$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft File: ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft (raw, json) Hash identifier: XO9VfERwuMFgsfp7Nhp+mH7ppWu+zb01K3Vu8JOtdOs= Subject key identifier: A6:95:B9:91:4A:C0:B6:0D:B8:87:27:6A:60:63:2A:FF:1F:D5:B2:09 Authority key identifier: 66:45:0F:17:D8:6D:96:CA:E6:54:00:22:28:2B:03:E7:21:29:9E:CC Certificate issuer: /CN=A918E173/serialNumber=66450F17D86D96CAE6540022282B03E721299ECC Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft Manifest number: 33 Signing time: Fri 13 Nov 2026 08:55:50 +0000 Manifest this update: Fri 13 Nov 2026 08:55:49 +0000 Manifest next update: Fri 20 Nov 2026 08:55:49 +0000 Files and hashes: 1: ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl (hash: 5qyQKr6p6qdZGZ90SXlfgZCVVx7Z0fwbk9cKKZvv/Js=) 2: FC6FC6A29FE711F18B94CE765F11F970.roa (hash: g2f+EoYHFG+LFRIeeVX6NmZdCaR6P/6t2a9QOrCB+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 08:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E173, serialNumber=66450F17D86D96CAE6540022282B03E721299ECC Validity Not Before: Nov 13 08:55:49 2026 GMT Not After : Nov 20 08:55:49 2026 GMT Subject: CN=6af6d096-5ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:05:a8:ec:72:5e:a1:77:1a:1a:47:e6:2f: bc:05:93:fc:88:89:32:21:29:a8:45:be:f9:c3:61: 2f:72:88:3f:ab:48:2c:6e:52:d5:f7:f6:1c:1c:9b: 07:e7:ae:c7:3d:a4:4e:9e:01:7b:35:51:6c:e6:99: 59:ac:28:43:49:81:61:2a:13:d7:1f:46:e7:1d:5e: f0:eb:87:3a:b8:17:29:84:61:f8:5a:50:e3:56:34: 14:6c:3e:e7:df:ef:93:d6:0f:00:20:6c:a7:9e:cf: e3:d7:a3:1a:f8:00:e0:1b:60:1a:8e:55:2d:e6:c6: ca:c3:29:20:57:29:de:68:3a:9d:9a:75:da:8e:e9: a1:14:93:63:29:5d:8d:f5:df:e3:30:4c:87:92:1d: 7c:b8:15:75:41:e5:1d:fd:ee:d9:d6:c4:6e:de:6b: a1:a8:1c:0a:f8:94:bb:9e:8c:fb:50:d1:2f:57:c4: 62:1c:f7:01:c4:03:82:b9:0d:c4:f3:aa:b7:c5:8d: bd:94:68:34:db:08:a9:40:d4:98:08:92:64:32:4b: d6:7b:c7:bb:d1:d6:35:9c:37:dd:80:9f:e6:ee:23: 1d:a7:17:8a:2f:28:59:6d:56:f7:5e:24:73:4a:6f: 85:87:e4:49:13:d2:32:10:7e:1a:9e:5b:9d:3f:8b: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:B9:91:4A:C0:B6:0D:B8:87:27:6A:60:63:2A:FF:1F:D5:B2:09 X509v3 Authority Key Identifier: keyid:66:45:0F:17:D8:6D:96:CA:E6:54:00:22:28:2B:03:E7:21:29:9E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkUPF9htlsrmVAAiKCsD5yEpnsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E173/DA9FBAF89E4F11F18AFEBAC16011F970/ZkUPF9htlsrmVAAiKCsD5yEpnsw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c4:a8:af:9e:88:42:24:e0:16:10:f8:93:e7:83:a3:88:99: 