:a7:15:15:3e:1f:59:eb:85:f4:03:02:e7:4f:82: 50:30:28:ab:e2:1a:2b:2d:45:52:38:b5:8d:2f:34: 0a:ab:5a:c0:af:3b:a4:35:43:93:7e:3e:1d:89:3d: 67:ee:41:19:64:b4:57:ab:00:e7:8d:6b:b6:f5:fe: bb:03:6f:e6:44:b0:30:6b:01:85:37:60:f5:cf:73: 74:d2:ba:35:be:c5:5b:11:1e:99:cb:59:67:d6:f3: 63:01:73:9a:60:cc:40:4d:ab:48:eb:83:65:75:8e: d1:1a:6a:36:89:b5:5a:6a:0c:5e:13:1b:24:73:f4: 0d:fb:ae:a1:e1:1b:94:9b:98:40:02:95:7b:be:8a: d8:15:44:8b:f2:8f:ca:4c:62:89:cb:a8:fb:13:7c: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:A2:B0:50:FC:78:A0:94:54:A7:0E:B5:AE:68:AF:5F:B8:0E:DB X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ee:85:47:f6:13:b2:6c:2d:a9:36:71:ba:ef:82:2b:96:17: fc:bd:f9:5c:74:55:12:f5:c3:93:37:67:08:2f:3a:31:07:36: 91:d2:fb:fb:d0:df:10:1a:1e:b7:2c:46:89:36:95:f4:52:9a: 11:71:59:b3:c3:20:81:70:9e:51:3a:c1:1e:08:70:a3:5b:ae: e6:50:ee:d2:91:05:e5:e4:f4:02:02:56:9b:0d:81:1d:0e:ad: 16:ed:84:0e:3b:69:2b:b1:b8:bc:09:a9:f4:f7:ec:eb:72:fb: 7e:cd:63:c6:69:8c:db:51:aa:ec:6e:24:96:fa:04:57:4f:90: 93:e4:e5:2b:42:f0:0f:35:04:4f:45:ee:3b:c9:6a:7e:fc:97: e7:89:da:e6:3b:48:f8:b3:b2:57:f9:5f:31:aa:78:35:e5:ef: cc:5c:b6:cc:2c:21:76:46:75:56:58:73:70:5b:4d:17:c0:58: ea:21:03:e0:c0:6a:47:98:45:8b:5e:0f:8c:90:08:ab:a8:c7: 6e:f3:ae:08:32:3d:a9:cb:af:3a:e0:59:d2:58:01:c7:eb:f1: 27:aa:52:95:9a:be:0c:62:93:b2:87:55:25:67:a6:d0:ee:2a: ed:87:23:c7:02:a6:6d:a8:df:6e:c0:04:96:e8:d4:1b:a7:4b: be:44:17:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjYwOTI4MTY0ODIwWhcNMjYxMDA1MTY0ODIwWjAYMRYwFAYD VQQDEw02YWJhOWE1NC1mZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O1IcykAPpFokYzzZxnYNxgUq5ohKPSIfX16mxmluAyD8c44pgf+gtPpzHZb S2LnDXU8ekZB70FUwCOrs1OynZkeGylsXlRokG+8H1MyhP3xNyVqaLEdsXQHgi7o QqWeJFNh8VEjL/6tpxUVPh9Z64X0AwLnT4JQMCir4horLUVSOLWNLzQKq1rArzuk NUOTfj4diT1n7kEZZLRXqwDnjWu29f67A2/mRLAwawGFN2D1z3N00ro1vsVbER6Z y1ln1vNjAXOaYMxATatI64NldY7RGmo2ibVaagxeExskc/QN+66h4RuUm5hAApV7 vorYFUSL8o/KTGKJy6j7E3ztHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLL5orBQ /HiglFSnDrWuaK9fuA7bMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAju6FR/YTsmwtqTZxuu+CK5YX/L35XHRVEvXDkzdnCC86MQc2kdL7+9DfEBoe tyxGiTaV9FKaEXFZs8MggXCeUTrBHghwo1uu5lDu0pEF5eT0AgJWmw2BHQ6tFu2E DjtpK7G4vAmp9Pfs63L7fs1jxmmM21Gq7G4klvoEV0+Qk+TlK0LwDzUET0XuO8lq fvyX54na5jtI+LOyV/lfMap4NeXvzFy2zCwhdkZ1VlhzcFtNF8BY6iED4MBqR5hF i14PjJAIq6jHbvOuCDI9qcuvOuBZ0lgBx+vxJ6pSlZq+DGKTsodVJWem0O4q7Ycj xwKmbajfbsAElujUG6dLvkQXdw== -----END CERTIFICATE-----Generated at Tue Sep 29 02:08:26 2026 by rpki-client