$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft File: ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json) Hash identifier: NY3BOXp3scOh+FvYQE87QIjsmfQmnGOdrgljqD96dfQ= Subject key identifier: A1:FD:95:53:A4:AD:4F:E1:2A:68:C9:A5:E7:E4:D7:81:38:1D:68:12 Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 Certificate issuer: /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Certificate serial: 359E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft Manifest number: 358E Signing time: Sun 20 Sep 2026 15:10:50 +0000 Manifest this update: Sun 20 Sep 2026 15:10:50 +0000 Manifest next update: Sun 27 Sep 2026 15:10:50 +0000 Files and hashes: 1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: 65Xqi+ebkNDlQKMbyauQgstaHgln3SB1Wrr5QljnNJU=) 2: c5DC99Q5nXQ-wa9pZ3b2yCHHwQs.asa (hash: uc1it6L4GXH/et0F43S0KFaVEPSAqsiJCfwfTJNTOnA=) 3: A620A0408F5311F18D036A0A4711F970.roa (hash: iJ0etVrTYzzUpqfi2mzMV2oUD1FSaPDsBJ4DbU7ttf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13726 (0x359e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587 Validity Not Before: Sep 20 15:10:50 2026 GMT Not After : Sep 27 15:10:50 2026 GMT Subject: CN=6aaff77a-8fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:bb:e4:63:9c:ac:61:a5:2a:fc:3d:72:86: 9f:09:e6:7c:d2:b7:81:7f:07:ff:db:05:2a:db:09: 95:79:72:cf:a5:df:cf:fc:d3:9c:79:f8:e1:9b:c9: 8d:ab:5a:74:d1:26:2b:fb:cd:5d:d9:e7:ec:77:7c: bd:a7:f9:86:92:d0:93:a1:f8:78:85:19:05:49:f9: 9c:19:2a:4d:23:91:51:71:99:fb:c4:04:6d:d0:0e: da:3e:a6:ae:68:0e:56:4f:c3:c5:7b:bd:f9:29:ce: 41:ce:da:f3:33:06:8d:4c:ba:e6:03:76:67:7a:00: 7b:3a:78:5b:fb:c3:03:67:c2:1f:98:77:ce:05:af: f6:b5:a6:3c:eb:89:27:ea:03:08:a5:0f:db:3d:c7: 0a:bf:f5:ec:66:46:17:bf:c5:a2:4a:5a:48:6c:8e: cb:5f:86:f8:b3:c1:4f:27:57:d9:91:c4:95:79:21: 91:00:db:ff:16:78:18:8b:af:7a:b7:4d:47:a6:76: 4c:c6:54:7a:e1:b8:f8:79:1f:7f:00:e4:33:85:9c: 28:28:ff:d8:7d:52:58:e5:03:ce:6f:a7:f5:07:a8: 5e:a3:fa:f7:69:45:12:3a:e1:f8:fc:7b:82:78:14: 2e:c6:62:d5:09:e6:51:a8:b6:46:0c:70:06:d1:c1: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:95:53:A4:AD:4F:E1:2A:68:C9:A5:E7:E4:D7:81:38:1D:68:12 X509v3 Authority Key Identifier: keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e2:20:83:eb:46:23:f6:37:1b:25:eb:d6:b4:3f:07:3f:bc: b7:71:08:dd:d4:93:99:35:74:7f:55:bb:db:9c:01:1e:77:71: 5c:00:c2:d0:31:66:c5:64:c4:fd:3c:d5:aa:4d:0d:e5:1a:3b: 68:8e:a0:20:73:f7:7d:46:71:3b:72:e4:09:79:62:12:cb:ef: a3:c8:ac:b7:9d:b3:df:3d:3c:bc:e3:e2:13:a6:01:29:af:0e: 97:11:64:2e:19:c8:74:7a:8b:dc:df:bc:19:b0:21:e6:ad:d3: 71:bd:ec:f2:b9:a9:eb:06:03:f0:17:f2:3a:c7:e5:ff:a6:03: 46:dd:6d:a8:b5:74:5e:44:38:f8:d5:e6:5c:b0:14:71:81:5f: fb:c8:25:39:f7:1b:b1:75:7a:01:58:7f:ed:84:ee:d5:6e:c6: 3a:09:e3:74:e1:65:79:36:99:c8:3d:ac:b2:66:13:cc:ab:d0: 29:a1:27:53:97:6f:b9:d8:b6:2a:44:f6:50:3e:b4:08:28:77: d7:2d:27:e6:80:03:96:32:9c:e9:61:22:21:4c:a7:95:f0:90: 3c:70:fe:46:36:f7:60:c4:5f:7b:3b:9f:fe:96:a5:87:a7:56: 25:a4:cf:ff:8c:0d:26:fa:be:3f:59:58:ef:92:67:6b:d9:04: 7d:7a:cc:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCNjMxMTAvBgNVBAUTKDY2RUEwRjgzQkREMzYzMkJGRjE5NDAwQjNBMUJBNkZF REZGQzU1ODcwHhcNMjYwOTIwMTUxMDUwWhcNMjYwOTI3MTUxMDUwWjAYMRYwFAYD VQQDEw02YWFmZjc3YS04ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9m75GOcrGGlKvw9coafCeZ80reBfwf/2wUq2wmVeXLPpd/P/NOcefjhm8mN q1p00SYr+81d2efsd3y9p/mGktCTofh4hRkFSfmcGSpNI5FRcZn7xARt0A7aPqau aA5WT8PFe735Kc5BztrzMwaNTLrmA3ZnegB7Onhb+8MDZ8IfmHfOBa/2taY864kn 6gMIpQ/bPccKv/XsZkYXv8WiSlpIbI7LX4b4s8FPJ1fZkcSVeSGRANv/FngYi696 t01HpnZMxlR64bj4eR9/AOQzhZwoKP/YfVJY5QPOb6f1B6heo/r3aUUSOuH4/HuC eBQuxmLVCeZRqLZGDHAG0cH15wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH9lVOk rU/hKmjJpefk14E4HWgSMB8GA1UdIwQYMBaAFGbqD4O902Mr/xlACzobpv7f/FWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0I2My9FMUIwNTRGQzFE QTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5dl9HVUFMT2h1bV90XzhW WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b1BnNzNUWXl2X0dVQUxPaHVtX3RfOFZZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0I2My9FMUIwNTRGQzFEQTcxMUUyQjY4OEVCQTEwOEIwMkNEMi9adW9QZzczVFl5 dl9HVUFMT2h1bV90XzhWWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUuIgg+tGI/Y3GyXr1rQ/Bz+8t3EI3dSTmTV0f1W725wBHndxXADC0DFmxWTE /TzVqk0N5Ro7aI6gIHP3fUZxO3LkCXliEsvvo8ist52z3z08vOPiE6YBKa8OlxFk LhnIdHqL3N+8GbAh5q3Tcb3s8rmp6wYD8BfyOsfl/6YDRt1tqLV0XkQ4+NXmXLAU cYFf+8glOfcbsXV6AVh/7YTu1W7GOgnjdOFleTaZyD2ssmYTzKvQKaEnU5dvudi2 KkT2UD60CCh31y0n5oADljKc6WEiIUynlfCQPHD+Rjb3YMRfezuf/palh6dWJaTP /4wNJvq+P1lY75Jna9kEfXrMlg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:32:29 2026 by rpki-client