$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft File: zcaQgy8tEjXavx7zF_EbaV7r2k8.mft (raw, json) Hash identifier: dKyz8U10fWDu8id9byKRlh0lvAr4TnmvmyTf8K6/hf8= Subject key identifier: 2C:AC:31:EB:F9:4E:46:B5:ED:CB:4B:B4:9F:FC:7C:4B:96:ED:6F:C9 Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft Manifest number: 87 Signing time: Sun 11 Oct 2026 08:18:55 +0000 Manifest this update: Sun 11 Oct 2026 08:18:54 +0000 Manifest next update: Sun 18 Oct 2026 08:18:54 +0000 Files and hashes: 1: zcaQgy8tEjXavx7zF_EbaV7r2k8.crl (hash: HmlFvAzR1OyAkVdXpksPDiSX6pZ1OvtBPzlEQVDPxUM=) 2: 01AB053800E611F1BE6C33EC376F56BC.roa (hash: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F Validity Not Before: Oct 11 08:18:54 2026 GMT Not After : Oct 18 08:18:54 2026 GMT Subject: CN=6acb466f-eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:1a:f9:af:d6:05:89:8a:b3:37:7e:d1:79: ec:9e:eb:61:07:0d:a8:32:01:5c:97:f4:d8:ac:a5: 31:61:e0:bd:d1:2a:13:a9:ba:82:35:e3:6d:d1:6d: c1:87:8a:97:9a:45:4f:7a:41:84:3b:bd:11:83:93: bd:28:e2:43:93:0f:8b:91:2b:2c:d5:94:10:62:20: ed:f7:64:12:e7:bc:68:62:8c:ff:6c:f2:e4:90:ac: d3:3f:cd:49:ac:04:ff:9d:0f:6e:26:e8:88:12:2c: f4:de:cb:67:e4:08:70:8d:d4:5d:d4:49:70:6b:1b: 9a:ad:6f:89:b5:61:c0:4e:66:c6:61:38:b9:86:2a: 45:18:13:e5:a8:d8:fb:1f:01:32:a8:49:9d:ec:25: 28:83:f4:bb:d6:22:b4:da:2c:f2:2b:42:2b:95:ed: 0e:5f:df:e6:11:fa:2e:35:02:23:a8:a1:cf:ac:da: c8:80:7f:8f:fb:25:81:91:2c:ab:f2:56:bf:77:2a: 88:70:5f:f5:28:79:ba:3c:b9:63:ea:2d:36:e6:01: c6:71:7b:da:94:bd:9b:5e:74:83:2a:de:71:c1:75: 70:e2:2f:3d:79:14:0e:c2:17:bf:f8:90:b1:f3:52: 52:5c:ff:fd:f7:4e:86:63:5e:e5:53:c5:0c:88:f6: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:31:EB:F9:4E:46:B5:ED:CB:4B:B4:9F:FC:7C:4B:96:ED:6F:C9 X509v3 Authority Key Identifier: keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:54:57:5c:d8:22:be:52:04:45:6d:bf:2d:e4:03:36:e6:4e: 5d:d2:3f:2d:3e:b0:87:e6:8b:f0:95:d5:5b:36:e6:d2:39:a5: c8:6a:7e:a3:08:63:0d:c3:5c:73:21:1b:f2:50:04:86:6d:50: 73:1c:ca:be:c3:10:91:47:62:5e:eb:c9:1f:e9:17:b4:6b:55: 7a:b4:43:d0:ab:78:17:07:d0:16:c6:a4:61:89:5f:e9:8c:27: 17:48:ce:bc:db:89:7a:4f:00:d1:02:04:43:ec:e3:bf:19:63: d1:a9:cd:6c:5a:e5:48:00:87:7f:46:fe:11:e0:44:a8:bf:b7: e0:93:75:98:fc:48:d8:9c:95:eb:26:e2:1a:e9:7c:02:66:73: 7f:23:a4:ef:7b:b4:86:a9:9c:67:12:82:26:dc:b9:e4:ce:3b: c5:8a:e1:c9:2b:71:10:99:79:e7:d9:66:23:f2:37:8a:4f:be: a7:fe:3f:8d:01:f5:07:5b:bd:5b:42:f0:58:3d:17:12:31:01: d7:7a:fb:c1:8a:43:9d:ad:92:90:08:c3:47:77:2b:4e:29:87: 08:43:3e:e6:16:05:1e:89:08:63:34:5b:9a:a3:9d:98:89:50: af:b0:9e:a7:05:0b:b2:b5:36:ad:39:bc:fd:8f:a6:6a:a5:df: 32:1e:79:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZEMDIxMTAvBgNVBAUTKENEQzY5MDgzMkYyRDEyMzVEQUJGMUVGMzE3RjExQjY5 NUVFQkRBNEYwHhcNMjYxMDExMDgxODU0WhcNMjYxMDE4MDgxODU0WjAYMRYwFAYD VQQDEw02YWNiNDY2Zi1lZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3sa+a/WBYmKszd+0XnsnuthBw2oMgFcl/TYrKUxYeC90SoTqbqCNeNt0W3B h4qXmkVPekGEO70Rg5O9KOJDkw+LkSss1ZQQYiDt92QS57xoYoz/bPLkkKzTP81J rAT/nQ9uJuiIEiz03stn5AhwjdRd1ElwaxuarW+JtWHATmbGYTi5hipFGBPlqNj7 HwEyqEmd7CUog/S71iK02izyK0Irle0OX9/mEfouNQIjqKHPrNrIgH+P+yWBkSyr 8la/dyqIcF/1KHm6PLlj6i025gHGcXvalL2bXnSDKt5xwXVw4i89eRQOwhe/+JCx 81JSXP/9906GY17lU8UMiPZ0hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCysMev5 Tka17ctLtJ/8fEuW7W/JMB8GA1UdIwQYMBaAFM3GkIMvLRI12r8e8xfxG2le69pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkQwMi9FMUE2NkYxODAw REUxMUYxQUQ4NEFEODQ3NTZGNTZCQy96Y2FRZ3k4dEVqWGF2eDd6Rl9FYmFWN3Iy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkQwMi9FMUE2NkYxODAwREUxMUYxQUQ4NEFEODQ3NTZGNTZCQy96Y2FRZ3k4dEVq WGF2eDd6Rl9FYmFWN3IyazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjlRXXNgivlIERW2/LeQDNuZOXdI/LT6wh+aL8JXVWzbm0jmlyGp+owhjDcNc cyEb8lAEhm1QcxzKvsMQkUdiXuvJH+kXtGtVerRD0Kt4FwfQFsakYYlf6YwnF0jO vNuJek8A0QIEQ+zjvxlj0anNbFrlSACHf0b+EeBEqL+34JN1mPxI2JyV6ybiGul8 AmZzfyOk73u0hqmcZxKCJty55M47xYrhyStxEJl559lmI/I3ik++p/4/jQH1B1u9 W0LwWD0XEjEB13r7wYpDna2SkAjDR3crTimHCEM+5hYFHokIYzRbmqOdmIlQr7Ce pwULsrU2rTm8/Y+maqXfMh55tQ== -----END CERTIFICATE-----Generated at Sun Oct 11 22:07:32 2026 by rpki-client