$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: jUVHlZAbBYgj0+9E3JqvaSXxhj1/97mZICtdH0WMSSc= Subject key identifier: E7:43:36:72:75:DE:10:EA:0E:07:70:77:73:54:5A:0C:CD:A1:1B:C1 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1215 Signing time: Tue 06 Oct 2026 17:11:46 +0000 Manifest this update: Tue 06 Oct 2026 17:11:45 +0000 Manifest next update: Tue 13 Oct 2026 17:11:45 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: xroZ7ahcHsNs1ErGh9Cuoc27icEpFDTlZDz0j/pObc8=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Oct 6 17:11:45 2026 GMT Not After : Oct 13 17:11:45 2026 GMT Subject: CN=6ac52bd2-8e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ac:4b:58:0b:6e:39:d9:f6:db:16:32:22:ac: 57:b4:92:b6:a4:08:69:22:d6:5f:47:fb:85:af:61: 4c:2e:c3:7e:e9:d5:ca:f2:89:f3:56:6e:53:1e:2f: 60:64:04:8c:7e:51:5a:4c:cf:16:ef:67:30:02:d9: 82:8f:42:9e:80:0c:22:00:27:26:de:ca:9d:61:1a: cc:62:70:c4:52:ea:90:c3:02:a1:39:4a:27:60:3d: 11:6c:e9:b6:25:0e:bd:7f:40:40:57:fc:6d:7a:fe: 30:70:1d:2d:4c:b0:70:47:8d:58:dd:8c:69:e6:d9: 74:4c:d9:52:f3:06:41:79:10:e3:17:7c:0f:f4:ea: cc:c5:76:14:be:cb:69:d2:cf:98:a5:58:c9:b7:9d: 80:07:eb:f5:4b:e0:fd:a1:ed:df:22:8d:9e:34:31: 26:54:6f:73:78:bb:8f:eb:ca:58:8a:dd:af:fc:38: 1c:95:32:c6:81:de:2c:b6:91:9a:2b:9c:87:c7:2c: 2b:3e:f9:ed:c9:9c:cb:1f:c7:93:06:6e:b0:d1:92: 3b:10:8a:e1:73:2b:b1:31:cf:1d:1f:bd:b8:5f:a8: a5:ff:f6:08:db:f4:b1:d4:42:ef:bd:21:5d:b6:a7: ba:ea:78:9f:d6:9c:e8:6c:3a:38:83:f0:da:71:40: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:36:72:75:DE:10:EA:0E:07:70:77:73:54:5A:0C:CD:A1:1B:C1 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:ce:fc:7c:bf:a7:ac:5a:c0:a7:11:1a:08:f8:c7:db:28: b6:a2:b5:f6:2d:fc:66:af:89:81:1b:86:66:e5:52:bc:af:87: 92:2d:1b:75:2c:59:fe:a5:10:1e:37:ee:c1:27:16:99:1a:a9: 1f:d1:09:fe:94:43:6f:4b:d5:91:ce:34:6e:2c:e3:fb:c2:79: 32:88:bf:74:4d:84:95:37:37:f7:b2:5f:42:0f:e5:89:0b:d1: 40:91:b6:17:15:98:6d:7c:71:16:7d:05:f8:88:6e:2e:3f:a6: b3:ae:2d:3e:b0:00:28:b4:35:52:80:a7:93:af:b4:e1:0a:c2: b8:bd:21:08:7d:20:c9:b6:f0:8d:fa:f4:eb:3e:e7:4d:36:95: ca:81:8c:10:3d:42:ec:39:f9:e6:32:e9:76:78:96:f6:bf:4a: 50:0c:5f:da:cd:d3:14:55:a1:c7:cc:66:c9:28:a6:73:1e:2e: df:17:af:bf:32:22:67:ad:77:ba:ee:b7:6d:19:05:75:46:5e: 6b:a8:8a:76:26:1c:92:83:8a:66:10:72:1c:d1:95:f0:f5:a9: 9e:16:02:85:8e:13:cb:3f:c7:32:1f:38:48:fa:97:80:46:5a: ee:d2:3b:4d:d1:e9:96:32:da:d2:da:44:1e:78:d7:13:7d:86: bc:3f:f3:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYxMDA2MTcxMTQ1WhcNMjYxMDEzMTcxMTQ1WjAYMRYwFAYD VQQDEw02YWM1MmJkMi04ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qxLWAtuOdn22xYyIqxXtJK2pAhpItZfR/uFr2FMLsN+6dXK8onzVm5THi9g ZASMflFaTM8W72cwAtmCj0KegAwiACcm3sqdYRrMYnDEUuqQwwKhOUonYD0RbOm2 JQ69f0BAV/xtev4wcB0tTLBwR41Y3Yxp5tl0TNlS8wZBeRDjF3wP9OrMxXYUvstp 0s+YpVjJt52AB+v1S+D9oe3fIo2eNDEmVG9zeLuP68pYit2v/DgclTLGgd4stpGa K5yHxywrPvntyZzLH8eTBm6w0ZI7EIrhcyuxMc8dH724X6il//YI2/Sx1ELvvSFd tqe66nif1pzobDo4g/DacUD7rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdDNnJ1 3hDqDgdwd3NUWgzNoRvBMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIDLO/Hy/p6xawKcRGgj4x9sotqK19i38Zq+JgRuGZuVSvK+Hki0bdSxZ/qUQ HjfuwScWmRqpH9EJ/pRDb0vVkc40bizj+8J5Moi/dE2ElTc397JfQg/liQvRQJG2 FxWYbXxxFn0F+IhuLj+ms64tPrAAKLQ1UoCnk6+04QrCuL0hCH0gybbwjfr06z7n TTaVyoGMED1C7Dn55jLpdniW9r9KUAxf2s3TFFWhx8xmySimcx4u3xevvzIiZ613 uu63bRkFdUZea6iKdiYckoOKZhByHNGV8PWpnhYChY4Tyz/HMh84SPqXgEZa7tI7 TdHpljLa0tpEHnjXE32GvD/zwQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:33:13 2026 by rpki-client