$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: woVhxzrmt7SltmJgF4iCEOM96vltRuGXWQSH5/AIgp0= Subject key identifier: E7:CA:1B:EC:EA:0A:5F:D5:59:48:3D:E6:99:52:27:B4:6D:35:9A:C2 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 0220 Signing time: Sat 26 Sep 2026 16:47:54 +0000 Manifest this update: Sat 26 Sep 2026 16:47:53 +0000 Manifest next update: Sat 03 Oct 2026 16:47:53 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: aEvf6FZ4YGjp+4wWNaX/WAHxglgy0hQO/9Zv2G2uxK0=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Sep 26 16:47:53 2026 GMT Not After : Oct 3 16:47:53 2026 GMT Subject: CN=6ab7f73a-a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:24:f7:1c:b4:ea:83:e8:62:28:86:8f:44: 4d:5d:79:c7:c7:f5:d9:d7:f7:c4:18:8d:50:a3:7e: ef:7e:7b:72:c7:d4:7c:d5:df:2e:af:cd:ca:71:cf: 85:69:5f:87:ef:83:1a:d2:ae:e8:fe:2c:05:02:4e: 40:c5:a9:10:09:7a:cd:5b:65:a6:1b:71:39:10:c1: 81:e2:08:40:7b:38:ac:7f:5a:6f:85:04:b0:6f:95: e3:8b:63:53:17:98:97:3d:48:6e:18:f7:63:0e:8a: a1:02:9d:5d:4c:6f:57:dd:ff:c2:8e:77:53:d6:7a: 1c:5b:0f:d8:af:41:6e:66:6a:11:64:80:8e:db:59: ab:4f:b5:3d:53:f4:12:48:43:ea:c4:e1:f8:d6:a9: f0:e4:f7:02:fe:ab:85:cd:61:1c:8a:4e:f7:60:b9: 4a:eb:07:6a:96:60:ab:39:d6:fd:be:7e:f8:95:00: ca:6f:03:85:3b:1b:95:c8:19:11:0f:cc:45:93:1d: 96:fe:4b:55:1b:a4:36:4b:c9:75:7d:86:d5:b0:12: bc:07:99:42:45:9d:25:4c:d6:48:ac:bf:37:10:23: 0f:d1:12:9e:85:9e:79:71:63:10:2c:29:a4:19:22: 4d:2e:da:02:64:69:6f:ce:56:db:11:e5:58:9e:67: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CA:1B:EC:EA:0A:5F:D5:59:48:3D:E6:99:52:27:B4:6D:35:9A:C2 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:18:a1:5d:67:fc:6e:30:d5:88:41:1b:e8:67:65:c0:d7:ae: 92:23:54:88:7a:2c:77:3f:59:a0:3c:eb:ee:59:3e:b3:c0:94: 23:1d:b7:eb:3f:94:74:e6:fd:37:ff:5a:9b:b5:bf:16:5c:cf: 5a:24:31:9e:88:a3:df:c1:ab:51:4f:2e:ac:1f:45:64:0e:87: 14:e8:b2:2c:fe:48:04:88:87:b3:33:96:a9:99:15:ff:03:89: a5:c1:19:b1:4d:fe:48:35:8e:f6:41:0b:71:46:dd:18:e7:2d: 49:3a:38:be:6a:71:ad:ea:ef:79:1c:10:e3:77:ac:85:b6:69: 44:85:46:c5:e1:70:b5:6e:8c:77:b1:7e:ac:eb:14:08:41:8a: d1:d6:ec:47:6e:f6:e7:ed:47:8d:b4:e1:08:a2:43:a8:03:23: 8e:98:63:25:18:fd:7a:61:02:d9:e4:35:be:39:2f:cc:6d:03: b4:2c:02:44:45:0a:ee:3c:05:27:68:ba:cd:0e:b9:c8:6b:f7: c4:87:42:7e:4e:9c:87:50:48:c8:39:2f:c5:19:52:27:52:82: b9:07:47:d1:56:da:b1:7e:99:11:a6:a8:31:c5:ce:bd:f2:78: ca:89:7c:98:6a:68:e2:84:0d:36:92:2f:94:82:c3:b4:2e:cf: c3:9d:d1:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjYwOTI2MTY0NzUzWhcNMjYxMDAzMTY0NzUzWjAYMRYwFAYD VQQDEw02YWI3ZjczYS1hNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5ok9xy06oPoYiiGj0RNXXnHx/XZ1/fEGI1Qo37vfntyx9R81d8ur83Kcc+F aV+H74Ma0q7o/iwFAk5AxakQCXrNW2WmG3E5EMGB4ghAezisf1pvhQSwb5Xji2NT F5iXPUhuGPdjDoqhAp1dTG9X3f/CjndT1nocWw/Yr0FuZmoRZICO21mrT7U9U/QS SEPqxOH41qnw5PcC/quFzWEcik73YLlK6wdqlmCrOdb9vn74lQDKbwOFOxuVyBkR D8xFkx2W/ktVG6Q2S8l1fYbVsBK8B5lCRZ0lTNZIrL83ECMP0RKehZ55cWMQLCmk GSJNLtoCZGlvzlbbEeVYnme6/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfKG+zq Cl/VWUg95plSJ7RtNZrCMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYxihXWf8bjDViEEb6GdlwNeukiNUiHosdz9ZoDzr7lk+s8CUIx236z+UdOb9 N/9am7W/FlzPWiQxnoij38GrUU8urB9FZA6HFOiyLP5IBIiHszOWqZkV/wOJpcEZ sU3+SDWO9kELcUbdGOctSTo4vmpxrerveRwQ43eshbZpRIVGxeFwtW6Md7F+rOsU CEGK0dbsR2725+1HjbThCKJDqAMjjphjJRj9emEC2eQ1vjkvzG0DtCwCREUK7jwF J2i6zQ65yGv3xIdCfk6ch1BIyDkvxRlSJ1KCuQdH0VbasX6ZEaaoMcXOvfJ4yol8 mGpo4oQNNpIvlILDtC7Pw53RRQ== -----END CERTIFICATE-----Generated at Mon Sep 28 06:03:03 2026 by rpki-client