$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: pl2ALaMVwczWaMrL+PPRLzA1Bo5q0B0mY70CMAk4Igs= Subject key identifier: AF:AB:51:49:D6:D5:12:7A:40:A9:C2:95:14:75:04:93:C7:8C:51:09 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 01AC Signing time: Sun 15 Nov 2026 04:22:58 +0000 Manifest this update: Sun 15 Nov 2026 04:22:58 +0000 Manifest next update: Sun 22 Nov 2026 04:22:58 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: yrCvJFgt+cAzKnDjkdmj3GuIg0JpojFB+dTtvg6AdmE=) 2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Nov 15 04:22:58 2026 GMT Not After : Nov 22 04:22:58 2026 GMT Subject: CN=6af933a2-2e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:c3:ca:29:28:0f:19:a7:e2:a4:7c:c3:25: 8f:6c:d5:d0:8e:95:da:f9:36:fd:67:63:a4:09:29: 1b:47:a1:da:20:de:62:56:5c:c6:07:f3:60:49:65: 48:49:f0:b8:89:d1:84:6b:49:cb:6a:29:27:a9:77: ae:2f:b1:19:3c:0c:9f:bf:92:e9:76:aa:93:51:ed: 94:3c:94:3c:12:fb:c3:d7:b3:8f:eb:13:4e:bc:82: d0:33:81:86:1b:f5:00:70:55:05:7a:73:5a:45:b4: e9:1f:8e:dc:7d:c7:0e:c2:ac:f8:31:91:a4:5a:96: 93:0e:8f:7e:e4:c5:97:f0:89:f0:e7:03:81:88:c4: 0c:14:db:b5:24:0a:3b:9f:a2:85:e5:11:47:bb:ed: 03:bd:0a:dc:2a:f6:40:5f:27:ce:4f:dd:4a:ba:73: a3:2f:92:9c:c2:97:2a:8c:28:94:d7:a3:3f:35:30: 73:9f:38:54:00:26:71:32:6f:de:3a:1b:fe:61:e5: 0d:92:e3:f2:42:9c:38:16:12:b6:d6:ca:ea:7d:7f: f0:12:67:00:9f:0b:e4:36:0d:33:4c:93:0d:05:59: 09:33:60:6e:57:ca:25:3b:a6:78:ca:48:5d:6e:6d: 0f:5f:07:3e:14:9b:2b:20:f6:ca:f5:0d:18:07:e8: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:51:49:D6:D5:12:7A:40:A9:C2:95:14:75:04:93:C7:8C:51:09 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:da:76:19:0c:71:a8:f6:3c:4c:25:9b:78:a8:c6:86:bc:1c: 29:19:48:7d:12:85:68:b7:84:21:37:3b:1c:dd:3a:e1:2c:eb: 07:91:9e:64:7b:0d:a3:64:01:ca:66:06:89:b1:1c:1c:78:f0: 26:11:1c:44:74:de:15:e8:0c:28:44:24:63:52:ed:dd:48:0c: 5a:53:b7:10:1f:ff:54:2a:05:25:b7:98:e3:df:1e:bb:f1:f3: b4:5e:f9:b3:15:82:32:9d:17:28:3b:24:ff:de:62:a3:a0:3a: 07:4d:68:69:84:5f:d3:ea:e8:14:dd:1b:50:8e:7c:b3:f7:1f: 1b:35:26:a2:26:37:94:14:86:e1:2b:4f:fa:8c:0d:d7:cf:30: cc:4d:9b:77:fe:30:c2:f0:67:a9:b3:4d:75:5c:70:d0:7e:c9: 94:38:82:df:24:ca:d6:f1:c3:0b:05:1f:53:36:03:84:43:7d: 9d:21:f6:17:60:ea:08:41:1a:47:c1:28:23:f9:c4:c0:35:9c: b3:71:ee:34:7b:24:b3:f5:2e:a8:47:7a:04:c0:ca:b0:16:17: 2f:92:22:53:8f:45:d0:84:24:48:8c:64:ce:71:76:19:3b:b5: 1d:a7:eb:d3:c1:aa:ee:45:e6:26:03:60:fd:84:8c:3b:cd:9f: 19:37:d5:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjYxMTE1MDQyMjU4WhcNMjYxMTIyMDQyMjU4WjAYMRYwFAYD VQQDEw02YWY5MzNhMi0yZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB/DyikoDxmn4qR8wyWPbNXQjpXa+Tb9Z2OkCSkbR6HaIN5iVlzGB/NgSWVI SfC4idGEa0nLaiknqXeuL7EZPAyfv5LpdqqTUe2UPJQ8EvvD17OP6xNOvILQM4GG G/UAcFUFenNaRbTpH47cfccOwqz4MZGkWpaTDo9+5MWX8Inw5wOBiMQMFNu1JAo7 n6KF5RFHu+0DvQrcKvZAXyfOT91KunOjL5KcwpcqjCiU16M/NTBznzhUACZxMm/e Ohv+YeUNkuPyQpw4FhK21srqfX/wEmcAnwvkNg0zTJMNBVkJM2BuV8olO6Z4ykhd bm0PXwc+FJsrIPbK9Q0YB+jh9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+rUUnW 1RJ6QKnClRR1BJPHjFEJMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqdp2GQxxqPY8TCWbeKjGhrwcKRlIfRKFaLeEITc7HN064SzrB5GeZHsNo2QB ymYGibEcHHjwJhEcRHTeFegMKEQkY1Lt3UgMWlO3EB//VCoFJbeY498eu/HztF75 sxWCMp0XKDsk/95io6A6B01oaYRf0+roFN0bUI58s/cfGzUmoiY3lBSG4StP+owN 188wzE2bd/4wwvBnqbNNdVxw0H7JlDiC3yTK1vHDCwUfUzYDhEN9nSH2F2DqCEEa R8EoI/nEwDWcs3HuNHsks/UuqEd6BMDKsBYXL5IiU49F0IQkSIxkznF2GTu1Hafr 08Gq7kXmJgNg/YSMO82fGTfVtA== -----END CERTIFICATE-----Generated at Sun Nov 15 23:52:29 2026 by rpki-client