$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: /htjkGdYo/JMK99L5WRuEcakUVMOJ6S+4Oat5Ta5uD0= Subject key identifier: 02:9B:75:96:E0:BC:6A:5B:EA:C9:8A:C1:07:A5:F7:2A:D3:E8:FF:07 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 024A Signing time: Sun 11 Oct 2026 02:59:06 +0000 Manifest this update: Sun 11 Oct 2026 02:59:06 +0000 Manifest next update: Sun 18 Oct 2026 02:59:05 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: MkNkqUhEV0jjtGjWK6pEJC7LXu6++vubdTU92NvmMTA=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: MYk/tsmYPGKMW1RbLDFAli+RCLkeKhKWOLY72aWyJCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Oct 11 02:59:06 2026 GMT Not After : Oct 18 02:59:05 2026 GMT Subject: CN=6acafb7a-d8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a3:55:71:66:b2:dd:65:f2:46:56:f7:b2:81: eb:fa:a7:90:3b:a8:85:08:a3:13:7c:9a:14:0d:8f: c0:64:75:e1:f3:71:90:04:da:68:49:37:27:90:e1: dc:af:0d:d9:20:5d:fa:ff:5d:f4:3c:2f:96:9a:cd: 5e:0f:15:fe:d6:4d:2a:89:da:26:cd:72:35:da:8f: b0:e2:e5:77:e0:97:f5:0f:3a:37:d3:14:25:b9:87: e3:c6:20:c6:1c:20:b8:1b:0a:6c:3d:20:3f:b4:ae: f9:78:59:5b:e9:74:1e:3a:bd:e3:c0:7e:e7:71:6a: da:f2:b3:a1:a2:a6:db:c5:23:c4:00:f1:b0:68:23: d2:f3:5e:5b:95:cd:31:ce:fc:52:8f:9b:79:26:42: a9:e8:4e:ca:09:9f:6f:78:f7:c8:cf:72:9d:e0:12: c9:bd:bf:79:09:b3:2e:d4:08:f8:d1:9c:47:f1:3c: 8c:8e:54:45:fd:03:db:ec:a5:f9:71:3c:c0:e5:38: 0b:86:65:cb:fd:6b:ef:c8:f7:66:a8:56:89:4c:ce: c5:06:19:a9:a4:ca:36:b8:8d:f6:65:ed:e1:06:49: 05:51:f6:d6:74:d7:65:80:4d:93:ba:63:1f:6c:6d: 47:9a:02:3f:08:35:99:a1:e5:e2:4d:f6:41:27:6f: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9B:75:96:E0:BC:6A:5B:EA:C9:8A:C1:07:A5:F7:2A:D3:E8:FF:07 X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:10:db:14:4d:21:5b:07:ee:98:de:a8:2e:99:c2:0f:8d:62: aa:af:bb:c8:f6:05:35:f1:0f:c8:a6:b8:8d:4e:23:2d:b0:df: 35:85:ad:ce:a4:b5:fa:ea:56:a7:d4:97:0e:a3:99:8b:26:90: db:2c:b5:a6:25:17:fc:cd:ae:d5:f7:28:0d:aa:bc:bd:49:08: 7d:01:b2:68:2a:70:a8:69:e5:85:51:68:6c:1d:e5:75:4a:59: 4b:7c:c3:60:1e:8e:ce:56:62:50:5a:9e:8d:d1:40:38:2a:b8: 36:bd:68:2b:4b:24:e7:a1:84:f1:2e:2a:e3:6e:b1:6e:a6:d9: ea:7a:de:44:cf:8e:c9:fb:d5:be:39:4d:ed:08:e3:5f:36:0f: 96:48:c8:ed:24:b4:25:ba:99:8e:72:99:04:25:61:ed:2a:45: c6:07:00:ab:4d:65:dc:f0:0c:91:ad:f4:54:b5:b2:db:02:a2: a5:e6:bd:dc:02:cf:e2:7a:9f:f5:18:d3:d6:40:93:ae:32:06: 9d:9f:de:73:23:54:2d:17:78:a7:55:a1:c4:c0:5e:bd:18:a8: fa:a8:6c:96:1a:b5:b5:14:6b:6a:1e:d3:1f:c9:b7:77:8e:3f: b5:37:1b:5e:e0:df:ce:a7:ad:36:03:79:61:61:f7:9c:1b:99: 73:3c:08:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjYxMDExMDI1OTA2WhcNMjYxMDE4MDI1OTA1WjAYMRYwFAYD VQQDEw02YWNhZmI3YS1kOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86NVcWay3WXyRlb3soHr+qeQO6iFCKMTfJoUDY/AZHXh83GQBNpoSTcnkOHc rw3ZIF36/130PC+Wms1eDxX+1k0qidomzXI12o+w4uV34Jf1Dzo30xQluYfjxiDG HCC4GwpsPSA/tK75eFlb6XQeOr3jwH7ncWra8rOhoqbbxSPEAPGwaCPS815blc0x zvxSj5t5JkKp6E7KCZ9vePfIz3Kd4BLJvb95CbMu1Aj40ZxH8TyMjlRF/QPb7KX5 cTzA5TgLhmXL/WvvyPdmqFaJTM7FBhmppMo2uI32Ze3hBkkFUfbWdNdlgE2TumMf bG1HmgI/CDWZoeXiTfZBJ2+IUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKbdZbg vGpb6smKwQel9yrT6P8HMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmxDbFE0hWwfumN6oLpnCD41iqq+7yPYFNfEPyKa4jU4jLbDfNYWtzqS1+upW p9SXDqOZiyaQ2yy1piUX/M2u1fcoDaq8vUkIfQGyaCpwqGnlhVFobB3ldUpZS3zD YB6OzlZiUFqejdFAOCq4Nr1oK0sk56GE8S4q426xbqbZ6nreRM+OyfvVvjlN7Qjj XzYPlkjI7SS0JbqZjnKZBCVh7SpFxgcAq01l3PAMka30VLWy2wKipea93ALP4nqf 9RjT1kCTrjIGnZ/ecyNULRd4p1WhxMBevRio+qhslhq1tRRrah7TH8m3d44/tTcb XuDfzqetNgN5YWH3nBuZczwIhw== -----END CERTIFICATE-----Generated at Sun Oct 11 08:40:09 2026 by rpki-client