$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft File: zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json) Hash identifier: srqcwEy85b2M0IAX7+D7FLDODTUa13t2tZPoSm97M8g= Subject key identifier: 10:2E:64:FE:DF:55:AD:25:DF:96:7C:B0:78:CE:F0:6C:5C:C4:2C:F4 Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft Manifest number: 64 Signing time: Fri 09 Oct 2026 08:16:42 +0000 Manifest this update: Fri 09 Oct 2026 08:16:41 +0000 Manifest next update: Fri 16 Oct 2026 08:16:41 +0000 Files and hashes: 1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: DxIUO7P+rhZ0ZNRA4f9VfwbtjwPaR4J9BX5PLh1rUXY=) 2: 93D240467ABE11F18A7AD4526AA30FBC.roa (hash: w1g0+OCm5KdHfXk1uQN4NK1n9UsJBgBEWbSV3G4nl+0=) 3: 5B12B2B0915511F1A8A4FE826911F970.roa (hash: HrmVhWrBT16ZorM9C2f2yDdovxpvH6JykEKOijJcSOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Validity Not Before: Oct 9 08:16:41 2026 GMT Not After : Oct 16 08:16:41 2026 GMT Subject: CN=6ac8a2ea-befd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:4a:20:a6:0d:2f:ed:7e:d6:4b:b0:5e:2d: 9c:94:3b:11:fc:19:ef:37:a3:27:c4:f3:84:97:18: 72:82:2f:46:4a:48:04:9e:4c:dc:4f:6f:c7:f2:a6: 28:1b:10:7f:61:40:ae:93:71:9f:46:80:65:3b:36: b2:9a:09:96:61:48:e0:86:4f:f9:cd:37:41:4a:22: 53:c2:49:46:7f:4d:4d:29:21:3c:7f:aa:67:b5:45: 6b:34:bb:c2:7b:02:24:5a:25:e5:90:18:0b:7a:3e: e4:4e:51:3e:e9:b4:1c:1c:0d:7e:9e:28:30:e9:3e: 3e:f1:d2:31:85:62:16:a1:b3:f6:f2:69:a2:c8:6f: bd:3e:a7:e4:9c:4e:44:bb:5a:44:8e:73:22:7f:02: 6c:61:29:d8:0f:82:4e:02:a9:ad:39:41:a7:1f:f6: b4:ad:da:e0:33:62:96:11:3c:8d:12:ac:a6:6e:00: 75:e4:7e:91:a8:58:46:18:4c:58:43:7e:f0:20:27: 3f:d4:f8:fd:fc:c0:84:45:a9:bb:e4:e4:73:d3:ea: 04:c0:bd:44:1d:b4:0c:7a:f8:86:d7:df:50:7e:5b: b3:98:d3:d5:5b:2d:e4:b3:9c:43:c6:aa:5f:52:c2: 0e:10:27:e3:42:ec:a4:6f:e1:cd:1b:87:65:00:41: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:64:FE:DF:55:AD:25:DF:96:7C:B0:78:CE:F0:6C:5C:C4:2C:F4 X509v3 Authority Key Identifier: keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bc:b3:81:1d:26:f6:9d:e8:34:4a:0f:73:4e:91:f5:a3:1e: 21:5b:97:08:05:d6:96:48:0a:9f:b4:62:53:4a:2a:e7:b9:63: b1:27:51:05:5d:6f:88:f3:20:62:92:4f:81:c1:8a:04:10:e5: 0d:cd:d7:ae:d0:8d:ef:c6:41:ad:2a:2d:da:7f:5e:2c:da:57: fd:df:84:31:2f:33:8f:c8:74:0e:40:92:28:36:d6:32:89:96: 81:55:7f:a9:e0:e6:1e:9d:7c:10:f4:dc:69:e8:36:42:36:ab: 45:f9:cb:04:67:3a:e0:82:5a:c9:20:42:bd:e9:03:32:96:f8: 74:5b:a8:dd:18:ed:96:0d:39:21:fe:7a:44:bd:89:13:cb:17: 78:30:2f:8f:47:f3:6c:46:fc:56:4d:b4:2c:c3:f9:3d:e4:48: f4:c9:e7:78:12:f6:c9:ef:98:b3:9b:be:1f:00:9f:82:1d:97: 6b:ce:6c:0e:c3:78:dd:56:30:ad:b6:cc:09:bd:da:0e:22:02: a8:67:6c:7a:c0:78:6d:91:2c:2a:02:bf:6b:00:5c:78:27:f3: 07:f0:48:c8:25:8f:29:28:5c:25:dd:6d:87:a6:69:15:dc:8d: 81:44:51:6e:14:6b:00:7f:14:8e:23:4e:22:76:eb:49:32:30: 4a:14:bb:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjM1ODExMC8GA1UEBRMoQ0RDMTMxODUwQTI1RjBDQ0RGQzlCOUI5Q0M4RUU2NEMz QUZBNkQwODAeFw0yNjEwMDkwODE2NDFaFw0yNjEwMTYwODE2NDFaMBgxFjAUBgNV BAMTDTZhYzhhMmVhLWJlZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS4Eogpg0v7X7WS7BeLZyUOxH8Ge83oyfE84SXGHKCL0ZKSASeTNxPb8fypigb EH9hQK6TcZ9GgGU7NrKaCZZhSOCGT/nNN0FKIlPCSUZ/TU0pITx/qme1RWs0u8J7 AiRaJeWQGAt6PuROUT7ptBwcDX6eKDDpPj7x0jGFYhahs/byaaLIb70+p+ScTkS7 WkSOcyJ/AmxhKdgPgk4Cqa05Qacf9rSt2uAzYpYRPI0SrKZuAHXkfpGoWEYYTFhD fvAgJz/U+P38wIRFqbvk5HPT6gTAvUQdtAx6+IbX31B+W7OY09VbLeSznEPGql9S wg4QJ+NC7KRv4c0bh2UAQfHjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEC5k/t9V rSXflnyweM7wbFzELPQwHwYDVR0jBBgwFoAUzcExhQol8Mzfybm5zI7mTDr6bQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0M4RkQ4MDA0MzhB MjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16ZnlibTV6STdtVERyNmJR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNFeGhRb2w4TXpmeWJtNXpJN21URHI2YlFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC MzU4L0M4RkQ4MDA0MzhBMjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16 ZnlibTV6STdtVERyNmJRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7vLOBHSb2neg0Sg9zTpH1ox4hW5cIBdaWSAqftGJTSirnuWOxJ1EFXW+I8yBi kk+BwYoEEOUNzdeu0I3vxkGtKi3af14s2lf934QxLzOPyHQOQJIoNtYyiZaBVX+p 4OYenXwQ9Nxp6DZCNqtF+csEZzrgglrJIEK96QMylvh0W6jdGO2WDTkh/npEvYkT yxd4MC+PR/NsRvxWTbQsw/k95Ej0yed4EvbJ75izm74fAJ+CHZdrzmwOw3jdVjCt tswJvdoOIgKoZ2x6wHhtkSwqAr9rAFx4J/MH8EjIJY8pKFwl3W2HpmkV3I2BRFFu FGsAfxSOI04idutJMjBKFLtj -----END CERTIFICATE-----Generated at Sun Oct 11 08:03:00 2026 by rpki-client