$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: ajUedN1KREnCzRQcLnGCswyLapfAx+5m8v2hDHnXvkE= Subject key identifier: B0:98:A2:50:3C:0A:69:00:62:93:7D:AA:90:DA:78:76:5B:0B:87:DB Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0E0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0E03 Signing time: Tue 06 Oct 2026 17:56:08 +0000 Manifest this update: Tue 06 Oct 2026 17:56:07 +0000 Manifest next update: Tue 13 Oct 2026 17:56:07 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: C79EJk7oUggnoX9jr3slnJn/bouDdXh4F1MIbeYp8Do=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: DgN4HYG0Ge4rNgYzbp7pU5juBkf2LCQihGrPJdM6ERY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3597 (0xe0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Oct 6 17:56:07 2026 GMT Not After : Oct 13 17:56:07 2026 GMT Subject: CN=6ac53637-33ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:50:31:76:46:e2:b4:4b:bd:be:39:dc:6b:94: ba:ce:d4:02:e7:28:15:2b:e5:ad:1a:b8:7f:b9:7e: 1c:bf:f5:c8:95:37:f3:b4:3e:fd:d8:3e:d5:78:b0: df:a9:cf:96:34:31:57:9a:5a:3a:a3:28:20:2b:b6: a7:dd:a9:e0:e2:2d:89:a1:cd:be:9d:8c:e1:00:c8: 98:b8:63:59:e9:88:39:f2:b7:5f:4d:44:63:d2:02: 5e:0e:89:f8:31:aa:ab:39:65:b1:89:99:d4:e7:f6: 72:9a:ae:13:be:27:84:36:5f:7f:50:37:80:63:47: 31:18:d2:e9:e4:d8:7c:e2:1c:32:1a:c8:50:18:5f: 43:42:dc:4a:e7:f3:ad:de:8e:9b:57:ab:0a:97:ec: af:97:58:32:ee:c7:55:4b:f9:e9:31:1b:a7:58:64: b3:40:e7:b1:f7:0c:a4:ac:6e:8e:ca:ab:1c:17:af: 74:d8:54:b1:2f:81:7e:36:da:0c:e1:aa:f2:2e:90: 4e:03:62:3f:60:d3:e0:59:35:02:35:d4:76:d8:e6: 6d:a1:ec:2d:6c:59:17:1d:33:91:9d:e9:40:cf:19: a6:e9:91:50:e0:5e:53:fc:de:2a:9e:25:29:db:eb: dc:23:48:c2:23:94:df:05:fa:1e:74:3f:7e:a8:b1: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:98:A2:50:3C:0A:69:00:62:93:7D:AA:90:DA:78:76:5B:0B:87:DB X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9f:78:53:95:9e:6d:93:73:d8:62:d9:e4:8f:be:18:d5:89: 14:60:8f:42:35:ba:08:dd:2b:be:64:69:49:fc:43:48:20:69: 3b:fb:9f:e9:0e:56:c8:05:ac:6b:e9:11:04:b0:33:2f:fe:a5: 78:a7:cc:97:b5:b7:6f:51:d3:b8:b9:6a:f1:81:6d:dc:6f:d2: b5:eb:dd:70:3f:e9:1c:69:eb:e5:3e:92:07:54:34:28:9b:07: 0c:f4:33:7e:8c:fa:4a:79:4e:c6:b6:5a:6a:ba:95:c5:e7:ec: 5b:f1:95:c3:75:5c:b6:74:44:27:6d:9d:66:e2:a7:04:89:fb: 8b:8f:78:4b:6b:64:92:ab:91:60:11:62:88:61:e6:3d:0a:fc: e1:ed:05:8e:11:fa:e8:e9:08:fb:45:4b:2b:8b:eb:23:6b:a4: 1b:d2:af:bf:85:a4:99:a1:9d:06:e7:f5:c9:f3:71:5c:24:1b: e9:f0:61:93:16:13:0e:39:25:f9:9c:08:ad:f6:7f:0f:c9:b3: 40:b2:fe:47:42:d4:e3:f2:16:61:b1:7d:9c:82:2d:88:9b:c3: 9e:ce:03:8e:a8:30:43:9f:08:0f:68:fe:4f:34:3b:7e:e6:02: 95:eb:1f:90:23:ba:9c:a1:05:26:06:30:17:9b:0c:87:0b:55: 69:00:d3:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYxMDA2MTc1NjA3WhcNMjYxMDEzMTc1NjA3WjAYMRYwFAYD VQQDEw02YWM1MzYzNy0zM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lAxdkbitEu9vjnca5S6ztQC5ygVK+WtGrh/uX4cv/XIlTfztD792D7VeLDf qc+WNDFXmlo6oyggK7an3ang4i2Joc2+nYzhAMiYuGNZ6Yg58rdfTURj0gJeDon4 MaqrOWWxiZnU5/Zymq4TvieENl9/UDeAY0cxGNLp5Nh84hwyGshQGF9DQtxK5/Ot 3o6bV6sKl+yvl1gy7sdVS/npMRunWGSzQOex9wykrG6OyqscF6902FSxL4F+NtoM 4aryLpBOA2I/YNPgWTUCNdR22OZtoewtbFkXHTORnelAzxmm6ZFQ4F5T/N4qniUp 2+vcI0jCI5TfBfoedD9+qLGXzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCYolA8 CmkAYpN9qpDaeHZbC4fbMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZp94U5WebZNz2GLZ5I++GNWJFGCPQjW6CN0rvmRpSfxDSCBpO/uf6Q5WyAWs a+kRBLAzL/6leKfMl7W3b1HTuLlq8YFt3G/StevdcD/pHGnr5T6SB1Q0KJsHDPQz foz6SnlOxrZaarqVxefsW/GVw3VctnREJ22dZuKnBIn7i494S2tkkquRYBFiiGHm PQr84e0FjhH66OkI+0VLK4vrI2ukG9Kvv4WkmaGdBuf1yfNxXCQb6fBhkxYTDjkl +ZwIrfZ/D8mzQLL+R0LU4/IWYbF9nIItiJvDns4DjqgwQ58ID2j+TzQ7fuYClesf kCO6nKEFJgYwF5sMhwtVaQDTGg== -----END CERTIFICATE-----Generated at Thu Oct 8 02:15:06 2026 by rpki-client