$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: E0ZL0VysoxK4On7D/oLTR0YrBFMtUMtPWminnD3gHDg= Subject key identifier: A6:D1:9E:85:0E:74:12:13:9C:8B:47:CE:02:ED:C3:13:68:47:8F:D2 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 10B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 10A1 Signing time: Tue 22 Sep 2026 17:17:17 +0000 Manifest this update: Tue 22 Sep 2026 17:17:17 +0000 Manifest next update: Tue 29 Sep 2026 17:17:17 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: 0qhumZpVz77ft9pUfnZdRsD7MGYtx/B3OU0UQaPnpLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4278 (0x10b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Sep 22 17:17:17 2026 GMT Not After : Sep 29 17:17:17 2026 GMT Subject: CN=6ab2b81d-b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:06:7f:8e:bd:c1:35:be:9b:19:b4:05:84: 9e:4d:36:38:dc:c9:17:4e:cb:6f:93:10:5b:40:9e: 45:42:d6:cc:00:48:cf:57:6d:ef:da:42:8c:fc:94: 11:87:45:4d:b4:6a:d3:e3:b7:c4:18:10:7d:09:e0: 52:cc:a2:60:1a:1b:9a:26:0b:f2:f4:fe:73:03:48: 13:7d:e4:c9:51:53:70:11:03:50:93:c3:95:32:53: 33:35:5c:fb:2f:e3:70:ab:6e:84:b0:64:55:fc:65: d3:5c:3c:2e:e1:57:bc:01:87:59:42:84:11:c7:cf: 2e:2d:f8:5e:05:84:6f:84:f7:19:8a:7c:53:f5:da: 09:ea:f3:ed:37:b7:99:aa:65:2c:68:20:57:55:9a: de:5f:d8:a6:95:48:56:56:4f:ea:79:74:de:96:b3: 56:c3:b5:98:e3:89:8c:1d:ba:b2:bd:7a:07:5a:75: cc:f7:f7:59:10:50:41:d1:24:37:73:2f:24:f7:48: 30:9d:d7:1e:a0:66:f1:89:f9:3d:60:86:59:a2:05: 16:28:f2:e6:d4:d2:62:03:88:85:2f:7f:7b:6d:02: 56:76:7b:59:4e:76:76:30:4d:1f:90:b6:55:be:0e: 3b:f8:3c:30:72:d2:99:99:10:c7:4b:c8:04:b4:e0: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:9E:85:0E:74:12:13:9C:8B:47:CE:02:ED:C3:13:68:47:8F:D2 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:34:d7:96:62:e2:e2:0c:5c:dc:17:23:65:96:f3:d9:9c:bf: 59:cd:59:08:b0:3d:e7:de:86:c9:4b:4a:cb:d6:e4:ed:80:35: b0:73:82:cb:27:9c:46:92:86:4f:a2:67:d8:e9:53:c3:06:b3: 61:f4:c8:c4:e2:e0:a7:18:50:e4:d1:8b:7a:b6:11:b7:b2:a6: 41:37:09:ab:51:59:8d:42:ac:35:e8:a1:27:af:69:13:77:78: b9:38:7e:03:6f:19:74:c0:63:81:f0:11:b7:7c:cb:fe:3a:dc: 11:33:5b:8f:aa:88:42:58:ff:79:7b:db:a9:48:5c:5b:36:8c: ea:87:a0:bd:33:27:ef:b5:36:de:ea:d6:18:f5:5f:75:0d:d7: 6a:f8:0e:07:b5:6a:5a:17:19:29:0e:55:25:fc:be:42:6d:2e: f3:da:c4:f1:ea:17:78:ed:df:02:82:b1:e1:04:c5:bd:46:a7: 17:eb:d0:8e:04:9e:5c:f3:11:9a:b3:f0:63:00:66:7c:10:b0: ac:52:f0:e2:36:25:c3:c1:7c:a6:c6:21:65:f4:76:b6:4e:2c: f9:79:e4:5d:a6:ab:ee:50:f7:6d:72:98:d8:aa:8b:c8:d6:c2: 35:79:47:a4:7b:b5:f3:48:07:3b:06:1a:13:03:95:43:68:63: 61:88:aa:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICELYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjYwOTIyMTcxNzE3WhcNMjYwOTI5MTcxNzE3WjAYMRYwFAYD VQQDEw02YWIyYjgxZC1iOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3esGf469wTW+mxm0BYSeTTY43MkXTstvkxBbQJ5FQtbMAEjPV23v2kKM/JQR h0VNtGrT47fEGBB9CeBSzKJgGhuaJgvy9P5zA0gTfeTJUVNwEQNQk8OVMlMzNVz7 L+Nwq26EsGRV/GXTXDwu4Ve8AYdZQoQRx88uLfheBYRvhPcZinxT9doJ6vPtN7eZ qmUsaCBXVZreX9imlUhWVk/qeXTelrNWw7WY44mMHbqyvXoHWnXM9/dZEFBB0SQ3 cy8k90gwndceoGbxifk9YIZZogUWKPLm1NJiA4iFL397bQJWdntZTnZ2ME0fkLZV vg47+DwwctKZmRDHS8gEtOCtvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbRnoUO dBITnItHzgLtwxNoR4/SMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDTXlmLi4gxc3BcjZZbz2Zy/Wc1ZCLA9596GyUtKy9bk7YA1sHOCyyecRpKG T6Jn2OlTwwazYfTIxOLgpxhQ5NGLerYRt7KmQTcJq1FZjUKsNeihJ69pE3d4uTh+ A28ZdMBjgfARt3zL/jrcETNbj6qIQlj/eXvbqUhcWzaM6oegvTMn77U23urWGPVf dQ3XavgOB7VqWhcZKQ5VJfy+Qm0u89rE8eoXeO3fAoKx4QTFvUanF+vQjgSeXPMR mrPwYwBmfBCwrFLw4jYlw8F8psYhZfR2tk4s+XnkXaar7lD3bXKY2KqLyNbCNXlH pHu180gHOwYaEwOVQ2hjYYiq/w== -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:39 2026 by rpki-client