$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: kZxP5ka9s/73nw7sAqFGili0oR1ARk6EtLmuFy5nQ1U= Subject key identifier: A6:3F:17:9A:BD:A1:F2:A2:76:24:D3:2C:87:59:97:82:EA:22:7E:B1 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2E5C Signing time: Sat 10 Oct 2026 15:28:46 +0000 Manifest this update: Sat 10 Oct 2026 15:28:45 +0000 Manifest next update: Sat 17 Oct 2026 15:28:45 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: OdtbsFGveJ/QPQvAzeUPgeA8O3B9XKeac4SkjMn/UGw=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11906 (0x2e82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Oct 10 15:28:45 2026 GMT Not After : Oct 17 15:28:45 2026 GMT Subject: CN=6aca59ae-457f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:b9:95:24:09:09:63:9c:f1:4e:77:39:ca: 0e:31:17:7f:ce:9c:b3:03:63:94:0d:4b:48:81:69: 29:ba:8c:84:39:6b:fb:4a:67:13:a3:b4:08:04:db: 63:c0:2a:f6:ec:82:51:22:3b:37:8f:a8:b2:3f:25: 4b:52:2a:2d:4a:7a:a4:b1:c3:d1:f4:de:56:cd:52: 2f:fe:01:b2:10:b5:86:0e:6f:52:14:9c:e4:7a:e4: 73:45:03:f9:67:7b:26:97:74:e5:1a:38:d3:12:e8: ee:f6:49:da:d2:fa:e5:a6:72:32:a1:2e:1e:d8:2c: 09:1d:40:dc:7d:8d:dd:89:a7:38:31:9a:4d:ba:52: 1c:04:af:b8:b0:af:4c:be:ec:56:35:15:7d:04:b0: 00:20:89:d3:10:e1:cf:5b:91:9c:20:d8:4f:ee:b4: 94:a0:97:30:0e:fb:05:6f:e8:1e:a6:34:0d:88:50: a4:60:48:4d:d8:06:d0:c1:cf:d7:a0:cb:4f:ec:7a: a8:64:a3:c5:b1:69:2b:dc:f1:e7:e3:e0:cd:2e:07: 39:26:da:82:7a:ea:9b:0a:f3:5d:39:79:c1:b1:a3: 12:e6:e2:ac:71:58:5f:65:18:ac:e8:a0:3e:bc:0d: 28:ad:6d:0c:c5:3c:eb:58:ff:cd:b8:f4:98:7a:b5: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:17:9A:BD:A1:F2:A2:76:24:D3:2C:87:59:97:82:EA:22:7E:B1 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ca:2b:64:3c:6f:73:57:bf:34:f2:25:3a:88:f6:8d:52:94: c4:ea:a7:d3:7b:32:f2:b8:63:2b:80:db:fc:a8:de:15:e5:ce: 8f:3e:c9:88:66:9a:bd:0e:8e:c6:a1:ac:f2:ce:fa:93:c8:cd: 9d:1e:d2:78:b8:59:2a:e4:a0:92:51:12:e7:5c:85:55:8b:6c: 51:35:c9:88:07:fa:6b:a8:5e:4d:30:b7:f3:07:3c:50:46:93: d2:c0:97:99:b8:55:e3:31:7d:2a:7b:93:04:a6:8d:7c:5c:dd: 86:74:a5:9c:d7:5c:9a:4f:dc:f8:45:c9:f7:30:5e:9d:fa:e4: d4:6f:20:22:fc:2a:14:65:bc:e6:dc:8d:dc:36:17:1b:19:f2: 39:0e:23:dc:2d:a4:1b:79:f9:60:4b:4d:b2:58:c9:b6:4e:83: a5:5c:77:ab:a5:57:4f:cc:ab:e3:1d:55:cc:c7:2a:7d:22:c6: d8:91:c3:45:1e:da:ed:75:7a:dd:ba:06:ee:a6:8f:33:2e:ee: 02:ee:11:1f:da:29:d4:96:ef:39:a0:0a:83:06:d3:9e:2a:93: 2c:07:e7:7b:e6:23:b2:da:ff:65:62:14:29:df:a9:e8:6f:e4: 34:92:23:f5:40:f7:84:d9:f0:bb:9e:2f:52:10:8e:67:08:e2: 13:c5:71:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYxMDEwMTUyODQ1WhcNMjYxMDE3MTUyODQ1WjAYMRYwFAYD VQQDEw02YWNhNTlhZS00NTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqm5lSQJCWOc8U53OcoOMRd/zpyzA2OUDUtIgWkpuoyEOWv7SmcTo7QIBNtj wCr27IJRIjs3j6iyPyVLUiotSnqkscPR9N5WzVIv/gGyELWGDm9SFJzkeuRzRQP5 Z3sml3TlGjjTEuju9kna0vrlpnIyoS4e2CwJHUDcfY3diac4MZpNulIcBK+4sK9M vuxWNRV9BLAAIInTEOHPW5GcINhP7rSUoJcwDvsFb+gepjQNiFCkYEhN2AbQwc/X oMtP7HqoZKPFsWkr3PHn4+DNLgc5JtqCeuqbCvNdOXnBsaMS5uKscVhfZRis6KA+ vA0orW0MxTzrWP/NuPSYerWwoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKY/F5q9 ofKidiTTLIdZl4LqIn6xMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR8orZDxvc1e/NPIlOoj2jVKUxOqn03sy8rhjK4Db/KjeFeXOjz7JiGaavQ6O xqGs8s76k8jNnR7SeLhZKuSgklES51yFVYtsUTXJiAf6a6heTTC38wc8UEaT0sCX mbhV4zF9KnuTBKaNfFzdhnSlnNdcmk/c+EXJ9zBenfrk1G8gIvwqFGW85tyN3DYX GxnyOQ4j3C2kG3n5YEtNsljJtk6DpVx3q6VXT8yr4x1VzMcqfSLG2JHDRR7a7XV6 3boG7qaPMy7uAu4RH9op1JbvOaAKgwbTniqTLAfne+Yjstr/ZWIUKd+p6G/kNJIj 9UD3hNnwu54vUhCOZwjiE8VxNw== -----END CERTIFICATE-----Generated at Mon Oct 12 18:40:41 2026 by rpki-client