$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft File: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft (raw, json) Hash identifier: zCBlf6bcP742VZrUoho4d0pmTvfoCBFD6nxQfc90/qA= Subject key identifier: A2:48:DD:12:28:9D:77:10:4C:28:9C:0D:8B:4C:F5:E5:2A:8D:20:F2 Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE Certificate issuer: /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft Manifest number: 02A3 Signing time: Mon 21 Sep 2026 01:44:33 +0000 Manifest this update: Mon 21 Sep 2026 01:44:33 +0000 Manifest next update: Mon 28 Sep 2026 01:44:33 +0000 Files and hashes: 1: Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl (hash: 3vTIB1COrGNg6Ybpku7Wk+0TdkUZJG2gspR3q+eRRm8=) 2: 689F5D92AD0D11F1B7FCF9B63C11F970.roa (hash: LqFz+QpCHdb+FFI2JwU4umo63b3bsdSNGQqg9a9Guc8=) 3: EEA88E78AD0C11F1A1B76E9C3C11F970.roa (hash: /b7wdkd1tUOXcTuWD0AJo9xrePpTHVqnq+j16rznxnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE Validity Not Before: Sep 21 01:44:33 2026 GMT Not After : Sep 28 01:44:33 2026 GMT Subject: CN=6ab08c01-d18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:f1:a2:5d:2f:9f:d1:8c:f4:0c:8c:2f:f1: 9a:57:6b:c1:9a:d0:1c:f3:0e:d0:1b:b1:aa:e7:f8: a2:42:9c:4d:af:de:b5:71:5c:0f:82:83:a0:aa:4a: 22:88:4d:35:a1:fe:6d:06:db:8b:30:2f:a2:8b:dc: 19:0c:fa:9d:ca:cb:88:e0:64:d4:5f:57:62:58:7a: b8:c9:46:68:b8:dc:7f:68:19:47:46:ac:a3:cc:96: 75:f3:3e:23:3c:13:36:ad:37:8e:fb:bd:78:cc:7c: c5:ec:3e:7a:93:11:01:e5:2a:ef:c1:1c:5c:10:26: 72:5b:41:51:f8:27:e8:96:2f:91:5f:5b:89:cd:71: bc:f7:69:69:92:1a:79:c2:c3:b3:ca:b0:cd:fb:49: c4:e5:a8:b6:64:41:ec:ad:f2:96:89:54:76:bc:9d: 9e:de:4b:48:6d:13:b0:f2:cf:b5:48:f0:dc:02:17: 37:54:0d:e9:87:3f:0d:97:69:29:d4:6c:b1:b5:ad: b6:17:8c:eb:2f:63:fd:26:02:aa:9b:11:d1:af:df: 1b:ee:bd:8c:01:4b:0f:fd:f2:2d:98:12:5e:8a:50: 34:c8:23:ee:00:ca:f6:2f:74:43:5a:c5:4c:04:e3: 6e:6c:8e:9f:82:2a:a1:5d:f7:b1:62:13:83:f2:40: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:DD:12:28:9D:77:10:4C:28:9C:0D:8B:4C:F5:E5:2A:8D:20:F2 X509v3 Authority Key Identifier: keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dd:09:05:b1:64:db:7e:62:60:21:16:da:e9:1a:c3:46:b5: 08:fa:b9:3e:78:23:35:18:01:61:ba:b5:b9:02:ce:fc:f5:ed: 02:05:31:c6:f1:f1:ea:2b:f7:8c:d1:19:6a:e2:76:ce:59:9f: 09:ab:5f:44:87:41:26:dd:42:1b:70:25:64:66:25:50:a4:83: 12:d2:61:92:69:a0:f6:0a:3a:c7:c6:d7:a4:d8:5e:fa:15:bb: fc:dc:8c:b5:3f:9c:a1:86:de:07:5b:26:d2:60:f8:0e:3b:ef: 46:65:70:66:4f:05:3e:73:5c:d5:4e:bc:9f:c9:89:be:66:b8: 3c:eb:fe:32:66:63:0b:01:17:df:f6:95:ad:b1:91:ce:99:fc: 02:ae:f0:09:b3:16:cf:01:14:2e:31:25:ea:66:d5:39:4e:1d: a9:ce:62:80:de:f7:1e:77:b2:11:0a:19:b5:14:33:4a:e9:cb: ea:b6:a8:d9:9f:aa:66:9e:a6:b6:2c:5f:a8:37:92:52:dd:94: 85:4a:a4:62:7b:78:be:d6:13:ec:ad:02:27:36:6d:73:30:f5: 88:eb:14:c0:f0:6b:d4:3e:c8:b5:c7:e2:5f:5e:49:17:2b:49: 05:3e:b0:fe:03:45:c0:61:0a:66:7a:8e:b3:97:bb:0d:db:d5: f0:62:a4:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjhEOTExMC8GA1UEBRMoNjczRDZDODE4NTU4OEIwQ0YwNjY3OUMzNTRGQkJEMEND QkJCNTRERTAeFw0yNjA5MjEwMTQ0MzNaFw0yNjA5MjgwMTQ0MzNaMBgxFjAUBgNV BAMTDTZhYjA4YzAxLWQxOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnhfGiXS+f0Yz0DIwv8ZpXa8Ga0BzzDtAbsarn+KJCnE2v3rVxXA+Cg6CqSiKI TTWh/m0G24swL6KL3BkM+p3Ky4jgZNRfV2JYerjJRmi43H9oGUdGrKPMlnXzPiM8 EzatN477vXjMfMXsPnqTEQHlKu/BHFwQJnJbQVH4J+iWL5FfW4nNcbz3aWmSGnnC w7PKsM37ScTlqLZkQeyt8paJVHa8nZ7eS0htE7Dyz7VI8NwCFzdUDemHPw2XaSnU bLG1rbYXjOsvY/0mAqqbEdGv3xvuvYwBSw/98i2YEl6KUDTII+4AyvYvdENaxUwE 425sjp+CKqFd97FiE4PyQAovAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUokjdEiid dxBMKJwNi0z15SqNIPIwHwYDVR0jBBgwFoAUZz1sgYVYiwzwZnnDVPu9DMu7VN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCOEQ5L0FGNUNEQjA0Qzcw ODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6d1pubkRWUHU5RE11N1ZO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnoxc2dZVllpd3p3Wm5uRFZQdTlETXU3Vk40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC OEQ5L0FGNUNEQjA0QzcwODExRURBODc0QUU4NUM0RjlBRTAyL1p6MXNnWVZZaXd6 d1pubkRWUHU5RE11N1ZONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAK3QkFsWTbfmJgIRba6RrDRrUI+rk+eCM1GAFhurW5As789e0CBTHG8fHqK/eM 0Rlq4nbOWZ8Jq19Eh0Em3UIbcCVkZiVQpIMS0mGSaaD2CjrHxtek2F76Fbv83Iy1 P5yhht4HWybSYPgOO+9GZXBmTwU+c1zVTryfyYm+Zrg86/4yZmMLARff9pWtsZHO mfwCrvAJsxbPARQuMSXqZtU5Th2pzmKA3vced7IRChm1FDNK6cvqtqjZn6pmnqa2 LF+oN5JS3ZSFSqRie3i+1hPsrQInNm1zMPWI6xTA8GvUPsi1x+JfXkkXK0kFPrD+ A0XAYQpmeo6zl7sN29XwYqSS -----END CERTIFICATE-----Generated at Mon Sep 21 17:54:19 2026 by rpki-client