$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: Ejc9WvT/tSyHYgJ7mgyGM1gj5lzSwyHaOIgue6K3B40= Subject key identifier: 18:67:07:A9:A3:FB:2E:FA:71:7C:B5:69:1E:A0:F3:70:93:EF:2B:1F Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 020E Signing time: Mon 21 Sep 2026 03:11:20 +0000 Manifest this update: Mon 21 Sep 2026 03:11:20 +0000 Manifest next update: Mon 28 Sep 2026 03:11:20 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: VE+RtUgpLdVIf+QXifcwGSX5lpgMwNRwxZP0HKsPDFc=) 2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: ViUTH93Gp8AyO1ZPVD0Xv7OzlXm6aJc97Z4QEzfdTJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Sep 21 03:11:20 2026 GMT Not After : Sep 28 03:11:20 2026 GMT Subject: CN=6ab0a058-98bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:43:21:3c:76:51:8a:5d:86:3f:80:f5:c3:8f: ef:e3:d5:33:35:7b:e5:f7:9e:d8:04:d1:0f:50:51: ae:0e:c3:97:ac:f6:e0:64:8e:09:04:d9:eb:73:6c: 97:c8:a2:48:06:cd:4f:3e:22:39:70:bc:db:72:22: f5:70:9a:70:5a:39:44:6d:11:33:6a:c1:a2:5a:0f: 72:f6:15:41:c9:83:55:a8:6b:4a:50:86:4b:1c:78: 8a:3b:79:c4:e7:2a:eb:6b:ea:61:77:fd:bc:67:82: fb:d8:7b:e7:7f:24:d2:59:06:1d:54:13:c0:02:aa: 21:4b:64:92:c0:00:c8:64:f9:c4:cd:4f:b2:3e:19: ba:5f:2b:bd:53:1d:f7:41:6c:81:cb:c5:1b:06:64: 42:c8:7c:7d:c1:61:ff:03:a2:21:06:19:fa:ee:0b: 0b:e9:86:16:3c:1a:05:fe:7c:f7:53:ab:1e:f3:67: 99:fc:c2:4a:bb:ea:0a:da:ce:58:7e:dd:b9:36:ff: c7:8e:6c:9a:17:a0:ed:ff:bb:50:f5:d0:6a:19:55: b0:ca:df:15:16:9e:48:2b:78:7c:1a:72:da:df:df: eb:28:3c:80:95:0d:7d:c3:0e:1a:32:27:4b:0d:88: d0:fe:ee:a0:f4:7d:40:2c:15:d7:0f:88:2f:b6:a5: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:67:07:A9:A3:FB:2E:FA:71:7C:B5:69:1E:A0:F3:70:93:EF:2B:1F X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:62:26:48:5f:f2:5b:12:61:49:fe:42:d8:0e:c0:59:c6:b3: d1:fb:30:ab:81:92:d1:57:07:dd:19:e3:d5:6a:f9:8c:1a:7c: 70:06:09:ad:7b:7b:be:8e:dd:19:4c:9d:52:a9:3b:a9:3e:95: cb:09:3f:aa:de:58:37:bf:21:8f:09:64:9b:03:d2:0b:c8:98: 38:a3:36:8d:e3:75:70:d9:5f:bf:1b:65:04:71:bd:da:3d:c6: 6e:c6:76:6e:03:a1:ee:18:9c:57:6e:88:6d:92:a3:bc:b1:c6: 87:fb:65:bc:12:1a:42:27:6e:d6:26:86:5b:c0:1a:8a:29:9c: c6:52:47:32:94:c1:2f:bb:a0:1e:df:e4:b2:34:cd:81:43:59: ea:7a:76:3c:48:56:e9:57:52:4d:0c:0b:40:2f:61:cd:32:7d: 77:62:29:44:1a:03:f6:dc:93:78:6c:a9:b6:6a:f6:ba:c3:30: 5d:aa:d1:92:99:44:82:ff:a7:e8:2b:9f:2f:f5:8f:fa:98:dd: 50:3b:b9:57:95:99:1c:91:e5:3d:a1:0c:b1:42:d6:d0:0d:67: fe:a9:97:a9:dc:74:f9:1e:62:64:27:59:6e:ee:3d:a4:f3:a6: 6a:2b:c9:ce:d4:d1:52:e2:3c:bd:8f:87:5b:2f:7d:f2:2b:c5: 0d:d1:fa:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjYwOTIxMDMxMTIwWhcNMjYwOTI4MDMxMTIwWjAYMRYwFAYD VQQDEw02YWIwYTA1OC05OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+kMhPHZRil2GP4D1w4/v49UzNXvl957YBNEPUFGuDsOXrPbgZI4JBNnrc2yX yKJIBs1PPiI5cLzbciL1cJpwWjlEbREzasGiWg9y9hVByYNVqGtKUIZLHHiKO3nE 5yrra+phd/28Z4L72HvnfyTSWQYdVBPAAqohS2SSwADIZPnEzU+yPhm6Xyu9Ux33 QWyBy8UbBmRCyHx9wWH/A6IhBhn67gsL6YYWPBoF/nz3U6se82eZ/MJKu+oK2s5Y ft25Nv/HjmyaF6Dt/7tQ9dBqGVWwyt8VFp5IK3h8GnLa39/rKDyAlQ19ww4aMidL DYjQ/u6g9H1ALBXXD4gvtqUCdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhnB6mj +y76cXy1aR6g83CT7ysfMB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNBOC9GOTcxNEFFNkFBRkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5 SU9Yc1lXVzFxZTQ2S0NwckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEWImSF/yWxJhSf5C2A7AWcaz0fswq4GS0VcH3Rnj1Wr5jBp8cAYJrXt7vo7d GUydUqk7qT6Vywk/qt5YN78hjwlkmwPSC8iYOKM2jeN1cNlfvxtlBHG92j3GbsZ2 bgOh7hicV26IbZKjvLHGh/tlvBIaQidu1iaGW8AaiimcxlJHMpTBL7ugHt/ksjTN gUNZ6np2PEhW6VdSTQwLQC9hzTJ9d2IpRBoD9tyTeGyptmr2usMwXarRkplEgv+n 6CufL/WP+pjdUDu5V5WZHJHlPaEMsULW0A1n/qmXqdx0+R5iZCdZbu49pPOmaivJ ztTRUuI8vY+HWy998ivFDdH6Sg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:54:50 2026 by rpki-client