15:1e:8e:8d:42:71:69:e8:e5:30:77:fe:4b:e3:69:f6:fe:28: 4e:42:cd:2b:8d:c7:26:85:34:91:c3:36:cf:71:74:b6:00:20: 15:ca:10:6c:87:7d:61:e6:c4:cf:4c:6e:2d:1d:09:ca:d1:14: e0:63:d7:55:db:dc:7f:5f:00:9a:c4:3e:45:e6:ee:ff:a8:4e: f1:f6:51:78:7f:3f:bf:ed:cd:8e:a5:b6:7a:38:a4:18:95:03: 24:d0:7d:04:61:48:cd:f8:80:2f:42:4f:22:72:9a:4f:c3:67: e6:7d:f2:0e:a4:20:0b:c2:41:2c:34:6f:5f:37:17:3f:1b:56: a4:87:47:af:07:4e:47:32:5e:2f:a7:4d:e5:a2:54:2c:1a:17: 4b:50:6d:e2:e0:c2:c5:11:65:17:da:55:ec:06:6a:a8:bf:e3: 21:e0:0b:d8:e1:2c:40:11:b1:f3:26:4c:d5:bb:4b:81:34:6c: 03:54:2b:08:30:56:6a:d5:38:42:40:18:5c:b4:46:d5:4f:fb: f8:f3:31:1d:65:9f:4f:5d:c5:bf:a9:ba:8e:7a:6c:fa:5c:8e: 85:05:e4:bf:7c:f6:10:90:3c:c3:85:da:89:0a:d4:f8:01:fc: 83:93:ec:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTE3MzExMC8GA1UEBRMoNjY0NTBGMTdEODZEOTZDQUU2NTQwMDIyMjgyQjAzRTcy MTI5OUVDQzAeFw0yNjExMTMwODU1NDlaFw0yNjExMjAwODU1NDlaMBgxFjAUBgNV BAMTDTZhZjZkMDk2LTVjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtzQWo7HJeoXcaGkfmL7wFk/yIiTIhKahFvvnDYS9yiD+rSCxuUtX39hwcmwfn rsc9pE6eAXs1UWzmmVmsKENJgWEqE9cfRucdXvDrhzq4FymEYfhaUONWNBRsPuff 75PWDwAgbKeez+PXoxr4AOAbYBqOVS3mxsrDKSBXKd5oOp2addqO6aEUk2MpXY31 3+MwTIeSHXy4FXVB5R397tnWxG7ea6GoHAr4lLuejPtQ0S9XxGIc9wHEA4K5DcTz qrfFjb2UaDTbCKlA1JgIkmQyS9Z7x7vR1jWcN92An+buIx2nF4ovKFltVvdeJHNK b4WH5EkT0jIQfhqeW50/iwkPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUppW5kUrA tg24hydqYGMq/x/VsgkwHwYDVR0jBBgwFoAUZkUPF9htlsrmVAAiKCsD5yEpnsww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMTczL0RBOUZCQUY4OUU0 RjExRjE4QUZFQkFDMTYwMTFGOTcwL1prVVBGOWh0bHNybVZBQWlLQ3NENXlFcG5z dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmtVUEY5aHRsc3JtVkFBaUtDc0Q1eUVwbnN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MTczL0RBOUZCQUY4OUU0RjExRjE4QUZFQkFDMTYwMTFGOTcwL1prVVBGOWh0bHNy bVZBQWlLQ3NENXlFcG5zdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2xKivnohCJOAWEPiT54OjiJkVHo6NQnFp6OUwd/5L42n2/ihOQs0rjccmhTSR wzbPcXS2ACAVyhBsh31h5sTPTG4tHQnK0RTgY9dV29x/XwCaxD5F5u7/qE7x9lF4 fz+/7c2OpbZ6OKQYlQMk0H0EYUjN+IAvQk8icppPw2fmffIOpCALwkEsNG9fNxc/ G1akh0evB05HMl4vp03lolQsGhdLUG3i4MLFEWUX2lXsBmqov+Mh4AvY4SxAEbHz JkzVu0uBNGwDVCsIMFZq1ThCQBhctEbVT/v48zEdZZ9PXcW/qbqOemz6XI6FBeS/ fPYQkDzDhdqJCtT4AfyDk+yd -----END CERTIFICATE-----Generated at Sun Nov 15 01:08:23 2026 by rpki-client