$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: sQgCK+KELhhxG7hRsJ4aD6CiFIkc595lXIyuAkgHpSQ= Subject key identifier: 1D:37:89:12:36:10:C3:66:AE:AF:14:35:E0:63:FD:80:13:D9:14:90 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0D40 Signing time: Thu 08 Oct 2026 18:22:59 +0000 Manifest this update: Thu 08 Oct 2026 18:22:59 +0000 Manifest next update: Thu 15 Oct 2026 18:22:59 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: aWPLosnLmRasgF+e1yBYTKNw2sdN40Flbb3eUvVM72A=) 2: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: FYuJrC31PU9aboeDs/Zo/WR1Zd9S0N3nIbn61WOZ2kE=) 3: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Oj89BVTbff35iiUEgDKh/2E91FVnzurxC9Bnk1Qy+WY=) 4: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: fsfmLYQjCYyXbWH64txVnYTeAdLVUPvTMFUvd9WCSAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Oct 8 18:22:59 2026 GMT Not After : Oct 15 18:22:59 2026 GMT Subject: CN=6ac7df83-7d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:d9:52:2d:75:21:29:04:86:51:b3:cd:25: 20:c9:73:ea:7f:2f:34:59:50:eb:eb:b7:52:e6:18: 77:f4:ed:67:dd:58:fc:53:e7:80:82:85:ec:ce:a8: 2e:55:9e:e7:31:05:e8:5f:9a:4c:09:53:e8:22:e5: d4:d3:bc:eb:89:f6:dd:ae:0f:f2:db:fc:09:31:d4: 3b:92:bc:fe:d2:38:b0:41:50:9b:5e:7b:2a:ce:68: 8b:7d:78:b1:10:44:dd:aa:28:a4:94:2f:1c:dc:a5: ca:75:b7:46:d0:fb:e6:4f:25:47:8d:18:13:a1:2a: 65:29:d8:0a:0a:8e:55:5c:93:44:07:f1:07:3b:09: 8c:58:7f:51:93:12:8d:f6:03:94:c6:35:62:8f:39: 7f:97:51:c9:ea:12:4f:4b:73:bb:15:f9:ab:43:18: b1:a9:ff:46:25:c0:d5:f5:22:21:6d:4c:5c:18:48: af:c3:3a:37:5f:52:72:e1:ae:b4:07:67:61:30:af: 21:11:0a:cb:91:20:26:24:21:1d:32:2c:09:c5:85: ff:f9:7b:20:4b:0d:1b:9e:b8:a1:47:b2:54:38:74: 35:2d:0e:6b:e8:1f:4d:9a:ca:c2:12:37:e1:8d:de: 54:7e:36:05:f3:78:90:f2:cc:cd:39:2e:fb:11:b3: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:89:12:36:10:C3:66:AE:AF:14:35:E0:63:FD:80:13:D9:14:90 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:57:e5:10:eb:a3:ca:19:69:29:93:96:37:dc:96:d5:5b:24: 44:4b:cc:bc:95:14:93:75:8b:ca:dd:e8:33:fd:83:8a:b1:5c: c8:8b:7a:13:4c:1b:b9:71:da:f3:bf:52:eb:69:01:eb:91:e1: fb:12:bc:e0:fc:8b:23:e3:14:dc:8a:cc:93:34:d3:80:a9:33: b2:d6:a0:45:11:5f:6d:ed:ad:8d:42:6f:ad:d5:f1:e7:26:ce: 2c:86:14:2b:fb:6b:cb:ac:c9:93:c0:0c:ed:f3:c2:36:d7:0b: a2:2b:8d:80:ee:43:ff:70:71:a5:e6:d4:8d:7f:9b:2b:01:ed: a7:86:6d:47:5e:38:92:bd:44:4f:60:f5:0e:cf:e4:89:ec:5e: 6a:29:bf:25:f8:18:fb:75:e7:ca:88:d3:e8:e3:04:f2:60:97: e0:53:62:28:40:4f:ef:ea:d6:bc:6c:7d:39:40:1f:a2:2c:36: 4e:5a:27:b6:b5:a3:15:89:36:7f:71:4d:56:95:c1:b2:58:e0: f0:70:94:aa:f0:1f:71:75:de:18:f4:42:b2:f2:a1:2b:44:6d: e1:4f:94:0f:1f:29:e7:53:df:01:61:69:a5:ed:d5:b8:1f:67: 55:9f:ad:d3:7c:7c:06:ed:dd:0d:d5:83:58:70:50:b0:45:b4: c6:0d:71:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjYxMDA4MTgyMjU5WhcNMjYxMDE1MTgyMjU5WjAYMRYwFAYD VQQDEw02YWM3ZGY4My03ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tjZUi11ISkEhlGzzSUgyXPqfy80WVDr67dS5hh39O1n3Vj8U+eAgoXszqgu VZ7nMQXoX5pMCVPoIuXU07zrifbdrg/y2/wJMdQ7krz+0jiwQVCbXnsqzmiLfXix EETdqiiklC8c3KXKdbdG0PvmTyVHjRgToSplKdgKCo5VXJNEB/EHOwmMWH9RkxKN 9gOUxjVijzl/l1HJ6hJPS3O7FfmrQxixqf9GJcDV9SIhbUxcGEivwzo3X1Jy4a60 B2dhMK8hEQrLkSAmJCEdMiwJxYX/+XsgSw0bnrihR7JUOHQ1LQ5r6B9NmsrCEjfh jd5UfjYF83iQ8szNOS77EbN/7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB03iRI2 EMNmrq8UNeBj/YAT2RSQMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAlflEOujyhlpKZOWN9yW1VskREvMvJUUk3WLyt3oM/2DirFcyIt6E0wbuXHa 879S62kB65Hh+xK84PyLI+MU3IrMkzTTgKkzstagRRFfbe2tjUJvrdXx5ybOLIYU K/try6zJk8AM7fPCNtcLoiuNgO5D/3BxpebUjX+bKwHtp4ZtR144kr1ET2D1Ds/k iexeaim/JfgY+3XnyojT6OME8mCX4FNiKEBP7+rWvGx9OUAfoiw2TlontrWjFYk2 f3FNVpXBsljg8HCUqvAfcXXeGPRCsvKhK0Rt4U+UDx8p51PfAWFppe3VuB9nVZ+t 03x8Bu3dDdWDWHBQsEW0xg1xpg== -----END CERTIFICATE-----Generated at Fri Oct 9 20:34:25 2026 by rpki-client