$ rpki-client -vvvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft File: zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json) Hash identifier: BZBQbc+dk1lF9H9uLOZlwIuSNJWQYNQSe4qBRfrYWaY= Subject key identifier: A4:F1:0C:7B:ED:0B:6F:0C:2C:C5:54:30:3F:ED:30:E3:7D:5A:46:FD Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 Certificate issuer: /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft Manifest number: ED Signing time: Mon 21 Sep 2026 06:23:40 +0000 Manifest this update: Mon 21 Sep 2026 06:23:40 +0000 Manifest next update: Mon 28 Sep 2026 06:23:40 +0000 Files and hashes: 1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: 39/Wt4pZ7/bI26TGRjvcvtlGyaljknrL9OyEZGGS8Zc=) 2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: a0gJVidh3CzBFwIa6hJB8PakgEK14/bCQvJ2r5FU3Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127 Validity Not Before: Sep 21 06:23:40 2026 GMT Not After : Sep 28 06:23:40 2026 GMT Subject: CN=6ab0cd6c-8e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:31:fb:1b:e3:7f:54:1e:9a:ad:49:0b:d5: f3:64:fd:7b:25:2b:be:84:1f:d2:85:c2:f8:8a:7e: 15:6c:e8:58:0b:63:77:0d:a1:73:96:b7:9c:99:68: c1:8b:e5:65:d9:22:04:e3:3f:e8:6f:4b:16:ae:e9: 6b:48:f2:f0:53:c3:e4:dc:57:89:b2:be:ba:9a:d0: 38:ee:e8:97:1a:a1:ff:8a:95:c4:45:fd:a6:d7:5d: 51:34:2c:04:78:f3:17:27:38:9b:04:71:15:fb:26: c6:0e:5f:8c:67:d6:81:85:d8:25:fe:a9:60:38:5b: 72:1b:fe:b5:dc:60:0f:4e:be:c8:05:04:9d:bc:06: 60:2c:a8:0e:37:5b:c9:7e:0c:8b:99:cd:82:ac:a3: 6f:0d:f8:0b:44:b8:3f:8d:5c:ea:cc:73:b8:34:81: e6:18:74:95:7f:eb:10:f7:1e:fc:36:7f:95:4f:b7: a0:4c:cd:c0:50:3f:29:d2:d1:3e:84:2c:b3:f8:28: b1:1e:08:2a:5c:0f:71:9a:fe:55:af:83:a1:28:41: 1f:39:54:cc:bc:d8:fd:e0:25:5e:9d:12:8b:e6:2b: 2a:ad:b6:e3:5a:90:5c:9a:96:1f:a5:5b:f3:06:76: 7e:87:af:dc:03:94:8b:42:d1:77:81:46:1f:12:b1: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F1:0C:7B:ED:0B:6F:0C:2C:C5:54:30:3F:ED:30:E3:7D:5A:46:FD X509v3 Authority Key Identifier: keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d8:5e:ae:31:23:01:c3:f5:29:74:fd:e1:3d:ee:04:71:a0: 8e:e1:95:72:3c:f6:01:d4:41:30:e7:ef:5d:1e:01:80:61:38: ce:6a:b4:89:35:bc:68:6b:a3:99:ca:a5:1f:61:25:7f:60:79: 6e:a5:98:d1:20:8f:50:ee:86:26:05:a2:51:34:6d:97:ea:65: 02:31:aa:55:ca:ef:f6:c5:17:ba:0e:5e:5e:f7:a9:48:b8:40: 5d:a5:80:20:28:5f:c1:a1:d4:a5:b1:ad:a6:8d:6f:d7:c3:59: 49:32:d4:bd:11:db:98:e0:01:69:14:3d:43:ff:86:80:e3:ad: 9c:aa:b9:09:b0:6f:ce:ff:cb:9f:3d:13:64:43:4e:09:86:03: f7:e5:85:ce:66:f3:a3:95:52:54:c1:78:2e:7b:31:e2:77:6b: 90:81:38:c5:79:a1:10:a5:fa:b3:41:87:89:88:2f:b7:76:0a: f7:8a:3a:f4:c4:e2:61:51:ac:25:f8:b6:19:21:b8:50:94:d5: c1:21:22:cc:77:5a:b3:10:98:62:0d:88:39:a7:72:3b:39:b6: a0:1a:93:2f:a3:da:c4:f1:21:58:15:6d:68:14:62:21:35:be: 8b:fe:ae:47:6f:39:d3:d1:6b:51:a0:cb:dc:86:fd:ec:aa:c3: f2:6d:a0:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyM0ExMTAvBgNVBAUTKENDNDRCNjdCRDE4RjQ1RjZFMTM3QURFNDczMTMzNUE1 NTFBNjYxMjcwHhcNMjYwOTIxMDYyMzQwWhcNMjYwOTI4MDYyMzQwWjAYMRYwFAYD VQQDEw02YWIwY2Q2Yy04ZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFcx+xvjf1Qemq1JC9XzZP17JSu+hB/ShcL4in4VbOhYC2N3DaFzlrecmWjB i+Vl2SIE4z/ob0sWrulrSPLwU8Pk3FeJsr66mtA47uiXGqH/ipXERf2m111RNCwE ePMXJzibBHEV+ybGDl+MZ9aBhdgl/qlgOFtyG/613GAPTr7IBQSdvAZgLKgON1vJ fgyLmc2CrKNvDfgLRLg/jVzqzHO4NIHmGHSVf+sQ9x78Nn+VT7egTM3AUD8p0tE+ hCyz+CixHggqXA9xmv5Vr4OhKEEfOVTMvNj94CVenRKL5isqrbbjWpBcmpYfpVvz BnZ+h6/cA5SLQtF3gUYfErE2YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTxDHvt C28MLMVUMD/tMON9Wkb9MB8GA1UdIwQYMBaAFMxEtnvRj0X24Tet5HMTNaVRpmEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIzQS9FNzVCODc4QzRD REQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJmYmhONjNrY3hNMXBWR21Z U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pFUzJlOUdQUmZiaE42M2tjeE0xcFZHbVlTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIzQS9FNzVCODc4QzRDREQxMUYwQkZBMDhGODBDNEY5QUUwMi96RVMyZTlHUFJm YmhONjNrY3hNMXBWR21ZU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV9herjEjAcP1KXT94T3uBHGgjuGVcjz2AdRBMOfvXR4BgGE4zmq0iTW8aGuj mcqlH2Elf2B5bqWY0SCPUO6GJgWiUTRtl+plAjGqVcrv9sUXug5eXvepSLhAXaWA IChfwaHUpbGtpo1v18NZSTLUvRHbmOABaRQ9Q/+GgOOtnKq5CbBvzv/Lnz0TZENO CYYD9+WFzmbzo5VSVMF4Lnsx4ndrkIE4xXmhEKX6s0GHiYgvt3YK94o69MTiYVGs Jfi2GSG4UJTVwSEizHdasxCYYg2IOadyOzm2oBqTL6PaxPEhWBVtaBRiITW+i/6u R28509FrUaDL3Ib97KrD8m2g9w== -----END CERTIFICATE-----Generated at Tue Sep 22 23:18:36 2026 by rpki-client