$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: bxH/IwDvBKIMaAIkl5FkPNg4RuoLGbqUlWlOQj5InT4= Subject key identifier: AA:37:4F:5B:EA:44:26:B2:28:F3:6F:7F:0D:5B:0E:28:20:B9:09:31 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0599 Signing time: Sun 08 Nov 2026 23:02:57 +0000 Manifest this update: Sun 08 Nov 2026 23:02:56 +0000 Manifest next update: Sun 15 Nov 2026 23:02:56 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: MCAfsmceapbf6oxtZd3ZxtD8Kud4y93OxYEEeObqmps=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: xp7/pdQMYk2t7u02214OzsMR/nZgv77MRjYz0MrJbEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Nov 8 23:02:56 2026 GMT Not After : Nov 15 23:02:56 2026 GMT Subject: CN=6af0ffa1-701f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:65:d6:7b:05:66:bc:bf:8c:da:6b:df:cf: 6a:b2:15:00:d6:5e:01:55:94:19:c7:d2:cc:72:ef: 36:e9:7d:33:fc:f1:ad:4d:c7:19:9a:06:c9:60:7c: 34:95:74:6d:5c:9b:08:4e:2a:73:4a:4c:f1:8c:83: cf:4a:6f:1e:b4:a7:6b:9c:30:b7:a1:8c:2b:c1:e1: cb:f9:7b:7f:b8:b3:4c:cb:ca:ab:27:ba:3f:04:12: b3:e1:23:1b:c2:25:8e:c2:3b:ec:6d:37:b9:53:08: e8:29:dd:1a:c7:8f:b3:fd:79:26:83:8d:0f:fe:63: 4a:b0:40:e2:ef:3e:db:25:4f:2e:fa:2f:b1:a6:4b: 26:3a:c3:e6:69:6d:97:08:97:59:90:98:d4:8b:ad: 9e:27:a8:db:13:66:54:8f:ee:db:ee:d7:87:f5:4a: 0f:26:bc:ad:28:b1:45:91:29:19:d1:33:4f:8b:08: 2f:b7:fa:0b:dd:97:e0:67:a8:c6:8b:88:1c:0f:37: ef:7c:af:03:cc:12:69:78:ad:e9:b1:0f:68:7d:10: 8a:aa:9a:0e:6a:82:cd:ec:9d:e5:08:70:3a:1d:ae: 03:ed:5e:95:25:c0:bf:71:aa:ae:4b:6e:e6:13:96: 3b:3c:36:b2:e2:25:1c:a7:12:60:fa:d0:15:18:16: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:37:4F:5B:EA:44:26:B2:28:F3:6F:7F:0D:5B:0E:28:20:B9:09:31 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c6:87:2c:73:c6:c1:b1:8f:80:68:24:01:49:60:eb:5e:61: da:bc:e8:f5:35:fb:0d:db:e6:c5:a3:ce:a9:38:c1:66:6f:60: 13:1f:24:f3:19:c1:cf:b3:c6:1d:78:ea:42:3d:a9:b0:1d:26: a0:db:a8:c5:21:9c:eb:9b:01:0b:5a:72:b6:da:22:d7:e2:5a: 6f:a1:27:e3:1f:41:6a:5a:d2:5e:4c:5a:18:ae:dd:90:62:18: 41:56:7f:d3:d2:6d:61:c2:b2:dc:60:27:d9:be:3c:b3:cc:60: 76:34:29:7e:af:a2:e2:85:2e:b5:5c:42:c7:a9:f0:7c:8b:9e: af:ec:12:c9:f9:79:04:81:5e:83:71:77:4f:21:8c:31:29:ab: a7:ed:e6:cb:98:97:cf:75:6b:d4:07:68:c5:1f:ae:f3:68:83: e0:7b:17:15:43:6d:b7:91:cf:31:3a:c5:f1:a3:97:73:2c:0d: 89:f1:c8:e5:9d:79:09:3c:d5:2e:59:5d:31:53:e4:ce:64:13: 2c:dc:1a:ff:69:28:b0:34:09:d4:bb:4a:c5:f9:d3:42:c8:e8: 90:46:99:73:a5:8c:8c:55:42:01:56:15:93:c7:e7:69:20:f7: d2:d9:82:59:61:9c:80:68:ae:73:8b:82:d9:a3:7e:6a:41:20: a2:d2:75:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjYxMTA4MjMwMjU2WhcNMjYxMTE1MjMwMjU2WjAYMRYwFAYD VQQDEw02YWYwZmZhMS03MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGdl1nsFZry/jNpr389qshUA1l4BVZQZx9LMcu826X0z/PGtTccZmgbJYHw0 lXRtXJsITipzSkzxjIPPSm8etKdrnDC3oYwrweHL+Xt/uLNMy8qrJ7o/BBKz4SMb wiWOwjvsbTe5UwjoKd0ax4+z/Xkmg40P/mNKsEDi7z7bJU8u+i+xpksmOsPmaW2X CJdZkJjUi62eJ6jbE2ZUj+7b7teH9UoPJrytKLFFkSkZ0TNPiwgvt/oL3ZfgZ6jG i4gcDzfvfK8DzBJpeK3psQ9ofRCKqpoOaoLN7J3lCHA6Ha4D7V6VJcC/caquS27m E5Y7PDay4iUcpxJg+tAVGBZZoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKo3T1vq RCayKPNvfw1bDigguQkxMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbsaHLHPGwbGPgGgkAUlg615h2rzo9TX7DdvmxaPOqTjBZm9gEx8k8xnBz7PG HXjqQj2psB0moNuoxSGc65sBC1pyttoi1+Jab6En4x9BalrSXkxaGK7dkGIYQVZ/ 09JtYcKy3GAn2b48s8xgdjQpfq+i4oUutVxCx6nwfIuer+wSyfl5BIFeg3F3TyGM MSmrp+3my5iXz3Vr1AdoxR+u82iD4HsXFUNtt5HPMTrF8aOXcywNifHI5Z15CTzV LlldMVPkzmQTLNwa/2kosDQJ1LtKxfnTQsjokEaZc6WMjFVCAVYVk8fnaSD30tmC WWGcgGiuc4uC2aN+akEgotJ15g== -----END CERTIFICATE-----Generated at Tue Nov 10 17:17:11 2026 by rpki-client